Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json)
Hash identifier: x8wRM3aDgr9jDazl9rm12JmLjnnUCtBBMucnwqVIjHw=
Subject key identifier: 3D:41:DE:30:E9:18:14:41:A9:50:C1:B3:5B:A5:4D:60:BD:BC:CC:D0
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 15FE1DD48D7AA69D8D6DF252D6C9DD1A9BBAD9C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
Manifest number: 04B3
Signing time: Thu 30 Jan 2025 03:01:04 +0000
Manifest this update: Thu 30 Jan 2025 02:56:04 +0000
Manifest next update: Sun 02 Feb 2025 06:41:04 +0000
Files and hashes: 1: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: 30qxcBNGXbPKjPzSGFvg4MhstUTk+wFXbUeAZJ6OvH8=)
2: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: Rrqdw9OPSaMzJqqbJeil51yS0Dp8UexGZcFlKd3Gk5M=)
3: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: RdOCYJGqaHBZThqkG0RhThz+fok9SXe5k+v6ZVvNlP4=)
4: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: CwXU9VaKpcKaIL0+cwM5Fjr5bkAAawnd7hCNC9U00Bg=)
5: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: rPr5z+FLHw5K05AtTYvasv5Kj2s12fni5q+BH3ebdhc=)
6: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=)
7: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: 4JNXGbFSJKtM5CgL+QrVp+IPBcHdXzt9z515t4i/+vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fe:1d:d4:8d:7a:a6:9d:8d:6d:f2:52:d6:c9:dd:1a:9b:ba:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Jan 30 02:56:04 2025 GMT
Not After : Feb 2 06:41:04 2025 GMT
Subject: CN=3D41DE30E9181441A950C1B35BA54D60BDBCCCD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d5:08:9b:2f:17:a9:39:72:dd:45:a5:ef:97:
8b:62:a5:a2:d2:8d:00:7c:5d:6e:c6:c5:dd:58:2d:
f3:e3:3a:40:eb:c5:75:f4:ea:d3:ef:e4:2b:df:c6:
24:82:94:55:85:fd:c9:d7:13:a7:09:bf:9f:04:5e:
7b:ec:84:3a:f6:6a:ad:e6:aa:09:52:3e:d8:a0:39:
06:ac:29:b1:ec:c6:68:a2:11:90:43:97:57:3e:9f:
f6:f4:d7:b4:87:b0:0e:78:c0:49:11:5a:0b:b6:c3:
b4:d2:a2:71:a5:3f:f4:f6:16:11:87:84:8c:90:6b:
70:bb:6a:06:12:4e:f4:b7:5e:ac:2e:cd:f8:7d:9d:
83:f3:bc:6a:4f:23:98:fc:fd:a5:f4:9b:17:d3:47:
c1:7c:5d:ca:45:a0:ae:59:d5:81:c2:7d:af:41:4c:
5f:2e:d0:3c:f5:43:12:de:a3:f7:1b:57:9f:0f:7a:
15:34:02:a6:95:e0:04:36:78:23:f7:e9:29:58:34:
bb:dd:54:8a:5b:94:f6:40:95:dc:6a:75:d8:b6:c8:
b3:e3:ba:d9:e8:c4:48:ab:40:46:69:28:31:0e:25:
14:8b:e7:b2:3d:96:75:56:46:9a:22:d7:21:15:c9:
f7:20:7e:3f:d7:0f:1e:d7:cb:25:52:e5:5d:18:d4:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:DE:30:E9:18:14:41:A9:50:C1:B3:5B:A5:4D:60:BD:BC:CC:D0
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:74:89:78:7c:43:10:b1:1e:27:29:6d:1c:d2:e3:97:ca:
70:65:53:5d:e6:7a:e4:e4:8d:f5:ee:c4:19:07:c3:83:3e:69:
a7:a2:75:74:7d:85:ca:60:75:12:b5:a4:ea:fc:1c:5a:91:06:
5a:dc:61:b5:b0:bb:20:52:11:85:7a:66:74:a9:23:4e:0c:66:
16:2c:b7:5e:86:6d:d4:63:2f:0e:ce:1d:8e:54:6f:a6:f8:61:
b8:1a:a1:79:d6:cf:41:e8:6e:d9:1c:4d:d1:f5:57:e0:02:5f:
3a:db:f7:54:db:42:23:de:58:a2:20:2d:b4:58:1f:27:0e:95:
14:c0:11:67:f4:5c:4b:9c:86:45:aa:04:d5:f9:5e:6f:39:4e:
95:8e:77:07:d9:bb:bf:5b:38:95:6d:8c:92:17:a7:fb:16:1e:
01:7b:81:e3:86:4e:c0:a7:ef:46:1f:01:9e:5e:2f:fb:4a:53:
11:bc:dc:37:b5:55:3d:74:7c:75:64:55:97:e1:49:55:d5:af:
43:df:21:00:78:0e:eb:31:d7:ea:e3:65:4d:5d:68:e9:3a:0c:
25:0e:ac:2f:90:12:6b:39:8d:92:2d:67:4f:be:82:72:6f:a8:
7e:29:aa:8d:19:f3:0a:ec:33:06:96:71:3c:ec:52:10:78:9e:
45:6f:cc:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFf4d1I16pp2NbfJS1sndGpu62cgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4
NkNGNTgyRjAeFw0yNTAxMzAwMjU2MDRaFw0yNTAyMDIwNjQxMDRaMDMxMTAvBgNV
BAMTKDNENDFERTMwRTkxODE0NDFBOTUwQzFCMzVCQTU0RDYwQkRCQ0NDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1QibLxepOXLdRaXvl4tipaLS
jQB8XW7Gxd1YLfPjOkDrxXX06tPv5CvfxiSClFWF/cnXE6cJv58EXnvshDr2aq3m
qglSPtigOQasKbHsxmiiEZBDl1c+n/b017SHsA54wEkRWgu2w7TSonGlP/T2FhGH
hIyQa3C7agYSTvS3Xqwuzfh9nYPzvGpPI5j8/aX0mxfTR8F8XcpFoK5Z1YHCfa9B
TF8u0Dz1QxLeo/cbV58PehU0AqaV4AQ2eCP36SlYNLvdVIpblPZAldxqddi2yLPj
utnoxEirQEZpKDEOJRSL57I9lnVWRpoi1yEVyfcgfj/XDx7XyyVS5V0Y1HgpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPUHeMOkYFEGpUMGzW6VNYL28zNAwHwYDVR0j
BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC
REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG
NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3
MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2
QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI6/dIl4fEMQsR4nKW0c0uOXynBlU13meuTk
jfXuxBkHw4M+aaeidXR9hcpgdRK1pOr8HFqRBlrcYbWwuyBSEYV6ZnSpI04MZhYs
t16GbdRjLw7OHY5Ub6b4YbgaoXnWz0HobtkcTdH1V+ACXzrb91TbQiPeWKIgLbRY
HycOlRTAEWf0XEuchkWqBNX5Xm85TpWOdwfZu79bOJVtjJIXp/sWHgF7geOGTsCn
70YfAZ5eL/tKUxG83De1VT10fHVkVZfhSVXVr0PfIQB4Dusx1+rjZU1daOk6DCUO
rC+QEms5jZItZ0++gnJvqH4pqo0Z8wrsMwaWcTzsUhB4nkVvzKo=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:13 2025 by rpki-client