Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json)
Hash identifier: X2tfq3csxpBKbnwMRXO5X3mexj4xoPoVX7g5Pi7GvBA=
Subject key identifier: 20:56:7A:7C:1E:86:32:A5:A8:93:ED:5D:09:D8:AE:6A:CE:45:27:4D
Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Certificate serial: 350D2D6B7D8877897B3FAF7584983CCD39919953
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
Manifest number: 0277
Signing time: Wed 29 Jan 2025 22:41:07 +0000
Manifest this update: Wed 29 Jan 2025 22:36:07 +0000
Manifest next update: Sun 02 Feb 2025 00:37:07 +0000
Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=)
2: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=)
3: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: Nfcgb8eJqBc37EGYsk7MbvLOKgrEySoJJC3JHOoJwfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0d:2d:6b:7d:88:77:89:7b:3f:af:75:84:98:3c:cd:39:91:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Validity
Not Before: Jan 29 22:36:07 2025 GMT
Not After : Feb 2 00:37:07 2025 GMT
Subject: CN=20567A7C1E8632A5A893ED5D09D8AE6ACE45274D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:85:0b:8d:36:5a:d0:50:43:f8:35:30:76:
76:70:2b:92:fa:24:eb:90:ed:ea:72:ac:22:86:69:
b2:db:9f:07:c9:77:3d:a2:c7:77:66:d1:07:6a:7f:
de:2b:39:df:96:b2:4d:2e:69:a1:8b:a6:e7:74:12:
aa:d9:5e:30:2d:0f:06:34:3f:5a:4e:46:48:bd:cc:
e3:d2:ad:2f:49:7b:69:88:ac:16:32:22:02:05:82:
81:23:64:85:91:85:5b:3e:e6:3b:ec:7f:4d:87:33:
06:37:d7:cb:d3:35:37:5a:d0:25:c7:ab:14:2a:5d:
b8:15:c0:45:dd:35:37:61:2a:b0:1b:1d:9d:9c:73:
43:82:34:c9:70:4b:25:f4:4e:86:58:8f:e1:52:a3:
61:2e:7a:46:0e:a2:60:d3:c6:de:7b:a5:2d:96:87:
b1:24:5d:0a:21:df:2c:00:44:e0:be:8c:7a:86:f7:
77:86:71:ba:98:6d:c7:ff:a3:81:95:f0:28:e8:e3:
e8:43:36:71:f1:05:d5:e6:6a:5f:3f:e5:25:58:e9:
ec:c0:06:35:7f:ac:07:0a:06:c7:ae:8e:61:94:2a:
95:cd:1f:e2:92:82:53:39:42:55:46:37:56:e4:b0:
29:41:06:55:d4:42:3d:dd:93:6d:f9:65:c6:08:5f:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:56:7A:7C:1E:86:32:A5:A8:93:ED:5D:09:D8:AE:6A:CE:45:27:4D
X509v3 Authority Key Identifier:
keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:40:37:b7:88:2b:f9:ad:0c:32:40:ae:dd:b9:bf:40:ba:16:
34:7c:b4:9e:b2:95:4e:20:fa:07:08:9a:5e:de:64:2f:22:07:
49:15:a2:c4:92:d4:84:19:b8:77:d9:30:01:50:6e:f5:23:36:
d7:4f:b4:70:7e:05:96:28:0a:a1:a1:b9:42:13:c4:98:b1:42:
3a:3e:cf:c4:d4:61:6d:8d:81:db:c1:c4:1c:63:26:b1:25:f7:
35:f2:71:68:f8:f6:9f:6a:27:80:ef:4a:da:9d:5a:c9:a0:65:
f7:b3:7a:70:80:b5:f5:65:9e:bf:38:7d:a8:96:c3:25:25:8b:
56:e8:ef:6a:38:e7:81:c9:24:04:4e:b0:e1:03:9e:e5:8f:d0:
ce:ce:e8:f2:ae:a0:85:87:ac:40:55:60:64:e4:d1:46:54:40:
a1:bd:c7:2e:4c:fb:7e:b8:af:cd:e8:99:b7:19:02:b7:17:dc:
ec:cd:2e:10:82:11:db:04:b0:24:f9:91:c0:bb:ce:a8:e1:bc:
8b:5d:cd:04:c9:26:f2:ad:9f:dd:01:f8:48:d0:29:16:96:e1:
27:82:99:ab:98:79:4b:0e:c3:7a:d2:ab:03:77:f0:a9:7e:7e:
7a:67:e7:09:99:f4:24:67:a0:4b:54:2c:54:d5:47:b4:e1:ba:
e0:61:55:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNQ0ta32Id4l7P691hJg8zTmRmVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF
MzdCQjY1NzAeFw0yNTAxMjkyMjM2MDdaFw0yNTAyMDIwMDM3MDdaMDMxMTAvBgNV
BAMTKDIwNTY3QTdDMUU4NjMyQTVBODkzRUQ1RDA5RDhBRTZBQ0U0NTI3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ34ULjTZa0FBD+DUwdnZwK5L6
JOuQ7epyrCKGabLbnwfJdz2ix3dm0Qdqf94rOd+Wsk0uaaGLpud0EqrZXjAtDwY0
P1pORki9zOPSrS9Je2mIrBYyIgIFgoEjZIWRhVs+5jvsf02HMwY318vTNTda0CXH
qxQqXbgVwEXdNTdhKrAbHZ2cc0OCNMlwSyX0ToZYj+FSo2EuekYOomDTxt57pS2W
h7EkXQoh3ywAROC+jHqG93eGcbqYbcf/o4GV8Cjo4+hDNnHxBdXmal8/5SVY6ezA
BjV/rAcKBseujmGUKpXNH+KSglM5QlVGN1bksClBBlXUQj3dk235ZcYIX6u9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIFZ6fB6GMqWok+1dCdiuas5FJ00wHwYDVR0j
BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx
QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC
QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz
NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4
RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKdAN7eIK/mtDDJArt25v0C6FjR8tJ6ylU4g
+gcIml7eZC8iB0kVosSS1IQZuHfZMAFQbvUjNtdPtHB+BZYoCqGhuUITxJixQjo+
z8TUYW2NgdvBxBxjJrEl9zXycWj49p9qJ4DvStqdWsmgZfezenCAtfVlnr84faiW
wyUli1bo72o454HJJAROsOEDnuWP0M7O6PKuoIWHrEBVYGTk0UZUQKG9xy5M+364
r83ombcZArcX3OzNLhCCEdsEsCT5kcC7zqjhvItdzQTJJvKtn90B+EjQKRaW4SeC
mauYeUsOw3rSqwN38Kl+fnpn5wmZ9CRnoEtULFTVR7ThuuBhVdQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:06 2025 by rpki-client