Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json)
Hash identifier: +KIEDHlpU++eYOYHqJ098T9GLLW83FBGgYqph6Rt5qk=
Subject key identifier: 1D:83:EA:30:69:96:BA:FF:B5:2B:39:63:FB:F5:EC:A9:68:36:18:2D
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial: 2509C9FC6F9D139CDFE40147E78628645C8A4FDD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
Manifest number: 01CA
Signing time: Sat 29 Mar 2025 10:31:20 +0000
Manifest this update: Sat 29 Mar 2025 10:26:20 +0000
Manifest next update: Tue 01 Apr 2025 14:42:20 +0000
Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=)
2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=)
3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: nqU0RlGrSFWWUeeihZZ1tBH4jWmFHNr+3wd57W3xaBE=)
4: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:09:c9:fc:6f:9d:13:9c:df:e4:01:47:e7:86:28:64:5c:8a:4f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Validity
Not Before: Mar 29 10:26:20 2025 GMT
Not After : Apr 1 14:42:20 2025 GMT
Subject: CN=1D83EA306996BAFFB52B3963FBF5ECA96836182D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:55:1f:34:11:ac:e3:1d:1f:b6:f2:b3:96:
c0:7f:00:55:8e:ca:51:7d:fa:fc:4f:69:3f:80:b2:
0d:c7:47:b6:a2:b1:01:cc:c6:51:ed:eb:29:e2:44:
5d:9a:3e:c8:a4:15:61:9e:1b:3e:43:0f:61:e9:37:
96:73:3a:a9:16:ac:40:a2:a3:dd:49:3d:8d:1f:3c:
25:5d:f0:22:cf:2a:c1:07:9d:cf:0d:cd:cb:1d:86:
a7:5b:9f:73:a8:e6:09:b1:81:91:32:45:ac:de:f0:
19:ed:8c:ec:85:b7:75:42:95:7a:76:3e:b7:25:ac:
35:5f:83:ce:ae:60:48:1e:b4:f7:58:22:ea:e2:3b:
e2:a2:35:3f:eb:5c:bf:61:c0:28:9a:e0:89:60:51:
62:5e:96:60:66:cc:a8:f1:01:ca:fb:20:48:cb:aa:
37:4e:06:0d:3f:f9:40:dc:df:36:a3:62:95:7e:c0:
af:e5:f3:93:9b:f8:37:1c:f6:3f:08:be:64:2d:1b:
99:96:07:c7:67:69:a7:e1:42:e9:33:8c:ed:80:28:
a0:8d:54:9c:7e:9d:95:b4:e0:df:92:ae:86:27:a6:
aa:03:fd:2d:89:e1:7c:55:1b:3d:29:2c:89:da:34:
b1:56:78:65:3e:60:04:9b:df:48:3d:b8:f9:e0:49:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:83:EA:30:69:96:BA:FF:B5:2B:39:63:FB:F5:EC:A9:68:36:18:2D
X509v3 Authority Key Identifier:
keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:6a:c8:86:19:c1:29:57:58:09:ce:ac:b0:eb:51:b2:62:
21:4a:73:9e:f5:5b:7e:bb:30:a6:44:64:d5:3a:3c:10:bd:56:
65:05:07:f1:0c:b2:75:32:72:e4:d3:2f:35:fa:13:e9:92:c8:
00:f8:aa:93:e6:1c:5b:f8:f7:e0:45:13:c0:58:80:f5:8f:eb:
d1:79:dc:95:dd:08:2f:3b:75:f9:ce:49:b3:d9:09:af:27:cf:
6b:78:17:fa:43:bd:5a:28:db:5f:cf:fd:93:e1:9f:37:86:9c:
77:bf:cd:63:05:63:ed:6b:47:36:f6:89:f0:d6:f3:a5:e8:8f:
93:c4:04:a4:c3:89:e8:14:95:bf:ac:a7:f0:21:e1:d7:bd:64:
d2:23:e5:8e:e9:58:c0:29:99:e6:5c:85:95:a7:0e:e4:b5:56:
73:12:05:b0:67:09:f4:2c:f9:6f:98:6b:51:e3:f1:cb:21:77:
dc:44:3d:b4:80:6d:ef:0c:c3:cd:56:2e:dc:09:f3:0d:16:cc:
2d:d5:74:67:76:01:cf:a7:87:d9:e3:f2:2f:78:e0:e7:14:85:
6b:d0:ed:97:d7:2b:af:f9:01:25:0d:3e:34:2b:05:61:e7:03:
96:b9:68:27:ed:eb:10:ba:7c:39:6d:8c:a0:de:19:a5:26:50:
46:6b:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:33 2025 by rpki-client