
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft
File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json)
Hash identifier: B1iXu/WP8qIqOHN3RfHTxaP22quynItTc7/w3JywDHg=
Subject key identifier: 94:BB:8D:FE:04:3A:25:33:DF:0F:01:89:52:A5:64:74:5D:3E:03:B6
Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05
Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05
Certificate serial: 01ACCE72119197DD37764EAECF6A19896C0DFD75
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft
Manifest number: 032A
Signing time: Fri 31 Jan 2025 08:21:18 +0000
Manifest this update: Fri 31 Jan 2025 08:16:18 +0000
Manifest next update: Mon 03 Feb 2025 10:10:18 +0000
Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: DH7QV88PTQiGqyLH8/L+pQ6VL1/sKXRG19c3SfASYDI=)
2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: IW8bQszHsJQaspCBHwRuV25Qt9b0hSoRJR3AAA3IqeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ac:ce:72:11:91:97:dd:37:76:4e:ae:cf:6a:19:89:6c:0d:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05
Validity
Not Before: Jan 31 08:16:18 2025 GMT
Not After : Feb 3 10:10:18 2025 GMT
Subject: CN=94BB8DFE043A2533DF0F018952A564745D3E03B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:e3:13:2f:2a:38:7d:4f:2e:d5:2b:e8:a9:
ab:f0:c4:97:e4:47:48:ce:e7:82:ab:06:0c:3e:5a:
7b:90:46:9e:01:b3:d4:9a:d7:15:68:60:59:5b:55:
f5:63:9b:ab:4f:8d:c4:f8:20:83:a0:e2:9f:03:3f:
94:13:db:f0:6d:2b:45:1d:53:cc:08:3b:72:7a:ba:
38:c8:4d:c5:1b:c8:91:a7:40:e2:74:15:01:48:56:
5c:91:0f:70:a9:f9:ee:35:91:d7:22:5a:25:66:9d:
c3:7a:8e:5f:83:a2:ae:ad:09:55:32:fe:ba:e4:0d:
dc:41:35:f1:c8:5d:0e:b2:82:fe:23:0f:c7:d8:47:
12:ed:a1:dc:f9:c8:cf:05:f5:29:0a:ec:98:f4:60:
ea:e4:dd:1e:35:78:9a:b1:d9:58:c8:ee:6b:33:ad:
df:7b:4d:10:80:db:b0:3e:10:92:c1:f8:57:28:4f:
44:9b:d0:60:f9:d8:4a:50:b7:cc:9f:f2:4e:69:67:
f8:c0:d6:c6:ef:96:f4:ef:66:fe:e1:ea:e7:77:ce:
ee:77:d9:75:f5:9e:b2:73:fa:33:87:4e:dc:ad:55:
fe:d6:1d:6d:5c:38:ea:2b:d5:64:c9:37:ac:ba:53:
a6:2e:00:be:be:0c:a8:95:01:67:f0:25:b3:89:09:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:8D:FE:04:3A:25:33:DF:0F:01:89:52:A5:64:74:5D:3E:03:B6
X509v3 Authority Key Identifier:
keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:3b:a3:c7:7e:ba:00:14:97:af:1c:4e:1b:e4:15:5c:64:
04:33:7c:40:94:49:2c:fb:30:2a:f3:71:92:16:ff:37:98:76:
55:fc:05:9b:cd:21:64:8e:8f:be:9c:4c:7e:4c:99:10:4d:d3:
3e:90:ed:12:59:6e:c2:d5:33:54:65:a4:3b:b4:85:6f:5a:06:
a5:6d:d6:a4:ac:9c:f0:0d:f1:b1:68:74:00:a1:3b:ee:06:76:
9d:1c:b6:88:8c:45:75:b8:fb:c9:54:f9:d4:3b:fa:f4:f8:8c:
d0:b9:5d:42:24:cc:87:91:45:ef:e5:b7:5a:1a:40:5d:4f:85:
58:3f:51:94:8f:66:f9:20:91:be:64:a7:03:07:22:89:6d:2c:
3b:38:04:e6:9b:26:23:2b:3e:3d:8d:47:42:14:4e:fd:d8:77:
fe:4b:7e:b1:fa:57:82:4c:95:45:fe:69:9c:2b:f9:d4:2b:95:
d7:55:ae:77:ba:df:50:b9:df:7a:dc:4b:9a:ae:fe:a1:30:a7:
05:db:66:63:2f:40:86:e2:77:18:4a:26:ee:8d:64:c2:29:e2:
e8:03:c7:b2:ce:0f:e3:cb:3d:27:02:3a:87:ef:d3:2a:df:f1:
73:fe:9c:51:90:b5:60:17:5b:54:c7:d6:e5:2f:7a:fc:53:f6:
38:32:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:28 2025 by rpki-client