Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft
File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json)
Hash identifier: dkwblOstXHmus6D/9TX9VK3kcYhbA7f+8Q4W2iA3nf0=
Subject key identifier: 81:F6:C1:98:DB:21:42:5D:63:59:7E:FD:E1:02:97:02:0F:31:23:3F
Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA
Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA
Certificate serial: 77DB515B930F43F7EDD1CC3F4982C6DD8863401C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft
Manifest number: AC
Signing time: Fri 31 Jan 2025 06:01:22 +0000
Manifest this update: Fri 31 Jan 2025 05:56:22 +0000
Manifest next update: Mon 03 Feb 2025 16:22:22 +0000
Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: Nq1z5JegIHWxFVNeYq8kOVn2a1flFap1KJcpAwCpvAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:db:51:5b:93:0f:43:f7:ed:d1:cc:3f:49:82:c6:dd:88:63:40:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA
Validity
Not Before: Jan 31 05:56:22 2025 GMT
Not After : Feb 3 16:22:22 2025 GMT
Subject: CN=81F6C198DB21425D63597EFDE10297020F31233F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:7a:f0:80:ad:10:1c:3f:34:40:73:a1:9c:
aa:45:49:e4:49:68:2c:a0:37:a1:e5:ad:3e:49:d3:
54:c5:62:63:48:e4:ea:fd:32:3f:77:a4:fc:4c:df:
25:9f:9c:18:13:ee:ec:28:06:ab:00:a7:13:43:0d:
87:62:42:75:95:89:82:d7:a8:22:86:eb:55:c4:5f:
8a:b1:a2:87:9b:46:97:6a:8d:b2:24:8f:a7:e7:a3:
62:d0:0e:94:72:24:f1:47:f5:b9:88:2b:b2:e6:f3:
07:97:8e:33:42:6a:a0:38:24:98:a2:35:04:a1:52:
a3:6f:60:63:dc:63:0d:8e:9b:24:ea:f1:ab:31:87:
fa:c9:fb:8a:88:7b:ad:12:00:b5:23:d9:27:dc:8a:
9b:85:a8:58:b4:69:c3:ab:ac:3f:04:a0:09:b4:45:
77:4d:4a:b1:98:0a:18:3f:79:40:ef:de:95:91:0b:
b6:47:f6:c9:1b:ab:5f:d6:f5:cb:3e:1b:8c:8c:11:
62:e1:91:8f:d6:3d:ef:f5:20:7e:2b:6b:ce:db:b4:
f6:f2:e5:4c:d7:0e:77:dc:d7:87:ff:15:fd:9e:b1:
1f:86:d1:9b:fb:8c:21:96:83:01:cd:90:00:0b:d1:
2f:bd:6f:1b:03:2e:e0:d0:54:a8:27:1f:5c:b4:26:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:C1:98:DB:21:42:5D:63:59:7E:FD:E1:02:97:02:0F:31:23:3F
X509v3 Authority Key Identifier:
keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a7:c1:8d:4e:43:62:ff:ff:b2:5a:35:46:8f:35:eb:93:48:
6c:9d:cc:67:b5:d6:76:ad:7a:33:55:f5:90:c2:83:8b:28:f0:
e7:6a:4f:56:ee:dd:d5:58:d1:e9:e0:4f:13:5e:e2:f0:0a:ae:
25:b5:44:f9:ba:e5:bc:49:d8:ed:eb:69:e0:74:8a:a6:fe:8e:
0e:4d:da:e5:c3:c4:97:ad:3c:61:d8:0b:00:93:0f:46:5e:35:
4d:e1:21:bb:5f:07:a1:87:df:dc:55:8f:83:28:f4:c9:5c:01:
91:c5:08:fb:2c:42:fe:9c:e1:68:72:35:b8:f5:69:87:27:ce:
47:8c:b8:55:79:3a:73:e7:e1:a2:4e:12:c4:0d:0f:cb:22:dc:
96:60:14:97:36:43:1a:b6:ed:33:62:90:5f:d5:78:c4:da:de:
91:e0:80:d2:18:6e:d7:07:4e:a7:b9:a7:5d:d8:67:95:95:a2:
37:75:a5:28:b6:3c:00:6f:4d:16:57:bf:3b:7d:b7:20:80:ef:
f3:42:6a:02:4d:74:3d:fb:ca:93:0b:9a:49:46:64:c4:6f:dc:
01:26:17:1c:b5:95:a5:e7:96:54:c8:07:18:73:61:48:d8:b0:
a5:39:f4:dc:ee:6e:26:39:ae:40:41:ef:53:4a:8b:b1:0c:89:
d0:3a:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:29 2025 by rpki-client