Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft (raw, json)
Hash identifier: NAwa/xCmgI4cCGaWLFIXySSqmUMlVnNhXWkD0+mLJq8=
Subject key identifier: 90:C5:93:C4:70:8C:13:F4:3E:07:0C:BA:72:95:7D:6B:A2:93:E9:8E
Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96
Certificate serial: 485791F65AE8F736F2DEE529762FF1B777A21AB0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
Manifest number: 04A5
Signing time: Fri 31 Jan 2025 14:31:56 +0000
Manifest this update: Fri 31 Jan 2025 14:26:56 +0000
Manifest next update: Mon 03 Feb 2025 18:11:56 +0000
Files and hashes: 1: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl (hash: LgCbjAxL2dfT7K6dgkFR/JpsXCcwGrnX7M1CDvEwfhg=)
2: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: lTPGED6Euas+yMtjFiZeN4ZQaRI9ugutG6SYSfzJsJs=)
3: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: Duv7had9qz23magj0/7Gknmw1o3t5P/2ZxbNo+6irPU=)
4: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: A6MeiC5iYEUgfCxOlrP4tgy4Dgl5PsOFZcNkusDqHVo=)
5: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: wEPYX74PJW0e23h+Erkt8/FRL+TupCEB/27FgHd4lV0=)
6: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: c8RxI909Anvx0BRzpA0Rb0YziahBzyNU99IlhCC5XuA=)
7: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: Iun52nY6O3+qxGHYtLUd/o4wD4j6UUv+WuPemCxO82w=)
8: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: WP2a3mqmpHS88/eMPFKKdSw0yMT5X5wgEeVzGMtnjlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:57:91:f6:5a:e8:f7:36:f2:de:e5:29:76:2f:f1:b7:77:a2:1a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96
Validity
Not Before: Jan 31 14:26:56 2025 GMT
Not After : Feb 3 18:11:56 2025 GMT
Subject: CN=90C593C4708C13F43E070CBA72957D6BA293E98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:96:71:54:65:06:fc:fa:90:9e:c2:8d:b5:
f6:9d:3b:0f:37:8f:b0:24:5f:8f:38:b6:de:26:af:
20:d7:29:eb:6a:79:80:68:26:37:d1:c3:5c:78:a1:
79:14:08:c0:35:e9:45:52:e1:fc:00:ed:4c:12:c6:
a8:0b:f7:0e:8b:af:df:4c:56:7c:62:96:68:68:11:
35:ee:af:25:37:c4:0e:b9:cc:f0:ad:d3:ff:cf:eb:
18:c0:64:83:a9:84:60:98:b6:ff:57:f7:38:10:d1:
f1:b6:ae:c6:16:25:f2:52:f1:9f:04:36:45:72:72:
c2:ab:80:28:30:b7:0e:73:d5:d2:8e:76:a8:ba:79:
83:b9:68:cd:fb:bf:f9:45:7b:be:79:3c:c8:ac:8d:
59:01:18:a5:22:ed:71:7a:94:50:cd:b1:e3:c3:ce:
d4:61:93:6e:f7:29:d6:b2:c0:b4:5e:37:e3:63:75:
ec:f2:97:cd:10:e4:80:48:64:72:98:ce:06:34:5e:
b6:a4:8c:eb:0b:9d:8f:8a:3a:67:12:85:94:08:1e:
6f:7a:83:1d:f2:f4:f1:1b:ac:80:47:32:7b:a5:e5:
4d:62:91:9b:31:8c:18:7a:7f:89:76:51:b8:7b:ab:
