Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json)
Hash identifier: f5SOg/qFbTcLSsLJOXtGO5bxYz9x4XzFkkEJjsMuelk=
Subject key identifier: 64:71:4B:F6:A1:0D:0D:75:90:8B:60:6C:9A:00:3F:61:C1:D9:23:32
Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Certificate serial: 5C29AC4C2D653FCA4A81DBC28BD3C80A58382C29
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
Manifest number: 2B
Signing time: Fri 31 Jan 2025 00:20:52 +0000
Manifest this update: Fri 31 Jan 2025 00:15:52 +0000
Manifest next update: Mon 03 Feb 2025 04:51:52 +0000
Files and hashes: 1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=)
2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: j4cD9g7cQpp/XuaHCKPIgnJhw/gV4fDmb6XtcVuCI58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:29:ac:4c:2d:65:3f:ca:4a:81:db:c2:8b:d3:c8:0a:58:38:2c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Validity
Not Before: Jan 31 00:15:52 2025 GMT
Not After : Feb 3 04:51:52 2025 GMT
Subject: CN=64714BF6A10D0D75908B606C9A003F61C1D92332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:00:48:f1:9a:4e:69:08:18:26:ee:49:76:
83:35:74:f3:77:eb:cf:6f:43:77:f2:fb:43:f1:33:
d1:ac:89:c8:0a:98:fc:a5:66:bf:5b:00:ef:2d:01:
23:00:e3:15:97:27:6c:cb:2d:5e:72:8e:0a:9c:1f:
d6:3a:12:c5:67:37:b6:cc:57:36:7b:c7:fb:ca:ef:
f0:59:e3:f7:bf:16:6d:ce:e9:c4:51:36:6b:20:66:
83:4c:cb:0a:f0:25:1d:40:92:33:c0:12:6e:8a:95:
7f:6c:1b:53:77:c0:19:df:12:43:d1:4d:72:65:28:
a1:eb:da:10:77:f7:7f:2e:85:6f:e1:a8:3c:2c:fe:
f7:5e:52:9f:cc:c9:51:00:42:3a:4e:20:34:3b:ab:
7d:7e:59:a7:22:2a:87:46:df:c0:a8:c9:1b:2b:cc:
32:9b:31:b4:a2:21:18:5f:de:65:7c:9c:b8:3e:ad:
7d:cb:0f:06:e9:15:21:fd:32:6c:70:18:a3:03:30:
75:38:67:c4:ec:8e:e8:f3:a5:b5:74:67:b5:2e:0d:
dd:4e:1b:4b:60:57:fa:6e:cb:e7:13:f1:f8:74:a0:
89:11:a7:27:0e:12:e9:c2:f9:e1:fa:32:9d:f5:2a:
b4:5d:e9:c6:cd:19:72:22:45:e2:f5:2a:93:f7:93:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:4B:F6:A1:0D:0D:75:90:8B:60:6C:9A:00:3F:61:C1:D9:23:32
X509v3 Authority Key Identifier:
keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:87:50:b1:91:77:ce:e2:c7:f9:f3:33:de:92:95:e3:ab:49:
ac:e7:36:62:9d:6a:d1:47:98:36:61:0c:17:65:be:91:75:59:
ca:4f:e9:fd:7e:c3:83:e0:13:f9:6a:8a:5e:00:b7:20:48:2c:
b2:3f:83:aa:f0:be:22:fe:bf:61:d5:50:25:cf:23:e6:ed:ac:
aa:e5:a7:e6:bd:6f:19:d0:74:cd:91:16:38:62:0c:88:74:82:
8c:28:4e:3a:e7:b1:d2:42:71:67:57:56:43:4f:bd:e2:d5:40:
1a:0a:96:95:88:8e:c0:4c:71:34:88:bb:c2:af:68:07:ac:a5:
f2:bb:9b:b9:51:55:32:38:93:4d:c3:ae:bb:5b:0b:95:0f:5f:
56:95:23:89:82:a7:07:e9:81:f3:4a:13:cd:3b:b4:d5:26:99:
17:cf:28:b2:d4:ea:32:7e:b4:5f:bc:8d:cc:6f:ff:92:31:40:
ce:6e:6f:fa:97:33:c1:2f:e4:eb:f8:58:4f:eb:97:a2:f3:bb:
c5:b0:e8:9f:80:39:b4:da:3a:2e:26:67:3c:09:09:e4:22:5a:
68:5a:6d:24:ef:81:52:1a:2c:3f:13:5a:94:89:38:ee:28:56:
2c:47:27:84:37:f8:29:62:f8:90:57:d2:d6:ef:90:4c:6d:c9:
4e:0d:79:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXCmsTC1lP8pKgdvCi9PIClg4LCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF
OUUwN0JGNDAeFw0yNTAxMzEwMDE1NTJaFw0yNTAyMDMwNDUxNTJaMDMxMTAvBgNV
BAMTKDY0NzE0QkY2QTEwRDBENzU5MDhCNjA2QzlBMDAzRjYxQzFEOTIzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mQBI8ZpOaQgYJu5JdoM1dPN3
689vQ3fy+0PxM9GsicgKmPylZr9bAO8tASMA4xWXJ2zLLV5yjgqcH9Y6EsVnN7bM
VzZ7x/vK7/BZ4/e/Fm3O6cRRNmsgZoNMywrwJR1AkjPAEm6KlX9sG1N3wBnfEkPR
TXJlKKHr2hB3938uhW/hqDws/vdeUp/MyVEAQjpOIDQ7q31+WaciKodG38CoyRsr
zDKbMbSiIRhf3mV8nLg+rX3LDwbpFSH9MmxwGKMDMHU4Z8TsjujzpbV0Z7UuDd1O
G0tgV/puy+cT8fh0oIkRpycOEunC+eH6Mp31KrRd6cbNGXIiReL1KpP3k86VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZHFL9qENDXWQi2BsmgA/YcHZIzIwHwYDVR0j
BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy
QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw
N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy
YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5
MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALuHULGRd87ix/nzM96SleOrSaznNmKdatFH
mDZhDBdlvpF1WcpP6f1+w4PgE/lqil4AtyBILLI/g6rwviL+v2HVUCXPI+btrKrl
p+a9bxnQdM2RFjhiDIh0gowoTjrnsdJCcWdXVkNPveLVQBoKlpWIjsBMcTSIu8Kv
aAespfK7m7lRVTI4k03DrrtbC5UPX1aVI4mCpwfpgfNKE807tNUmmRfPKLLU6jJ+
tF+8jcxv/5IxQM5ub/qXM8Ev5Ov4WE/rl6Lzu8Ww6J+AObTaOi4mZzwJCeQiWmha
bSTvgVIaLD8TWpSJOO4oVixHJ4Q3+Cli+JBX0tbvkExtyU4Nea8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:36 2025 by rpki-client