Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier: hCPeP1DOYL/4gEc+Iwp2OQEf2D3ciKIBN3ZdlAWuH2g=
Subject key identifier: B8:DB:24:99:F4:98:03:B5:1A:A1:10:FC:39:8C:CB:1F:55:F9:54:BB
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial: 0DF1978F6D56BFC75F72EAA20800D32D30D30CA9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number: 04A4
Signing time: Wed 29 Jan 2025 17:01:05 +0000
Manifest this update: Wed 29 Jan 2025 16:56:05 +0000
Manifest next update: Sat 01 Feb 2025 19:32:05 +0000
Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=)
2: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: u7iaRLp2tD3F/RrXFHbEbAX9ykk9ZeH1vxDmaUmqT7M=)
3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=)
4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: TKlrYYxdW4d0W7hA0lV/DSzBaApabiKYJpgjro7Ns1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f1:97:8f:6d:56:bf:c7:5f:72:ea:a2:08:00:d3:2d:30:d3:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Validity
Not Before: Jan 29 16:56:05 2025 GMT
Not After : Feb 1 19:32:05 2025 GMT
Subject: CN=B8DB2499F49803B51AA110FC398CCB1F55F954BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:11:9a:61:78:e6:ff:06:a0:46:d3:e7:ff:
d1:d3:29:87:c9:37:df:79:b5:40:31:f8:78:66:17:
db:0e:35:a0:78:02:95:92:ec:cd:c8:ce:b5:18:f9:
5a:4d:a9:3e:3d:1b:fd:5d:55:55:fb:4c:b4:86:64:
d0:a4:53:e1:1a:c7:e0:d1:02:6e:1b:3c:9d:52:5b:
60:f3:e4:38:0a:56:98:1a:30:71:6e:3b:30:cd:b9:
0b:36:94:93:5a:6d:d6:89:16:fd:ac:90:9f:75:49:
20:86:7e:7f:6b:6e:77:2c:cd:44:f7:98:ae:16:fb:
41:4f:74:af:66:8d:e5:63:2f:90:ef:9e:5c:6d:ca:
6f:fa:3d:6c:0b:1c:ce:c6:86:dc:34:87:0e:8d:32:
a9:31:46:5b:cb:23:78:8f:bf:46:f4:9e:7c:f4:13:
e4:80:05:f8:13:62:e7:84:d4:83:4e:aa:3f:89:ca:
ae:84:1a:2d:b5:9a:2b:fd:1e:f9:13:b6:f9:83:4f:
bc:82:90:ad:d7:55:3c:41:77:0e:f8:68:92:7c:fc:
a4:ab:16:cc:63:75:8a:4c:9d:1b:f1:fd:35:c6:38:
81:32:fb:b5:46:c8:5e:44:87:45:a6:d4:ae:1e:a2:
15:2b:e5:73:cc:2f:b3:5b:29:96:b3:53:e2:52:e8:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:24:99:F4:98:03:B5:1A:A1:10:FC:39:8C:CB:1F:55:F9:54:BB
X509v3 Authority Key Identifier:
keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:ec:b6:83:f0:a8:ec:db:ca:05:4a:f1:d8:ac:3d:2c:09:
df:cc:15:62:af:ec:f6:7d:85:86:0f:28:96:d5:38:a3:37:a7:
ef:27:c1:0d:6b:7e:18:bf:eb:2d:1d:83:4e:60:7f:d2:d9:5b:
94:a1:3b:f6:0b:24:7b:69:bb:b1:f9:92:c2:cc:80:8a:e1:91:
97:3e:b6:2e:15:e9:71:64:fb:d2:31:b2:ef:31:00:db:b9:cf:
d9:51:5f:d0:40:9f:cd:0f:d9:82:fb:44:93:0f:1f:95:b2:13:
c2:0d:96:4b:78:e4:35:d8:8e:e4:a5:79:72:fc:a8:7b:33:62:
20:47:1a:9e:0b:94:59:94:de:71:bf:71:0e:38:ad:7a:e9:47:
37:1f:5a:5b:9d:cc:c3:e2:63:90:18:be:f8:71:a3:e6:3d:85:
62:fb:ef:d4:3e:10:ab:53:6e:8a:5a:f9:b1:83:f6:14:52:e2:
a5:2c:47:e4:25:f3:88:72:e8:00:8c:21:83:f1:ad:8e:fb:24:
5d:90:17:d9:ba:ea:e3:2c:57:e8:fa:20:e7:16:7c:58:e4:44:
54:d4:23:ea:6c:45:a8:a4:cf:9c:8b:c2:32:26:d6:94:ce:39:
0b:f6:6d:d1:88:6b:9d:d1:06:76:4f:d1:92:56:6a:6b:a2:a2:
4c:d2:5e:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDfGXj21Wv8dfcuqiCADTLTDTDKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE
MERDMTdGMjAeFw0yNTAxMjkxNjU2MDVaFw0yNTAyMDExOTMyMDVaMDMxMTAvBgNV
BAMTKEI4REIyNDk5RjQ5ODAzQjUxQUExMTBGQzM5OENDQjFGNTVGOTU0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaBGaYXjm/wagRtPn/9HTKYfJ
N995tUAx+HhmF9sONaB4ApWS7M3IzrUY+VpNqT49G/1dVVX7TLSGZNCkU+Eax+DR
Am4bPJ1SW2Dz5DgKVpgaMHFuOzDNuQs2lJNabdaJFv2skJ91SSCGfn9rbncszUT3
mK4W+0FPdK9mjeVjL5Dvnlxtym/6PWwLHM7Ghtw0hw6NMqkxRlvLI3iPv0b0nnz0
E+SABfgTYueE1INOqj+Jyq6EGi21miv9HvkTtvmDT7yCkK3XVTxBdw74aJJ8/KSr
FsxjdYpMnRvx/TXGOIEy+7VGyF5Eh0Wm1K4eohUr5XPML7NbKZazU+JS6PZ/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuNskmfSYA7UaoRD8OYzLH1X5VLswHwYDVR0j
BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz
QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD
MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0
YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF
MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD907LaD8Kjs28oFSvHYrD0sCd/MFWKv7PZ9
hYYPKJbVOKM3p+8nwQ1rfhi/6y0dg05gf9LZW5ShO/YLJHtpu7H5ksLMgIrhkZc+
ti4V6XFk+9Ixsu8xANu5z9lRX9BAn80P2YL7RJMPH5WyE8INlkt45DXYjuSleXL8
qHszYiBHGp4LlFmU3nG/cQ44rXrpRzcfWludzMPiY5AYvvhxo+Y9hWL779Q+EKtT
bopa+bGD9hRS4qUsR+Ql84hy6ACMIYPxrY77JF2QF9m66uMsV+j6IOcWfFjkRFTU
I+psRaikz5yLwjIm1pTOOQv2bdGIa53RBnZP0ZJWamuiokzSXlg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:32 2025 by rpki-client