16:a0:74:97:df:8c:ba:a7:b0:e8:2b:e6:3e:0e:d2:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:93:C4:70:8C:13:F4:3E:07:0C:BA:72:95:7D:6B:A2:93:E9:8E
X509v3 Authority Key Identifier:
keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:f0:3c:4d:2a:ab:ac:95:33:ff:6a:79:4e:97:da:86:ec:
6c:b2:d1:45:b9:65:da:b4:8d:af:64:ce:08:aa:54:90:fc:c5:
27:1d:ae:21:0c:85:75:f3:49:cd:a9:58:ad:52:ad:e3:33:23:
75:be:f2:63:4f:c5:83:21:b6:51:c9:53:66:2d:43:6c:91:cd:
a0:7a:e5:93:28:5c:50:ba:01:6e:32:a3:70:2a:d6:d4:a4:28:
35:28:a8:da:3f:65:af:df:e5:67:2b:52:97:e4:dd:89:32:fe:
aa:2c:76:61:c3:c9:9e:10:2c:3a:49:a2:cf:9a:11:e9:23:b2:
72:a8:5a:76:aa:8f:5e:50:54:e7:37:27:5a:ab:10:ad:49:0e:
6d:90:28:23:2a:f9:40:35:b8:66:5f:4b:7a:5d:a8:8f:66:9b:
ab:ac:f6:f4:2d:f6:ee:37:d9:dc:ae:98:65:f5:ac:c6:06:d6:
e0:ef:87:3d:65:15:17:98:d6:07:b7:f4:51:b4:49:69:77:52:
8e:28:25:88:3e:d4:47:dd:ec:9e:46:7c:60:d5:52:65:16:38:
e7:ed:f0:8d:c9:08:56:72:23:75:13:bd:c8:8b:e9:21:b5:f7:
62:5f:82:e7:7a:8c:68:b8:b9:02:4d:43:60:f4:bb:98:6b:64:
fa:24:32:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSFeR9lro9zby3uUpdi/xt3eiGrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFF
Q0M3RkU5NjAeFw0yNTAxMzExNDI2NTZaFw0yNTAyMDMxODExNTZaMDMxMTAvBgNV
BAMTKDkwQzU5M0M0NzA4QzEzRjQzRTA3MENCQTcyOTU3RDZCQTI5M0U5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgpZxVGUG/PqQnsKNtfadOw83
j7AkX484tt4mryDXKetqeYBoJjfRw1x4oXkUCMA16UVS4fwA7UwSxqgL9w6Lr99M
VnxilmhoETXuryU3xA65zPCt0//P6xjAZIOphGCYtv9X9zgQ0fG2rsYWJfJS8Z8E
NkVycsKrgCgwtw5z1dKOdqi6eYO5aM37v/lFe755PMisjVkBGKUi7XF6lFDNsePD
ztRhk273KdaywLReN+Njdezyl80Q5IBIZHKYzgY0XrakjOsLnY+KOmcShZQIHm96
gx3y9PEbrIBHMnul5U1ikZsxjBh6f4l2Ubh7qxagdJffjLqnsOgr5j4O0vKVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkMWTxHCME/Q+Bwy6cpV9a6KT6Y4wHwYDVR0j
BBgwFoAUQoqkJA50Hyfjoh78KdRfCuzH/pYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC80MjhBQTQyNDBF
NzQxRjI3RTNBMjFFRkMyOUQ0NUYwQUVDQzdGRTk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFFQ0M3
RkU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5
MzUtNDA2OTAyYjFlMTNiLzAvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVG
MEFFQ0M3RkU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJV98DxNKquslTP/anlOl9qG7Gyy0UW5Zdq0
ja9kzgiqVJD8xScdriEMhXXzSc2pWK1SreMzI3W+8mNPxYMhtlHJU2YtQ2yRzaB6
5ZMoXFC6AW4yo3Aq1tSkKDUoqNo/Za/f5WcrUpfk3Yky/qosdmHDyZ4QLDpJos+a
EekjsnKoWnaqj15QVOc3J1qrEK1JDm2QKCMq+UA1uGZfS3pdqI9mm6us9vQt9u43
2dyumGX1rMYG1uDvhz1lFReY1ge39FG0SWl3Uo4oJYg+1Efd7J5GfGDVUmUWOOft
8I3JCFZyI3UTvciL6SG192Jfgud6jGi4uQJNQ2D0u5hrZPokMvs=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:39 2025 by rpki-client