Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json)
Hash identifier: 5oIacnJ3/xHn4UYt9sjqS17EalK1GfpGslcA/ux+Bag=
Subject key identifier: B9:74:E1:CB:F5:48:23:FC:BA:E4:B1:59:A5:61:29:EB:7C:3D:10:59
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial: 6AA4357B45E9A04D92DC0AA52496854C42CA41FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
Manifest number: F1
Signing time: Thu 27 Mar 2025 22:01:36 +0000
Manifest this update: Thu 27 Mar 2025 21:56:36 +0000
Manifest next update: Mon 31 Mar 2025 04:20:36 +0000
Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=)
2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: sMxEGBimDzYtaK4Cj6/V5VWDxS+pjexrFTdmS13HDA8=)
3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=)
4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a4:35:7b:45:e9:a0:4d:92:dc:0a:a5:24:96:85:4c:42:ca:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Validity
Not Before: Mar 27 21:56:36 2025 GMT
Not After : Mar 31 04:20:36 2025 GMT
Subject: CN=B974E1CBF54823FCBAE4B159A56129EB7C3D1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:5c:68:04:ff:57:01:27:99:87:69:c4:00:
00:60:4b:be:cc:4f:ee:11:e7:2f:4e:8c:c7:e3:ef:
b7:34:7d:4d:de:c4:28:fd:cd:d8:5a:dd:a1:b4:93:
56:9b:f8:57:5e:fc:1e:1f:50:92:45:21:36:b8:a7:
c1:26:2a:22:48:32:0b:52:6d:d2:96:67:25:ea:69:
a3:cf:a9:31:56:cf:e5:d5:44:23:4b:18:f1:51:21:
08:e8:e7:71:90:f9:1d:9c:b2:de:07:f7:2d:e0:fd:
5d:ad:33:53:e4:d6:e6:84:09:47:cb:2d:8c:d4:94:
ac:ab:f5:d0:55:5f:bc:6c:f7:79:c7:77:ae:ee:33:
02:94:71:46:29:6f:3c:03:d6:71:72:c3:4a:55:aa:
13:76:8a:9b:46:7f:f5:cf:24:34:1a:41:4a:4a:4d:
a3:f6:c5:35:0b:21:db:eb:1b:3f:c1:ac:ef:c1:61:
46:81:38:68:12:99:17:b8:7f:7a:ec:54:b3:93:97:
a7:be:81:77:0c:c1:4f:e7:13:76:11:d2:bb:ba:e1:
86:32:63:90:1d:33:d1:7a:10:12:e2:e3:9e:0b:f7:
96:9f:3a:4f:44:c0:d3:b6:ba:16:5e:d9:b8:0c:35:
d1:d0:02:50:cb:cf:43:f1:3f:4f:ef:0f:8d:b8:4c:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:E1:CB:F5:48:23:FC:BA:E4:B1:59:A5:61:29:EB:7C:3D:10:59
X509v3 Authority Key Identifier:
keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:58:a9:3e:bc:0c:b0:cc:b9:fc:39:ef:9d:93:a4:be:4b:b4:
c9:60:7d:d8:b9:dd:60:59:75:07:df:65:d3:71:2f:d3:c9:42:
28:47:b3:3f:92:41:bb:6d:10:a3:6c:15:95:b0:c2:5b:3f:dc:
33:bf:c1:b3:6b:79:46:82:a0:86:62:0d:16:02:0a:5d:6e:8f:
24:7a:84:e4:48:3b:e3:3c:a6:f7:78:ef:f8:f3:84:2b:c0:82:
29:2d:7c:5e:ee:b7:b3:ee:71:d2:cc:d6:b8:f6:b2:c5:c7:94:
d3:fe:4d:88:46:d1:34:6d:0c:6e:4e:60:cd:c0:c1:9a:8e:fd:
4d:0f:44:82:20:62:a3:05:8a:b6:4c:24:6f:e8:be:3b:5b:a4:
f9:7e:56:e8:7d:0c:7f:1f:10:32:18:1f:2b:52:fc:f7:a7:fc:
f2:26:4c:45:fd:37:5a:38:19:75:a5:b5:ae:3c:7e:d9:fd:22:
95:0d:38:ce:30:8b:5e:88:5c:4b:7a:be:1f:66:c4:54:d6:4d:
8a:e6:bf:5e:0f:f4:a9:0f:d6:0c:d3:5f:94:2b:88:40:2f:89:
68:ea:ec:54:db:6c:38:ea:aa:ae:91:96:49:e6:f7:48:65:b8:
30:d5:f0:0d:44:f3:a8:81:33:7f:54:4a:9e:6e:85:36:9f:d2:
f3:15:bc:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaqQ1e0XpoE2S3AqlJJaFTELKQf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3
QTJBNDA0RTAeFw0yNTAzMjcyMTU2MzZaFw0yNTAzMzEwNDIwMzZaMDMxMTAvBgNV
BAMTKEI5NzRFMUNCRjU0ODIzRkNCQUU0QjE1OUE1NjEyOUVCN0MzRDEwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrVxoBP9XASeZh2nEAABgS77M
T+4R5y9OjMfj77c0fU3exCj9zdha3aG0k1ab+Fde/B4fUJJFITa4p8EmKiJIMgtS
bdKWZyXqaaPPqTFWz+XVRCNLGPFRIQjo53GQ+R2cst4H9y3g/V2tM1Pk1uaECUfL
LYzUlKyr9dBVX7xs93nHd67uMwKUcUYpbzwD1nFyw0pVqhN2iptGf/XPJDQaQUpK
TaP2xTULIdvrGz/BrO/BYUaBOGgSmRe4f3rsVLOTl6e+gXcMwU/nE3YR0ru64YYy
Y5AdM9F6EBLi454L95afOk9EwNO2uhZe2bgMNdHQAlDLz0PxP0/vD424THOnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuXThy/VII/y65LFZpWEp63w9EFkwHwYDVR0j
BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD
MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB
NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi
NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy
OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK9YqT68DLDMufw5752TpL5LtMlgfdi53WBZ
dQffZdNxL9PJQihHsz+SQbttEKNsFZWwwls/3DO/wbNreUaCoIZiDRYCCl1ujyR6
hORIO+M8pvd47/jzhCvAgiktfF7ut7PucdLM1rj2ssXHlNP+TYhG0TRtDG5OYM3A
wZqO/U0PRIIgYqMFirZMJG/ovjtbpPl+Vuh9DH8fEDIYHytS/Pen/PImTEX9N1o4
GXWlta48ftn9IpUNOM4wi16IXEt6vh9mxFTWTYrmv14P9KkP1gzTX5QriEAviWjq
7FTbbDjqqq6Rlknm90hluDDV8A1E86iBM39USp5uhTaf0vMVvFg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:10 2025 by rpki-client