Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier: Bra5kb2+YYul1/uPUxTZeLX8sCxqKciSBGDl4ThBZcY=
Subject key identifier: 09:AE:DF:C3:51:5C:68:65:BC:C9:6A:A2:54:96:3C:8C:3E:01:FE:9D
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial: 086834F822CE662D6107B8144E3219BB8B64DCCE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number: 0471
Signing time: Fri 31 Jan 2025 06:10:59 +0000
Manifest this update: Fri 31 Jan 2025 06:05:59 +0000
Manifest next update: Mon 03 Feb 2025 06:59:59 +0000
Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: l6WiIikHACU5tzswda0ojI82F5BRDvDUxd9q6nVYUmA=)
2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: RSSKQ80qetxdl3Vs6AqHUHNTYF+l0dFEx0uWms41D5o=)
3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BADyV6wJdXSSltzFLVS7v0Cc/6PXVJM18n7D+Fi9ZsM=)
4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: jnhIwx03UauIIk4jQYORMW4E9+8OTi1hP5M4TRVep5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:68:34:f8:22:ce:66:2d:61:07:b8:14:4e:32:19:bb:8b:64:dc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Validity
Not Before: Jan 31 06:05:59 2025 GMT
Not After : Feb 3 06:59:59 2025 GMT
Subject: CN=09AEDFC3515C6865BCC96AA254963C8C3E01FE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:de:d6:7a:56:55:ee:f1:45:d4:e0:0d:57:
30:f2:9e:29:ec:d7:4e:45:26:96:27:92:9f:ab:6d:
31:82:63:75:8c:4b:23:d0:c6:33:ba:30:70:5c:0c:
be:da:b7:7a:ef:b8:38:96:9c:2c:c7:0a:e0:b1:e7:
f3:a4:1b:bf:92:39:47:db:f6:df:66:1f:ce:de:cf:
fe:81:ba:48:34:6f:62:ea:6a:1d:0c:fb:47:d4:45:
8a:99:0e:66:e5:3e:7b:05:54:dd:1c:5c:1d:b5:67:
9a:d2:2d:81:10:e7:9b:e4:6a:3d:30:4d:05:7d:ef:
61:4e:af:34:e1:2e:14:d9:03:50:11:a7:12:a4:f2:
1e:4a:fe:fb:22:89:24:e5:61:13:4a:76:c4:a9:57:
b1:0b:01:eb:cf:77:20:78:9f:db:7e:3f:30:f9:04:
1c:1e:5b:0a:30:01:b4:67:97:94:c2:25:63:de:d1:
c8:d5:19:4e:3a:91:44:93:20:4a:79:82:c6:c7:a8:
d8:67:48:81:05:97:6a:bd:51:de:3b:4d:30:94:32:
a6:40:39:e5:73:e3:bb:40:a2:0f:67:8e:81:e7:17:
ca:28:9a:75:eb:b4:3d:06:d6:56:14:d9:5d:f8:2a:
52:af:6e:eb:76:48:e4:0b:5f:37:62:58:52:e5:ee:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:DF:C3:51:5C:68:65:BC:C9:6A:A2:54:96:3C:8C:3E:01:FE:9D
X509v3 Authority Key Identifier:
keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:52:dd:4d:0e:89:6a:41:46:11:6d:d4:8a:00:cd:5b:f5:5c:
11:dd:16:86:d9:57:eb:fc:bc:a8:5e:9b:b3:19:98:81:02:df:
cd:da:88:2f:9c:71:98:18:77:4e:67:aa:65:fa:36:2a:6b:82:
22:2b:29:fe:e5:65:e0:52:c3:bf:ff:c1:65:29:3d:02:b6:c8:
a8:25:1d:4e:60:b8:60:e5:3a:ce:91:ea:e0:c6:ab:07:d0:f4:
2e:be:78:96:f1:1a:da:33:23:66:97:7c:f1:48:6c:5e:de:8a:
9e:dc:0b:86:95:9e:1e:d2:f6:7a:77:13:46:32:3a:96:55:dd:
91:80:cd:fb:41:a0:bb:33:68:cf:fe:3c:a1:d6:9a:51:2b:fa:
4a:e6:ce:89:3d:bd:d0:98:3f:16:9d:7b:22:d9:46:ef:bc:8f:
4f:92:09:18:12:9b:33:08:21:19:cd:cb:73:b6:1d:50:2d:99:
71:6d:96:bd:32:27:f7:6e:f2:9e:49:5a:02:b0:a2:d9:32:a8:
4d:74:79:b6:35:a3:c1:47:0e:f4:36:5e:0c:27:5f:cb:8a:5f:
95:bb:8e:ea:3c:47:53:1b:31:8f:cd:9a:fb:0b:a6:41:2c:62:
f0:be:ca:2c:26:fa:58:b2:74:26:a2:88:ad:dc:ff:08:69:83:
74:9c:4a:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCGg0+CLOZi1hB7gUTjIZu4tk3M4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy
NDE4N0Q1OTAeFw0yNTAxMzEwNjA1NTlaFw0yNTAyMDMwNjU5NTlaMDMxMTAvBgNV
BAMTKDA5QUVERkMzNTE1QzY4NjVCQ0M5NkFBMjU0OTYzQzhDM0UwMUZFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUP97WelZV7vFF1OANVzDynins
105FJpYnkp+rbTGCY3WMSyPQxjO6MHBcDL7at3rvuDiWnCzHCuCx5/OkG7+SOUfb
9t9mH87ez/6Bukg0b2Lqah0M+0fURYqZDmblPnsFVN0cXB21Z5rSLYEQ55vkaj0w
TQV972FOrzThLhTZA1ARpxKk8h5K/vsiiSTlYRNKdsSpV7ELAevPdyB4n9t+PzD5
BBweWwowAbRnl5TCJWPe0cjVGU46kUSTIEp5gsbHqNhnSIEFl2q9Ud47TTCUMqZA
OeVz47tAog9njoHnF8oomnXrtD0G1lYU2V34KlKvbut2SOQLXzdiWFLl7g9vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCa7fw1FcaGW8yWqiVJY8jD4B/p0wHwYDVR0j
BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy
OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4
N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl
ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4
RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFlS3U0OiWpBRhFt1IoAzVv1XBHdFobZV+v8
vKhem7MZmIEC383aiC+ccZgYd05nqmX6NiprgiIrKf7lZeBSw7//wWUpPQK2yKgl
HU5guGDlOs6R6uDGqwfQ9C6+eJbxGtozI2aXfPFIbF7eip7cC4aVnh7S9np3E0Yy
OpZV3ZGAzftBoLszaM/+PKHWmlEr+krmzok9vdCYPxadeyLZRu+8j0+SCRgSmzMI
IRnNy3O2HVAtmXFtlr0yJ/du8p5JWgKwotkyqE10ebY1o8FHDvQ2XgwnX8uKX5W7
juo8R1MbMY/NmvsLpkEsYvC+yiwm+liydCaiiK3c/whpg3ScSts=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:21 2025 by rpki-client