
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json)
Hash identifier: 2iMB9DkKiBPx5GqZ7GoPCRBtCjpC50VLUwJPE5CmnH4=
Subject key identifier: 57:07:14:AC:82:DE:B1:A7:D8:72:02:FD:1B:86:43:3C:2B:09:7F:FB
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial: 3B9211267DBA7AC0298CD249AF80944A11C15470
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
Manifest number: 015A
Signing time: Thu 30 Jan 2025 13:41:56 +0000
Manifest this update: Thu 30 Jan 2025 13:36:56 +0000
Manifest next update: Sun 02 Feb 2025 14:12:56 +0000
Files and hashes: 1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: HL/lKdq5rZh5T/Ehnr6cq5iKyFGohRZ0I1rja9/ep/Y=)
2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:92:11:26:7d:ba:7a:c0:29:8c:d2:49:af:80:94:4a:11:c1:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Validity
Not Before: Jan 30 13:36:56 2025 GMT
Not After : Feb 2 14:12:56 2025 GMT
Subject: CN=570714AC82DEB1A7D87202FD1B86433C2B097FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:98:02:f1:8d:66:f4:66:06:74:db:30:61:
3a:2a:d2:8b:a5:2d:18:f8:a0:d6:92:8c:f0:f3:ea:
fb:32:ac:be:dd:bf:58:52:1d:3d:7b:19:b4:48:9a:
b3:51:71:5e:b1:cf:3b:96:ed:b4:59:8c:60:c4:c3:
78:46:7e:c4:5a:ac:5a:93:11:31:5b:d3:e5:36:fc:
70:11:55:90:42:d4:e7:28:c7:d9:20:93:54:43:40:
7d:d2:a3:c9:f3:e3:cf:0c:fd:52:39:94:c5:bf:60:
64:97:00:d4:ef:67:be:fd:4f:c7:e2:48:76:14:8f:
fa:ba:c9:65:ce:ee:d5:8c:70:8d:b1:0c:d9:2f:23:
56:09:38:88:b4:d4:a1:cd:cd:ba:78:ac:69:80:8f:
a3:58:a3:52:96:07:60:80:b4:2c:55:5c:bc:3e:26:
a0:81:b9:df:27:4b:8f:89:a0:98:8f:d7:83:f8:a9:
e8:94:bb:64:61:03:a7:52:d4:19:be:ce:3a:bf:31:
79:23:a8:23:97:a9:25:7f:dd:fb:5b:df:cf:6f:f5:
b1:fb:e7:34:97:91:61:77:48:f1:52:94:f6:4b:e0:
8c:4c:ad:82:c5:96:13:4d:e5:25:d1:85:19:f8:5c:
d7:31:b6:8f:b0:d2:4e:d3:1c:a1:80:e4:ba:cd:00:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:14:AC:82:DE:B1:A7:D8:72:02:FD:1B:86:43:3C:2B:09:7F:FB
X509v3 Authority Key Identifier:
keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:01:05:b2:4e:43:54:f6:9a:94:cf:cf:80:dc:a5:3a:ea:90:
16:cd:ca:a3:b1:94:7e:ed:8d:2b:18:35:fd:92:4c:74:e3:0c:
04:87:dd:4d:9e:f2:c0:aa:cd:2e:0e:9f:bb:a8:0d:5a:54:5e:
53:19:71:f9:91:73:62:d3:88:e5:a8:63:a1:8f:ca:3c:91:0a:
eb:3e:20:4c:06:de:ad:4f:43:1e:c0:ad:de:ce:57:86:f3:36:
bb:11:80:25:b3:44:da:bb:b6:7c:f1:37:de:c8:c8:07:ab:ca:
28:6a:c6:0e:30:06:24:06:76:57:40:fc:23:0b:e6:a7:a6:06:
0f:ea:d2:8f:3e:46:77:5c:e6:3e:71:52:5d:e7:8d:ba:d2:62:
c8:b6:ec:bf:af:3d:ab:26:be:d8:0b:9b:d8:a9:0c:a9:47:d9:
49:e9:de:3b:92:d0:70:d3:5d:89:88:28:77:88:35:83:00:97:
68:bd:e3:be:24:3a:64:0c:25:0f:8d:9f:37:0c:da:d2:4e:4d:
94:0a:97:5f:74:4f:02:b1:8a:5a:87:a6:1a:00:42:88:22:c0:
eb:ef:2c:d4:2c:e6:a3:2e:ad:d6:fc:ff:e7:25:9e:45:c6:6c:
8b:e6:7f:13:6d:26:84:ce:8a:24:d0:fe:8a:b7:a4:d4:91:a3:
99:f9:b2:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO5IRJn26esApjNJJr4CUShHBVHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4
QkFGNzM5RTAeFw0yNTAxMzAxMzM2NTZaFw0yNTAyMDIxNDEyNTZaMDMxMTAvBgNV
BAMTKDU3MDcxNEFDODJERUIxQTdEODcyMDJGRDFCODY0MzNDMkIwOTdGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJpgC8Y1m9GYGdNswYToq0oul
LRj4oNaSjPDz6vsyrL7dv1hSHT17GbRImrNRcV6xzzuW7bRZjGDEw3hGfsRarFqT
ETFb0+U2/HARVZBC1Ocox9kgk1RDQH3So8nz488M/VI5lMW/YGSXANTvZ779T8fi
SHYUj/q6yWXO7tWMcI2xDNkvI1YJOIi01KHNzbp4rGmAj6NYo1KWB2CAtCxVXLw+
JqCBud8nS4+JoJiP14P4qeiUu2RhA6dS1Bm+zjq/MXkjqCOXqSV/3ftb389v9bH7
5zSXkWF3SPFSlPZL4IxMrYLFlhNN5SXRhRn4XNcxto+w0k7THKGA5LrNAPP3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVwcUrILesafYcgL9G4ZDPCsJf/swHwYDVR0j
BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy
NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG
NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm
N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1
NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGwBBbJOQ1T2mpTPz4DcpTrqkBbNyqOxlH7t
jSsYNf2STHTjDASH3U2e8sCqzS4On7uoDVpUXlMZcfmRc2LTiOWoY6GPyjyRCus+
IEwG3q1PQx7Ard7OV4bzNrsRgCWzRNq7tnzxN97IyAeryihqxg4wBiQGdldA/CML
5qemBg/q0o8+Rndc5j5xUl3njbrSYsi27L+vPasmvtgLm9ipDKlH2Unp3juS0HDT
XYmIKHeINYMAl2i9474kOmQMJQ+NnzcM2tJOTZQKl190TwKxilqHphoAQogiwOvv
LNQs5qMurdb8/+clnkXGbIvmfxNtJoTOiiTQ/oq3pNSRo5n5spc=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:26 2025 by rpki-client