
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json)
Hash identifier: WMXtS35th+BTUxRaYOJxa+ezvXG0aaNTrFo6/b0oih8=
Subject key identifier: 12:C0:F0:CF:14:4C:C3:B0:BB:90:5F:9B:B6:08:2F:2D:43:F1:B0:10
Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Certificate serial: 01CB944ACA0A29D5AAF511991234CC71B6E417EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
Manifest number: 01A9
Signing time: Fri 28 Mar 2025 17:31:26 +0000
Manifest this update: Fri 28 Mar 2025 17:26:26 +0000
Manifest next update: Tue 01 Apr 2025 02:19:26 +0000
Files and hashes: 1: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: eX/rCjm1WQcKosMFWL1/skFOvd7innmWQgO/wYL0Im8=)
2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: fcf0jbm+HiTLpxvLBZNvyWHDVsx0os5wA9bQgitMn5g=)
3: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: MQLOXLE7kItbI3VqEvN4se62a6lNzHSlzAIOByXQI/0=)
4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: lnxOKEd+PewMsG44qj3HVvV3WG1qaRgIi/Wp6zXG+ZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cb:94:4a:ca:0a:29:d5:aa:f5:11:99:12:34:cc:71:b6:e4:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Validity
Not Before: Mar 28 17:26:26 2025 GMT
Not After : Apr 1 02:19:26 2025 GMT
Subject: CN=12C0F0CF144CC3B0BB905F9BB6082F2D43F1B010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:f8:3f:e9:5d:c1:ae:1e:df:c0:df:50:75:
63:23:df:96:98:4c:6a:c1:cc:66:f9:9c:3c:ac:00:
84:2d:da:d0:f0:f1:6c:c9:22:1a:e8:89:1f:cb:11:
39:69:49:46:65:2e:ce:15:9a:43:8d:2e:3e:de:55:
de:05:7f:e1:6f:b1:2a:7f:89:72:40:fb:44:fc:6d:
5a:69:b9:e4:d1:96:d6:b8:e5:72:3f:16:33:73:a9:
64:4e:8f:fd:18:ed:0c:21:d8:72:b6:b8:a5:22:07:
5d:08:30:e0:63:8c:00:9c:80:48:2d:4b:e5:3f:db:
e2:83:e2:09:d4:25:ee:2e:da:bd:a0:e2:b2:e8:4a:
e3:b2:a7:04:06:d9:15:1f:44:65:81:8a:3c:5e:a0:
fd:0f:4c:15:81:22:67:a2:82:01:a2:cb:f0:ba:db:
42:df:51:85:b6:1d:55:0e:17:1d:02:69:e0:98:50:
00:65:dd:b7:6f:04:ea:05:7f:0b:49:2f:49:92:1a:
9c:8f:b0:7b:ed:14:59:72:7f:c6:cc:20:ab:5d:20:
c1:24:8c:00:83:5e:68:50:8a:66:a8:e0:39:04:6f:
33:31:fa:01:53:e4:0e:18:3e:76:e2:e2:26:c8:82:
4c:5f:ab:a3:81:db:98:d7:30:9c:15:77:90:00:33:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:F0:CF:14:4C:C3:B0:BB:90:5F:9B:B6:08:2F:2D:43:F1:B0:10
X509v3 Authority Key Identifier:
keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:d5:40:98:59:19:3a:c2:de:31:e3:31:82:b5:e4:97:0b:
ea:98:cc:ec:c8:42:f4:47:fa:31:c3:ca:23:41:98:03:44:06:
05:4c:aa:76:02:a6:2f:11:09:55:97:72:18:dc:94:09:84:7d:
84:6f:77:9e:00:db:2b:cb:87:b7:ab:99:26:be:67:ad:71:f0:
3a:2e:39:71:75:61:86:48:25:fa:3d:e4:4c:e4:38:90:15:53:
9f:e2:ac:c7:57:7a:14:5a:7f:62:81:17:92:b1:21:2d:d8:1c:
d6:e8:84:90:38:f7:eb:22:a4:25:c4:2e:a9:cd:bd:f9:89:32:
ea:65:f9:1b:6b:c1:ce:29:a3:b0:4f:5b:8c:32:bd:f7:aa:6a:
ef:45:c7:12:5e:86:17:44:7b:3c:e3:e8:44:e2:bd:2d:1b:29:
6a:5f:46:81:d4:85:be:7f:8f:54:19:8f:89:de:d7:37:05:2c:
5a:11:31:35:f4:0c:6a:3e:24:d8:77:f5:64:be:fa:19:c1:68:
8c:50:15:e1:44:90:83:32:df:26:4d:4a:3e:92:89:b2:16:68:
46:da:ac:2c:58:1c:68:27:f9:49:35:2b:e8:2d:0b:e3:0a:74:
2a:ff:5b:22:2d:c9:ef:d0:a6:d9:42:28:e8:b9:fb:f6:1b:c0:
6e:99:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:58 2025 by rpki-client