Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft
File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json)
Hash identifier: XAMLlZH4DH+n2+PQfmnVRaoTJ0m8jqOtW9oVcp1YsyQ=
Subject key identifier: CA:A1:64:B4:29:4A:C3:BE:44:20:1C:4F:CC:C0:2C:69:A5:81:D2:20
Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14
Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014
Certificate serial: 4353E97E2FD48DAE16AD49F3385C353E17BA25E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft
Manifest number: 72
Signing time: Thu 27 Mar 2025 10:11:14 +0000
Manifest this update: Thu 27 Mar 2025 10:06:14 +0000
Manifest next update: Sun 30 Mar 2025 13:09:14 +0000
Files and hashes: 1: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: tx+NYD7MV5nIXLCsWTSsafNGSyRtZJEUA+6bznpo5zs=)
2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: M/Ju5mYiYULdoDAFDktbRdkMaN2jwf5Cj2qaEO3as9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:53:e9:7e:2f:d4:8d:ae:16:ad:49:f3:38:5c:35:3e:17:ba:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014
Validity
Not Before: Mar 27 10:06:14 2025 GMT
Not After : Mar 30 13:09:14 2025 GMT
Subject: CN=CAA164B4294AC3BE44201C4FCCC02C69A581D220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:7d:c6:c3:8d:d6:41:4a:49:ef:7d:33:cf:
e6:16:1b:78:0c:4f:06:d6:15:d9:b2:6f:82:2e:96:
7b:cb:c2:bd:22:91:f3:03:d2:01:81:01:c0:a0:21:
a4:c1:84:fc:b0:70:7d:fc:7e:3d:08:8f:82:78:a0:
d9:e6:b0:fc:a1:ff:d6:19:48:7b:d1:4e:00:fc:cc:
b5:e6:f5:06:a3:e3:04:e2:6e:5c:b9:eb:32:94:f1:
89:5c:b7:b6:a2:48:2b:6d:34:9b:e0:aa:1f:09:23:
6a:dc:2b:9b:c6:07:e8:55:94:9d:80:9f:c7:9c:51:
05:db:25:41:b4:b1:73:6f:b5:16:2d:ee:b9:20:d6:
c9:0b:8d:c3:17:5e:0a:79:1e:0b:6a:9f:3a:58:36:
18:90:e9:cd:d3:92:a3:55:20:d8:a0:e5:a1:eb:a4:
c9:09:06:99:3e:2c:e8:9a:4a:42:09:bb:ad:25:e9:
12:8e:c9:c7:ca:a5:2c:db:2f:49:79:9f:c5:de:42:
5d:07:f0:8b:50:87:e8:da:f1:28:0d:70:9b:07:e2:
11:e3:14:7b:b4:72:d4:c0:4d:33:15:af:57:16:2b:
ce:33:df:7b:1b:e8:1a:3a:9d:45:d9:7a:85:aa:75:
09:0b:4f:1f:26:3d:bc:8b:36:09:3d:9c:f8:7c:8e:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:64:B4:29:4A:C3:BE:44:20:1C:4F:CC:C0:2C:69:A5:81:D2:20
X509v3 Authority Key Identifier:
keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:2b:45:b1:8e:53:d3:6c:c9:e1:12:51:e0:80:44:b6:84:
a6:eb:92:74:bd:a5:32:cc:27:2d:14:81:df:19:de:1d:7d:59:
62:5a:60:f2:b1:e7:04:0d:58:b9:b7:be:82:e5:8c:81:c2:36:
0f:a4:37:16:05:be:b7:cb:63:b2:0d:48:81:25:f7:13:28:0a:
6f:31:a6:97:17:50:c7:11:96:3c:47:cb:48:81:c8:71:f5:72:
e4:83:24:72:2b:7c:8e:2a:86:7d:d2:c5:70:ee:8d:07:81:de:
c6:91:ab:49:0e:da:14:ef:5d:46:66:cf:b8:25:00:5a:d2:12:
47:df:dd:76:3f:1e:cb:7d:46:8b:4d:60:ff:b8:ad:ff:36:6f:
ec:4e:da:61:e1:d7:50:a8:5d:b4:88:94:2d:23:ce:bf:61:c7:
5d:64:21:b9:07:a5:96:6f:96:fa:de:06:cd:81:48:41:00:8e:
fe:e0:b5:c5:0c:07:84:7a:63:6c:9d:a5:a9:29:bc:dd:fb:1f:
9e:91:13:7e:10:cc:1b:3f:83:56:ca:15:ee:ad:11:30:df:2e:
9a:2e:5c:58:7a:6f:0b:52:04:7c:78:05:6e:02:86:7a:51:74:
5b:1b:3c:a1:83:c3:ff:83:63:88:a1:d3:ce:e4:05:f3:6d:8e:
b3:e3:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:31 2025 by rpki-client