Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json)
Hash identifier: R+gLiPNsVcSXgUVsBBhEAsVjjdK4aT8R4uiXGETwLhA=
Subject key identifier: F4:E0:B1:D6:F3:A3:E4:22:68:80:2E:80:A2:11:68:BD:D7:71:88:30
Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Certificate serial: 6A8513C4F30B74DE24B45D02782E47F6DDD691A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
Manifest number: 0437
Signing time: Fri 28 Mar 2025 08:42:15 +0000
Manifest this update: Fri 28 Mar 2025 08:37:15 +0000
Manifest next update: Mon 31 Mar 2025 09:12:15 +0000
Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: Pgg6hd/aoF9gSZxxNbxMG1+nn5wufrp+612BMJF5VOY=)
2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:85:13:c4:f3:0b:74:de:24:b4:5d:02:78:2e:47:f6:dd:d6:91:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Validity
Not Before: Mar 28 08:37:15 2025 GMT
Not After : Mar 31 09:12:15 2025 GMT
Subject: CN=F4E0B1D6F3A3E42268802E80A21168BDD7718830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:0e:db:7c:f7:63:e8:ec:70:10:76:bd:f8:
4e:1b:f4:da:d2:24:33:4d:00:85:6a:e6:9f:bd:4f:
00:9b:bb:f3:38:58:ed:f1:a1:f9:9a:e0:7e:a6:62:
ae:58:d0:9a:f4:ee:19:96:74:50:e7:7f:32:ec:28:
44:db:7b:dd:e1:13:23:64:07:2e:8a:3a:29:46:52:
be:b8:66:e0:6a:77:fa:52:29:56:34:e8:b7:34:ba:
76:61:ba:39:64:8f:a9:8b:c2:6c:a2:cb:41:48:df:
1d:5a:03:bf:c4:cb:d1:0a:98:0b:20:81:5b:fb:9a:
22:49:ca:f2:c5:33:00:4b:f0:1b:c6:bd:06:12:95:
53:6e:7d:87:9c:06:ce:f9:09:e2:cc:97:40:69:fd:
2e:8c:9b:2e:69:cf:e4:c6:3f:96:cb:65:03:68:86:
db:05:bc:29:42:5d:70:eb:7e:dc:7a:1c:16:57:10:
85:6e:23:1e:c1:cc:b8:53:32:33:a4:74:08:a4:c1:
f8:2d:2c:35:25:c3:40:51:7c:4e:97:e2:5b:0c:e2:
07:cf:c4:64:30:11:d3:c7:48:09:cc:3a:3d:af:8f:
28:1a:a3:7d:ac:65:90:41:25:c5:bf:ac:06:67:c5:
98:1b:82:3c:01:2e:03:42:8c:e2:c4:4e:3b:b4:7c:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:B1:D6:F3:A3:E4:22:68:80:2E:80:A2:11:68:BD:D7:71:88:30
X509v3 Authority Key Identifier:
keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:01:c8:c4:ba:b4:79:6e:5a:37:4b:b4:4e:db:e8:61:b6:dc:
a5:3f:2e:59:73:c2:90:9e:94:b2:00:2c:d7:3b:d6:06:d8:70:
b5:eb:1c:22:9e:db:4c:21:65:d0:df:15:01:0f:26:07:33:81:
23:70:35:36:36:61:df:59:84:15:3d:73:a6:69:c4:c0:fe:c7:
58:80:f3:e0:28:c3:39:98:4a:ac:6d:a3:d5:5e:e0:13:de:99:
86:ee:9e:ef:8e:a0:7a:50:46:71:04:a2:45:1d:e6:1e:62:8f:
f8:d6:df:19:12:e5:8d:27:24:01:6d:81:17:4f:01:2f:a5:bf:
97:32:30:af:54:17:bd:98:c1:5f:11:71:f5:2f:56:81:91:98:
e8:e9:cb:45:ab:22:36:2f:70:05:73:d0:cb:8e:57:0e:1d:0f:
7d:42:17:40:fe:57:73:7e:79:c1:47:1f:c6:f7:f6:c3:af:5a:
fc:b1:fc:d1:41:95:23:cd:ce:bf:64:34:32:50:e9:28:9e:ca:
49:7b:d4:cf:a3:ba:6b:31:02:a8:2e:84:3e:b0:15:e8:c0:b2:
8e:79:21:6f:40:cb:8d:2b:62:9c:18:a3:f3:63:f0:e1:de:dc:
66:35:37:42:05:fd:73:64:02:6c:42:b8:90:78:73:fc:ea:78:
ed:df:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:45 2025 by rpki-client