Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json)
Hash identifier: oJdBxMMN/0XFUIgkH3K+6jndpHMXvpRpJBpakLhfH4s=
Subject key identifier: FB:9A:F7:A5:94:54:1C:DA:A8:52:FD:41:51:12:63:29:F3:98:06:A5
Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90
Certificate serial: 7ECC53F21737979D60E726F745F1981D95A8957D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
Manifest number: CA
Signing time: Wed 29 Jan 2025 20:11:10 +0000
Manifest this update: Wed 29 Jan 2025 20:06:10 +0000
Manifest next update: Sun 02 Feb 2025 07:32:10 +0000
Files and hashes: 1: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: 6++ZieIwa3uSozZCgkOKKp7p30r/ihEDLaswCcTnNnQ=)
2: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: CTs5Uh+PUGuoZ85gWtFwiFdp4wiz7Vv/jmvFnjE17aI=)
3: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: H2J4JSb5UH/5sePhesBbTP5rDy1+Emy+Jg2bpdpPsu0=)
4: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: knz2QTCr2NCmFU7UeUoUtRi+lmpDDkNGU1VVhmfpCoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cc:53:f2:17:37:97:9d:60:e7:26:f7:45:f1:98:1d:95:a8:95:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90
Validity
Not Before: Jan 29 20:06:10 2025 GMT
Not After : Feb 2 07:32:10 2025 GMT
Subject: CN=FB9AF7A594541CDAA852FD4151126329F39806A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:c8:9e:d7:f7:5e:71:3a:97:d8:bf:eb:a0:
14:a9:5b:44:7e:d4:36:40:59:ac:eb:5f:18:7f:7a:
97:d3:91:f8:4c:44:76:5e:c6:37:4e:fe:13:7d:2e:
e2:ea:db:d8:7f:14:58:9b:23:2b:9a:b8:aa:19:13:
83:5f:38:1e:96:53:fd:40:2d:c9:c9:20:80:e7:07:
aa:6b:1b:8f:d0:e8:44:22:bc:f4:10:95:e4:cf:d8:
52:a7:a1:cf:8e:96:d8:c8:21:19:5b:20:7e:a8:44:
d4:5c:95:a1:82:58:bc:2b:7d:98:64:66:85:45:d2:
27:61:2e:fc:ca:4e:45:12:a7:7e:4f:1e:4e:a7:ed:
d0:6e:82:3f:0f:04:90:82:fe:01:f5:90:d2:1a:22:
c3:6c:70:09:cd:35:07:24:ba:1e:03:5e:c1:c0:00:
21:22:20:24:8e:62:12:ed:27:7e:c2:f6:fd:7c:44:
bb:70:a2:d1:d5:7d:ce:d1:3f:32:ed:e6:4c:c7:e0:
20:c7:e5:84:ae:8b:21:83:b7:9d:3d:b4:c7:e6:bc:
45:a7:f2:04:09:5b:dc:fb:a6:8a:c9:ef:b0:39:85:
83:e2:5f:88:7d:86:df:c5:bc:62:e6:c6:fd:77:4e:
5d:db:75:cd:a4:8c:c4:c4:1c:23:77:2d:57:e3:65:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:F7:A5:94:54:1C:DA:A8:52:FD:41:51:12:63:29:F3:98:06:A5
X509v3 Authority Key Identifier:
keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:10:c3:5d:f1:fc:39:82:f4:7d:00:90:d1:56:20:62:f2:39:
99:c9:96:c9:5f:4d:e3:e2:45:19:29:37:d2:6d:3b:e3:6c:e0:
26:82:7a:2e:aa:31:34:23:a2:99:99:90:a9:fd:4b:47:19:53:
2e:e5:de:68:14:c8:c6:f9:69:97:5a:b4:3c:e7:dd:01:93:c3:
40:bf:77:06:1a:03:72:98:2d:73:13:5b:1f:40:85:68:ff:1c:
26:e6:f9:c8:8e:96:42:01:e3:4a:67:52:fc:36:b8:8b:22:e1:
f0:19:f6:f8:f7:86:ab:6a:5c:d7:65:6b:78:c2:65:c3:99:08:
0b:bd:d9:fc:2e:bf:7d:20:c7:6d:23:1f:29:2e:61:55:c4:a1:
e5:1f:b5:fb:ff:73:3f:d6:79:af:cf:42:22:57:4c:d3:0b:10:
b5:d5:32:25:fd:ca:f3:4e:18:54:6e:80:3c:3a:62:a4:41:d9:
47:ed:e5:0b:7f:5b:85:cf:1c:51:30:0a:c4:db:b1:38:b7:e7:
45:86:4f:5a:a6:11:22:e3:84:24:dc:35:6f:62:88:c4:10:df:
7d:a2:15:2d:f4:02:66:cf:b6:2c:ba:6c:75:aa:bf:f7:85:3a:
e6:ec:2b:a1:8c:d6:4e:26:89:c9:b7:c3:42:d9:39:60:d9:b4:
bc:0d:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:18 2025 by rpki-client