Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
File: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft (raw, json)
Hash identifier: h0fAC5l4Rtgz5cqt8505QzPZLr2CfXeMFbcK/RwGS6g=
Subject key identifier: D7:AF:03:05:88:29:D2:DC:97:77:BB:F8:42:4E:6D:4C:86:07:2A:D9
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Certificate issuer: /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial: 21C43A1EB2D6B7431BA3A431C18D86A166594F2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
Manifest number: 0217
Signing time: Sat 29 Mar 2025 10:12:18 +0000
Manifest this update: Sat 29 Mar 2025 10:07:18 +0000
Manifest next update: Tue 01 Apr 2025 18:47:18 +0000
Files and hashes: 1: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: Ai97/AeZ67d5F3AYWobNbu9wLgxWIRH2a6eXmHZgojQ=)
2: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=)
3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: kwL1JREwxH10sgLMYdlWUdKS0D8gYxJYzVh+9DEMKo4=)
4: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl (hash: eeJGBX0fe7VNSd9NH2dxG7RS3zqC71qOlHE6WRMHvNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c4:3a:1e:b2:d6:b7:43:1b:a3:a4:31:c1:8d:86:a1:66:59:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Validity
Not Before: Mar 29 10:07:18 2025 GMT
Not After : Apr 1 18:47:18 2025 GMT
Subject: CN=D7AF03058829D2DC9777BBF8424E6D4C86072AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:14:3e:8c:9e:b5:fa:a6:c6:7d:d2:b3:09:
43:74:9a:11:2f:1e:ab:2e:82:e7:d1:44:93:1d:a6:
80:84:2e:e0:59:c0:6d:7c:5a:a2:50:bb:b6:3f:eb:
46:e7:2a:04:12:02:f6:15:a2:bf:18:a9:e5:18:c0:
22:a7:3b:82:d8:e4:ac:d2:9b:15:54:78:b6:ad:3c:
d5:e2:20:2d:2a:25:bf:10:65:82:bb:b0:96:61:c0:
09:ce:fa:9e:66:62:a3:86:e2:11:7f:53:5b:f6:17:
7d:cc:a4:69:47:e6:e7:16:60:8c:fb:0a:9e:e7:51:
32:36:36:e8:0b:5c:55:60:c3:3e:9b:3a:f1:8f:fe:
60:76:61:b0:fd:25:61:3a:72:44:0f:59:20:02:82:
62:93:9c:d4:8f:f3:b9:6d:c9:b4:7e:c9:35:d0:0e:
84:73:60:c3:14:8b:cf:53:d7:c1:99:4a:fc:38:a9:
59:b6:ca:b1:33:bf:2b:97:d5:af:be:09:e4:14:74:
e6:9c:bd:7e:02:a3:14:d0:dc:16:7c:f2:7a:00:32:
1d:aa:3f:c8:65:c3:24:67:9f:35:83:9c:c8:4d:c1:
d4:bb:49:6e:d5:54:ac:b5:02:ef:fb:db:1b:53:a5:
0c:95:53:88:b8:3c:e5:c4:0e:6d:4a:82:af:c2:7d:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:03:05:88:29:D2:DC:97:77:BB:F8:42:4E:6D:4C:86:07:2A:D9
X509v3 Authority Key Identifier:
keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:7d:4e:83:89:97:a7:a6:40:d7:7e:f0:7e:02:30:65:09:
fc:05:41:81:c1:4f:64:b5:ee:ad:1e:b9:5f:b1:98:0c:f7:7b:
ed:f2:9a:67:fe:b3:bf:05:79:f4:06:ad:4e:ff:a7:f8:f5:65:
49:6a:e8:72:e8:cd:8c:ce:3a:3a:13:ac:73:ab:37:bb:a2:92:
69:3c:cf:16:7b:59:c2:60:04:64:40:b6:28:3a:5f:71:8e:ea:
e8:3a:a0:f9:e4:f5:38:0c:ce:fe:42:d3:cf:84:d9:0c:4a:02:
0b:22:31:43:10:97:4a:c7:c9:47:e5:26:32:2c:a8:3d:ec:23:
00:ef:5a:f2:92:ac:7f:d8:70:c3:a1:3e:cb:a3:44:1e:f4:af:
b2:c2:d0:11:a8:5a:2f:fa:9b:2f:9a:d2:28:2e:fd:84:e4:5c:
3e:18:77:92:3c:c2:63:57:a4:0d:54:d5:61:9b:04:35:9d:bb:
cc:9c:de:56:71:6c:1a:b3:7c:09:e8:28:57:7b:10:a4:dd:a6:
d6:f5:65:9b:cd:a8:78:75:a2:7d:7d:2b:37:95:26:37:81:6c:
ae:e6:8d:4f:7d:6b:e1:03:c9:98:2f:21:c2:48:55:0a:63:96:
77:21:41:ec:4d:da:85:b6:29:19:af:a8:86:91:40:4f:91:cc:
29:9b:da:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIcQ6HrLWt0Mbo6QxwY2GoWZZTy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0
NzBCNDFGMzAeFw0yNTAzMjkxMDA3MThaFw0yNTA0MDExODQ3MThaMDMxMTAvBgNV
BAMTKEQ3QUYwMzA1ODgyOUQyREM5Nzc3QkJGODQyNEU2RDRDODYwNzJBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrxQ+jJ61+qbGfdKzCUN0mhEv
HqsugufRRJMdpoCELuBZwG18WqJQu7Y/60bnKgQSAvYVor8YqeUYwCKnO4LY5KzS
mxVUeLatPNXiIC0qJb8QZYK7sJZhwAnO+p5mYqOG4hF/U1v2F33MpGlH5ucWYIz7
Cp7nUTI2NugLXFVgwz6bOvGP/mB2YbD9JWE6ckQPWSACgmKTnNSP87ltybR+yTXQ
DoRzYMMUi89T18GZSvw4qVm2yrEzvyuX1a++CeQUdOacvX4CoxTQ3BZ88noAMh2q
P8hlwyRnnzWDnMhNwdS7SW7VVKy1Au/72xtTpQyVU4i4POXEDm1Kgq/CfZfnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU168DBYgp0tyXd7v4Qk5tTIYHKtkwHwYDVR0j
BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw
OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC
NDFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx
ZjQtN2JmZGY5M2Y3YmFhLzAvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVC
QzU0NzBCNDFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHWFfU6DiZenpkDXfvB+AjBlCfwFQYHBT2S1
7q0euV+xmAz3e+3ymmf+s78FefQGrU7/p/j1ZUlq6HLozYzOOjoTrHOrN7uikmk8
zxZ7WcJgBGRAtig6X3GO6ug6oPnk9TgMzv5C08+E2QxKAgsiMUMQl0rHyUflJjIs
qD3sIwDvWvKSrH/YcMOhPsujRB70r7LC0BGoWi/6my+a0igu/YTkXD4Yd5I8wmNX
pA1U1WGbBDWdu8yc3lZxbBqzfAnoKFd7EKTdptb1ZZvNqHh1on19KzeVJjeBbK7m
jU99a+EDyZgvIcJIVQpjlnchQexN2oW2KRmvqIaRQE+RzCmb2qY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:13 2025 by rpki-client