Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json)
Hash identifier: g0ycH6WdXsVeXk7ePli1oPJqgTJYZw5ifzyvtvh0vCA=
Subject key identifier: 21:F9:B7:D1:83:6C:B6:83:7F:C6:97:BD:FF:D7:0F:02:92:3B:1C:0E
Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589
Certificate serial: 7F27FB3FB2F53205B76207A965EB090F7172B202
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 13:51:43 +0000
Manifest this update: Fri 31 Jan 2025 13:46:43 +0000
Manifest next update: Mon 03 Feb 2025 18:18:43 +0000
Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: 8BVIVC5IOfDuD/vzOwqpX6ocKYMbnCQJCuwT+vDqg4g=)
2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: VmRTNF6O8M+AnB/zvqxaffecroR7hC8t3eEDnSwP8hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:fb:3f:b2:f5:32:05:b7:62:07:a9:65:eb:09:0f:71:72:b2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589
Validity
Not Before: Jan 31 13:46:43 2025 GMT
Not After : Feb 3 18:18:43 2025 GMT
Subject: CN=21F9B7D1836CB6837FC697BDFFD70F02923B1C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:62:0b:40:d8:0c:7d:e5:50:c6:ed:88:2c:
35:33:7f:05:3f:3f:65:27:76:19:9a:12:02:c7:a7:
d3:5e:f2:d8:b9:b5:41:da:ab:4d:9e:1d:ae:2d:d2:
77:e5:07:6d:d9:9b:0b:bd:7d:49:bb:70:f7:96:5b:
4d:55:82:bc:fd:4c:b4:02:a2:fd:26:83:b9:de:7f:
b4:b3:13:f2:7f:85:d3:9e:65:85:76:41:28:0e:4c:
49:8d:6f:d0:bd:c8:24:d4:5d:1e:45:f2:1a:ac:c7:
ab:e6:cd:77:42:0a:ab:1f:e0:ab:d3:2a:81:22:2c:
d5:96:bb:3c:86:74:da:b0:bf:fc:75:28:bd:2c:9b:
87:e0:b9:6d:72:cb:ba:40:f9:74:9d:7f:d7:35:28:
40:a0:42:cb:0c:41:35:22:8f:c2:96:ec:fb:94:25:
75:4e:3f:bf:4d:ea:ef:79:ee:eb:90:e4:2a:07:d3:
fa:70:70:ee:0b:39:49:18:19:03:81:1f:40:16:d5:
a2:49:06:9f:e2:33:e9:b0:7e:cf:e4:a5:14:28:ca:
2d:5d:5f:8e:21:78:cb:f8:bb:cb:59:56:91:cc:50:
8c:c6:77:c8:a0:99:7a:f9:68:d7:0a:bc:a3:2c:f2:
b7:1d:11:df:32:49:2d:69:43:c8:40:31:ba:52:35:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:B7:D1:83:6C:B6:83:7F:C6:97:BD:FF:D7:0F:02:92:3B:1C:0E
X509v3 Authority Key Identifier:
keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b2:8d:35:c0:e5:02:e0:22:e5:30:a2:b6:12:c9:d2:1b:0e:
d4:27:25:d0:95:cc:4c:b7:e2:99:43:44:de:90:e1:f1:6e:95:
6e:37:c3:16:a3:93:10:9a:df:6c:8c:29:b7:ae:2b:29:ea:2a:
d4:42:cc:67:12:fa:49:eb:89:7a:bf:97:4e:11:b9:d1:1e:20:
d8:9d:d8:02:7c:b3:02:48:d2:ee:9c:7a:17:b3:83:76:cd:59:
fd:2c:e1:01:35:01:3e:57:0c:f6:8b:18:ff:2b:97:71:67:cd:
56:05:87:f8:ee:e7:ac:8e:fa:f8:19:bc:c2:e4:9c:d6:fa:ee:
74:dc:63:b0:82:c7:62:01:4b:f5:fd:03:5d:8b:fb:3b:ad:b8:
38:0b:cd:7c:93:a1:4a:38:be:76:1b:0d:ad:62:98:7d:23:c9:
e4:e4:5e:9a:31:17:ae:d2:0b:0c:4f:03:31:d7:6f:1d:57:b2:
e8:90:84:c6:24:ac:67:5a:fe:d2:59:11:e6:cc:0b:73:3b:85:
f8:3b:51:8f:d4:f7:f5:50:d7:97:55:06:78:e1:ac:e5:a1:8b:
74:c6:de:cc:fb:74:fa:e0:0a:fb:02:3e:1c:69:9f:9b:aa:7b:
1d:a2:3a:3d:ac:c9:0e:f8:50:12:65:93:5f:92:22:d9:60:46:
7c:d5:8a:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfyf7P7L1MgW3YgepZesJD3FysgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx
MjMzQzU4OTAeFw0yNTAxMzExMzQ2NDNaFw0yNTAyMDMxODE4NDNaMDMxMTAvBgNV
BAMTKDIxRjlCN0QxODM2Q0I2ODM3RkM2OTdCREZGRDcwRjAyOTIzQjFDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpGILQNgMfeVQxu2ILDUzfwU/
P2UndhmaEgLHp9Ne8ti5tUHaq02eHa4t0nflB23Zmwu9fUm7cPeWW01Vgrz9TLQC
ov0mg7nef7SzE/J/hdOeZYV2QSgOTEmNb9C9yCTUXR5F8hqsx6vmzXdCCqsf4KvT
KoEiLNWWuzyGdNqwv/x1KL0sm4fguW1yy7pA+XSdf9c1KECgQssMQTUij8KW7PuU
JXVOP79N6u957uuQ5CoH0/pwcO4LOUkYGQOBH0AW1aJJBp/iM+mwfs/kpRQoyi1d
X44heMv4u8tZVpHMUIzGd8igmXr5aNcKvKMs8rcdEd8ySS1pQ8hAMbpSNZdhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIfm30YNstoN/xpe9/9cPApI7HA4wHwYDVR0j
BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD
QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz
QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm
OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2
RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFeyjTXA5QLgIuUworYSydIbDtQnJdCVzEy3
4plDRN6Q4fFulW43wxajkxCa32yMKbeuKynqKtRCzGcS+knriXq/l04RudEeINid
2AJ8swJI0u6cehezg3bNWf0s4QE1AT5XDPaLGP8rl3FnzVYFh/ju56yO+vgZvMLk
nNb67nTcY7CCx2IBS/X9A12L+zutuDgLzXyToUo4vnYbDa1imH0jyeTkXpoxF67S
CwxPAzHXbx1XsuiQhMYkrGda/tJZEebMC3M7hfg7UY/U9/VQ15dVBnjhrOWhi3TG
3sz7dPrgCvsCPhxpn5uqex2iOj2syQ74UBJlk1+SItlgRnzViks=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:04 2025 by rpki-client