Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json)
Hash identifier: rcD62Ptfhaj0QGmNyr7xwU/sVY+27ZzGCZ6bfQYghsQ=
Subject key identifier: F4:AD:D2:99:44:E5:A0:38:AE:BB:C5:16:A9:17:CD:BF:2D:68:BF:56
Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67
Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67
Certificate serial: 1F2BD8AE7DC4B5B4165AFEF243BBE8F767BCA5BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
Manifest number: 0487
Signing time: Sat 29 Mar 2025 10:41:24 +0000
Manifest this update: Sat 29 Mar 2025 10:36:24 +0000
Manifest next update: Tue 01 Apr 2025 14:00:24 +0000
Files and hashes: 1: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 3G3cuIsUsC93A5VqDBrlhjA6pHEL2QIiEv1ZbgGfh7c=)
2: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: waFtA9Rs9fa9JmBcejLpW23akTf5m+TT3YHpTZiNW5g=)
3: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: +kMIsYkkYBL9JgD87llrjtp6E+ZI80VFKUP+9fwyfhI=)
4: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: 3imARfoARO41gjJOsSeDwOoZkZ2pGVFuI3u+9WZACZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2b:d8:ae:7d:c4:b5:b4:16:5a:fe:f2:43:bb:e8:f7:67:bc:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67
Validity
Not Before: Mar 29 10:36:24 2025 GMT
Not After : Apr 1 14:00:24 2025 GMT
Subject: CN=F4ADD29944E5A038AEBBC516A917CDBF2D68BF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:c5:64:9c:6b:32:4a:5d:42:cc:c1:44:fd:
39:f7:42:fd:39:ad:59:46:09:07:f6:fe:84:70:1d:
09:d7:e0:b8:69:2b:fa:66:1a:f1:9f:7d:e2:fc:73:
52:10:89:c7:48:46:3c:2e:d0:8f:1c:38:5e:90:9a:
fe:d8:87:cf:1a:c6:55:84:4a:0a:0c:d1:9f:48:31:
b4:44:dc:fd:22:99:c1:6e:ac:2d:4c:10:ea:47:1b:
e4:67:6f:ed:f4:7f:81:14:43:68:ff:db:63:8d:84:
4f:67:54:3a:f8:a9:13:31:41:9d:0c:af:4e:84:ec:
81:0f:4a:3a:fa:63:3f:d7:d5:0d:33:04:34:01:bb:
7f:92:cd:5b:56:4f:6f:4b:a5:d5:89:da:86:79:74:
5a:59:96:14:7e:3e:ab:74:55:7e:cd:55:43:e5:89:
ec:9f:81:db:3d:1e:3f:44:8c:ec:1b:86:78:3c:51:
b1:f9:fa:69:31:41:59:14:ef:99:d6:0a:27:a1:b9:
80:43:a7:11:cd:5f:e6:0c:1c:bc:86:72:f4:8a:52:
9c:f1:d4:5f:9b:fe:5c:fe:63:38:7c:b3:29:e7:f7:
10:63:d5:4b:39:a9:c3:a1:db:45:dc:d3:71:4a:34:
0d:62:e0:cb:7e:44:e3:9c:a2:f1:39:af:96:30:62:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:D2:99:44:E5:A0:38:AE:BB:C5:16:A9:17:CD:BF:2D:68:BF:56
X509v3 Authority Key Identifier:
keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ab:a1:74:ea:d9:97:71:fe:ad:7a:3a:3a:2a:66:c6:50:a8:
3a:1d:6c:04:d4:fd:03:0a:07:8f:7b:34:20:40:9d:5b:24:73:
64:60:9e:29:3a:78:24:45:bc:5a:10:a9:b9:e6:a9:80:43:f3:
d8:89:79:73:cb:12:ad:41:90:e1:3c:a5:c2:7f:55:77:c3:81:
80:e0:cd:18:bc:e8:82:5d:f7:d1:7b:60:c0:bb:24:72:65:c3:
35:33:44:9c:23:50:c7:c8:5e:6e:c1:dd:8b:1b:05:81:8b:9b:
3c:bc:7f:ca:2c:0c:bd:a0:9d:74:03:14:96:e5:18:95:77:f2:
6a:ac:f1:5e:c6:9f:1c:4d:22:80:71:cd:56:79:51:1e:05:a3:
54:d6:47:c8:4f:cc:bd:16:08:fc:b7:22:ce:2d:64:0a:bd:91:
34:72:b5:87:af:af:fd:24:94:3d:95:6e:c7:ac:02:24:d6:8f:
fd:bb:2a:6a:81:ae:50:9f:f3:24:f1:61:2f:39:b6:54:32:ba:
a5:f9:64:94:08:a1:9b:6b:7c:7a:13:91:13:5f:73:4f:22:71:
05:8c:27:23:2d:4a:92:25:24:8f:a8:b7:d2:b1:2a:8b:e5:a3:
76:b8:af:fb:7d:ec:6c:96:56:c4:7c:7d:89:a0:07:b5:9b:42:
34:ac:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:24 2025 by rpki-client