Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json)
Hash identifier: kc0JnMALCxxlOWzPcDtFKVQumLQ5H6xVa8aetN1KT5Q=
Subject key identifier: 24:B8:4E:C9:A2:20:B5:B3:A3:E2:7C:33:04:9B:35:41:A4:43:8D:7E
Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12
Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512
Certificate serial: 422C9A1B541CE33EEA2CE6F5D50F624C72C03D08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
Manifest number: 4E
Signing time: Thu 30 Jan 2025 09:41:42 +0000
Manifest this update: Thu 30 Jan 2025 09:36:42 +0000
Manifest next update: Sun 02 Feb 2025 11:59:42 +0000
Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w=)
2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: IC9XLEB02UL6xhaWFDq2t+G/HiNXv2j/yYS3nKC44lY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:9a:1b:54:1c:e3:3e:ea:2c:e6:f5:d5:0f:62:4c:72:c0:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512
Validity
Not Before: Jan 30 09:36:42 2025 GMT
Not After : Feb 2 11:59:42 2025 GMT
Subject: CN=24B84EC9A220B5B3A3E27C33049B3541A4438D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:b8:f6:ed:94:be:e7:1f:23:5a:09:fa:4c:
52:dd:96:2f:40:7e:88:04:c6:60:ea:42:47:be:56:
a0:d6:d9:d2:dd:3c:96:0a:7a:b5:b0:64:3b:f8:1d:
3a:db:c9:95:96:7f:9a:d8:ee:97:e6:9f:09:72:be:
aa:26:7d:87:35:51:dc:be:72:f9:3e:f6:19:e2:b8:
0f:a1:09:62:04:fb:28:02:16:00:8a:80:15:f3:c2:
21:8a:aa:31:90:1b:71:b3:56:89:56:eb:f0:c5:3d:
42:d5:88:68:ff:77:47:f6:53:07:13:06:f8:51:53:
de:47:dc:ba:8a:b6:db:a0:16:2a:e6:1c:6d:c1:d2:
ff:b5:98:f8:c9:fd:e2:0e:99:80:32:94:01:d5:1b:
87:a6:08:d3:cb:e1:dc:a8:ca:8e:fe:ae:13:4e:60:
88:3b:42:f8:19:6b:f3:0a:75:96:44:cd:bd:64:6f:
6a:b2:2e:99:d3:d6:ac:40:b2:31:13:72:d4:ff:bc:
3f:aa:c7:a7:fd:c5:2a:6a:dd:4b:fd:25:42:ab:eb:
06:63:86:e6:18:f4:5e:e4:5e:1a:97:43:27:34:6e:
4f:53:54:7b:60:19:7b:fc:3e:8a:00:94:f7:84:9d:
23:e3:a9:51:1b:ad:56:96:0b:e9:c2:16:f9:70:c0:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:4E:C9:A2:20:B5:B3:A3:E2:7C:33:04:9B:35:41:A4:43:8D:7E
X509v3 Authority Key Identifier:
keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:8b:b6:24:88:6c:74:dd:bd:f3:75:4f:e0:e6:67:de:54:
20:2b:60:28:a4:08:72:92:41:53:18:2b:54:4f:26:7f:45:b9:
0a:5f:10:c2:dd:6d:86:e3:79:a4:13:4f:69:d1:4c:37:89:4c:
d2:f9:41:d7:a7:5c:38:55:b7:9d:87:c4:58:92:18:ea:37:01:
ea:c5:e0:c9:cc:11:c7:46:89:df:65:0a:c5:da:62:5b:f8:1b:
c4:16:b2:2c:77:58:1e:3b:da:d8:e1:9a:3d:26:17:6f:22:93:
89:46:ff:17:bd:6a:6f:d2:3d:d0:7c:59:93:fe:4b:5e:39:f2:
f4:e9:3c:f0:64:2b:03:3b:29:da:37:15:08:e3:f4:94:fa:21:
e8:3d:05:49:d2:5b:f2:b9:84:a7:2c:ae:8a:38:9e:be:32:ea:
76:36:1e:c8:92:9f:88:82:d9:38:1a:a1:18:53:dc:b2:92:12:
23:18:d9:0a:f3:68:cc:87:f5:f2:28:0e:a1:94:da:ef:38:75:
85:99:45:19:97:37:a0:bd:0a:41:0f:d0:97:63:d4:cc:7b:78:
76:71:ce:27:cc:0c:ec:a9:0d:94:5c:3c:d5:09:b2:f0:c8:cc:
81:2a:07:c6:28:23:ad:be:48:3d:7f:b3:23:60:d5:76:6e:05:
f0:05:4c:1a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQiyaG1Qc4z7qLOb11Q9iTHLAPQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw
NzNBNTUxMjAeFw0yNTAxMzAwOTM2NDJaFw0yNTAyMDIxMTU5NDJaMDMxMTAvBgNV
BAMTKDI0Qjg0RUM5QTIyMEI1QjNBM0UyN0MzMzA0OUIzNTQxQTQ0MzhEN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKf7j27ZS+5x8jWgn6TFLdli9A
fogExmDqQke+VqDW2dLdPJYKerWwZDv4HTrbyZWWf5rY7pfmnwlyvqomfYc1Udy+
cvk+9hniuA+hCWIE+ygCFgCKgBXzwiGKqjGQG3GzVolW6/DFPULViGj/d0f2UwcT
BvhRU95H3LqKttugFirmHG3B0v+1mPjJ/eIOmYAylAHVG4emCNPL4dyoyo7+rhNO
YIg7QvgZa/MKdZZEzb1kb2qyLpnT1qxAsjETctT/vD+qx6f9xSpq3Uv9JUKr6wZj
huYY9F7kXhqXQyc0bk9TVHtgGXv8PooAlPeEnSPjqVEbrVaWC+nCFvlwwOOHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJLhOyaIgtbOj4nwzBJs1QaRDjX4wHwYDVR0j
BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5
QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB
NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw
MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG
MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADOZi7YkiGx03b3zdU/g5mfeVCArYCikCHKS
QVMYK1RPJn9FuQpfEMLdbYbjeaQTT2nRTDeJTNL5QdenXDhVt52HxFiSGOo3AerF
4MnMEcdGid9lCsXaYlv4G8QWsix3WB472tjhmj0mF28ik4lG/xe9am/SPdB8WZP+
S1458vTpPPBkKwM7Kdo3FQjj9JT6Ieg9BUnSW/K5hKcsroo4nr4y6nY2HsiSn4iC
2TgaoRhT3LKSEiMY2QrzaMyH9fIoDqGU2u84dYWZRRmXN6C9CkEP0Jdj1Mx7eHZx
zifMDOypDZRcPNUJsvDIzIEqB8YoI62+SD1/syNg1XZuBfAFTBo=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:52 2025 by rpki-client