Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json)
Hash identifier: lWji2pMZBTQbeaFKpcVEN7jfAtm2vfEPLr8H6Yd9O44=
Subject key identifier: 52:75:5B:7D:53:D2:0F:B7:71:AC:79:54:EF:C4:5A:4D:2C:97:98:FD
Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Certificate serial: 2E0B4E714ED6ECE2EF0FD97496464F5276DF91A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
Manifest number: 44
Signing time: Thu 27 Mar 2025 19:30:55 +0000
Manifest this update: Thu 27 Mar 2025 19:25:55 +0000
Manifest next update: Mon 31 Mar 2025 01:40:55 +0000
Files and hashes: 1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=)
2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: OQvl+dPRdYT7ACPMgP7MDp56WHxkJ6YzdmqCUfQXqso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0b:4e:71:4e:d6:ec:e2:ef:0f:d9:74:96:46:4f:52:76:df:91:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Validity
Not Before: Mar 27 19:25:55 2025 GMT
Not After : Mar 31 01:40:55 2025 GMT
Subject: CN=52755B7D53D20FB771AC7954EFC45A4D2C9798FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:3c:ff:80:59:c2:c4:f8:b3:51:ca:9e:af:
d8:ed:f2:56:9f:f3:0a:e4:ba:51:7b:8e:38:fc:08:
05:f0:29:d2:05:bb:bf:ee:10:1d:fd:e4:ad:f9:48:
21:81:e7:93:95:61:84:a6:d0:31:1d:19:e8:4c:a6:
2f:8c:09:75:c2:83:7d:e4:72:eb:04:29:f2:ed:86:
0d:90:b2:da:d5:14:a7:a4:fd:dc:df:93:17:81:ad:
87:e4:14:ce:99:cf:0b:d4:b5:88:bb:7d:5f:3e:08:
05:2c:10:23:34:43:6b:74:ca:f3:c9:35:d7:11:3f:
9f:9e:a6:02:f5:48:8b:82:54:ad:cd:27:9d:a9:a3:
44:7a:a2:e7:c4:d0:d1:10:9d:95:52:ab:e2:f7:45:
73:9d:f3:e9:e5:ec:30:10:38:42:40:35:ec:97:e6:
7e:38:45:06:e2:b7:46:ab:17:3a:5b:64:fc:5a:9a:
d0:f6:ba:72:e3:fc:78:09:b9:27:9d:02:fd:df:d0:
c6:2c:a6:5d:5a:23:87:13:0d:1f:20:38:8f:c6:18:
7d:da:2f:f7:0e:fa:72:61:64:31:02:1b:bf:0f:e5:
6c:c4:72:fb:41:27:2f:7f:17:98:3d:27:b2:02:45:
73:91:b0:e3:58:88:b5:1d:b4:b8:bd:2a:23:65:d9:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:5B:7D:53:D2:0F:B7:71:AC:79:54:EF:C4:5A:4D:2C:97:98:FD
X509v3 Authority Key Identifier:
keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:5d:a5:d5:0f:17:41:3b:73:70:bb:d0:5b:f5:ac:ac:37:e8:
61:e3:8e:22:62:04:77:b0:29:ec:81:ce:23:9f:f9:7f:75:43:
b6:7d:21:27:3d:50:ad:58:9e:7d:6e:ab:8b:1a:01:83:8d:e0:
b6:47:f0:eb:ac:40:ee:f1:f4:75:ce:35:9e:89:45:63:e1:95:
f6:43:7b:92:41:3d:f9:f5:85:d4:bf:88:bd:fe:92:62:c0:e4:
e2:29:2d:a7:e2:54:3b:70:a9:30:fd:9f:07:d8:97:de:d8:44:
43:5c:98:57:03:4c:7f:f9:1b:65:dc:af:b7:f0:8a:cc:36:42:
f9:e6:e8:50:d9:71:b6:75:cc:e2:ba:56:b5:e8:d8:7b:17:2d:
d0:b0:a5:b0:02:db:ff:94:06:69:30:73:ac:cb:17:75:5a:1e:
03:21:91:dc:b5:b0:b3:00:db:43:e1:a4:7c:de:72:94:32:26:
b3:c9:55:b6:01:91:ed:51:ca:6e:36:21:bc:53:93:ca:b4:f0:
82:1e:e1:15:93:de:d8:53:18:98:3d:15:33:2f:f8:15:8a:c8:
97:1a:2b:4e:c1:58:8e:16:d2:1e:e2:f2:21:ff:ed:03:56:fe:
55:5f:39:f2:a5:bb:f5:89:f7:e4:b1:bc:e8:98:98:14:65:8c:
f4:0e:a5:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULgtOcU7W7OLvD9l0lkZPUnbfkaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF
OUUwN0JGNDAeFw0yNTAzMjcxOTI1NTVaFw0yNTAzMzEwMTQwNTVaMDMxMTAvBgNV
BAMTKDUyNzU1QjdENTNEMjBGQjc3MUFDNzk1NEVGQzQ1QTREMkM5Nzk4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzzz/gFnCxPizUcqer9jt8laf
8wrkulF7jjj8CAXwKdIFu7/uEB395K35SCGB55OVYYSm0DEdGehMpi+MCXXCg33k
cusEKfLthg2QstrVFKek/dzfkxeBrYfkFM6ZzwvUtYi7fV8+CAUsECM0Q2t0yvPJ
NdcRP5+epgL1SIuCVK3NJ52po0R6oufE0NEQnZVSq+L3RXOd8+nl7DAQOEJANeyX
5n44RQbit0arFzpbZPxamtD2unLj/HgJuSedAv3f0MYspl1aI4cTDR8gOI/GGH3a
L/cO+nJhZDECG78P5WzEcvtBJy9/F5g9J7ICRXORsONYiLUdtLi9KiNl2eP5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUnVbfVPSD7dxrHlU78RaTSyXmP0wHwYDVR0j
BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy
QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw
N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy
YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5
MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAONdpdUPF0E7c3C70Fv1rKw36GHjjiJiBHew
KeyBziOf+X91Q7Z9ISc9UK1Ynn1uq4saAYON4LZH8OusQO7x9HXONZ6JRWPhlfZD
e5JBPfn1hdS/iL3+kmLA5OIpLafiVDtwqTD9nwfYl97YRENcmFcDTH/5G2Xcr7fw
isw2Qvnm6FDZcbZ1zOK6VrXo2HsXLdCwpbAC2/+UBmkwc6zLF3VaHgMhkdy1sLMA
20PhpHzecpQyJrPJVbYBke1Rym42IbxTk8q08IIe4RWT3thTGJg9FTMv+BWKyJca
K07BWI4W0h7i8iH/7QNW/lVfOfKlu/WJ9+SxvOiYmBRljPQOpeg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:55 2025 by rpki-client