Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json)
Hash identifier: 6YPhM57RvKcVHpFHGxq00hMvV90IglymPUOGYypt7gI=
Subject key identifier: CB:BB:D5:99:52:DA:6B:D2:1C:A4:50:56:4B:99:18:11:84:72:FB:26
Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44
Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744
Certificate serial: 2B08FEDB42D34E8CCFC6C91629B15735972C1B52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
Manifest number: 3E
Signing time: Thu 27 Mar 2025 06:11:02 +0000
Manifest this update: Thu 27 Mar 2025 06:06:02 +0000
Manifest next update: Sun 30 Mar 2025 14:05:02 +0000
Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: PE8eXur1cOJzAPhDhOWqG09tt0/SIKVoEj5s5fwAYQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:08:fe:db:42:d3:4e:8c:cf:c6:c9:16:29:b1:57:35:97:2c:1b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744
Validity
Not Before: Mar 27 06:06:02 2025 GMT
Not After : Mar 30 14:05:02 2025 GMT
Subject: CN=CBBBD59952DA6BD21CA450564B9918118472FB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:c4:46:b9:49:4c:2e:95:1e:04:cc:75:8d:
bd:a5:f0:89:17:71:54:80:62:50:82:ff:f6:99:f5:
ed:f4:3e:ff:0b:b8:cf:5a:75:7e:7e:e6:81:9a:c0:
03:57:c3:52:e3:16:89:ee:77:38:92:d4:18:70:25:
25:b8:79:15:d5:5e:43:4a:a7:74:74:35:3f:32:fd:
b6:c2:dd:db:41:af:1e:58:0f:57:6e:6b:41:60:c9:
35:ce:03:5b:ed:03:ee:f2:90:bb:51:15:81:2d:a1:
e8:76:59:40:26:c7:f7:16:b4:52:77:fe:8d:43:47:
f5:2f:b1:4e:9b:f5:a8:b1:65:88:19:72:01:90:9b:
24:0f:ed:94:2a:1f:67:a3:b0:8c:49:83:40:e1:03:
4d:ef:2c:69:ef:0d:c7:5c:02:e4:ab:17:8c:34:b6:
73:b8:f7:ce:da:18:2a:d5:e1:ed:fa:ec:cb:ee:0c:
fc:0d:07:56:03:88:4f:46:46:67:5f:e0:02:ee:65:
9f:b0:76:8a:27:07:46:57:c3:ab:a8:a9:f5:19:95:
11:84:32:8c:75:b4:dd:61:a4:3b:c8:b8:ed:87:26:
9b:d5:07:d9:5e:6e:25:c8:cf:0d:e4:ce:fb:43:32:
56:58:e3:c2:de:dd:3f:9f:d3:a6:6d:ab:d3:54:6c:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:D5:99:52:DA:6B:D2:1C:A4:50:56:4B:99:18:11:84:72:FB:26
X509v3 Authority Key Identifier:
keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a2:71:63:3a:3a:98:6c:e1:81:69:b2:94:95:5f:90:0d:65:
f5:0c:6d:6d:26:f6:3e:2d:82:a5:cd:1c:e5:33:66:df:ef:2c:
f8:24:a7:09:3f:c2:41:ce:f3:c0:f4:c4:db:74:72:35:8a:29:
a4:e5:98:6e:cd:70:75:d2:ff:c4:94:87:0c:35:96:7f:4a:9f:
cb:87:bd:a9:e0:1a:ad:da:e1:e1:e2:d4:7e:e0:07:7e:3c:d6:
ae:2c:56:5f:17:82:41:20:52:5d:ef:93:16:16:a1:7d:86:68:
69:ee:56:69:b4:e1:78:c5:de:0a:0b:dc:24:23:33:6a:53:d0:
92:1a:2c:13:90:ca:c8:ae:fd:ac:96:38:0e:6c:3c:e4:a6:ae:
16:3a:fa:10:05:06:52:4f:2b:1b:9d:b2:cc:de:61:5e:a8:d4:
77:e3:da:6c:9e:2e:e7:c4:25:03:7a:03:99:c5:e4:33:17:bb:
ac:fc:bc:1f:f8:77:dc:3f:fc:b7:79:94:61:f9:ae:22:45:48:
aa:0d:9b:4a:14:7b:7c:92:2f:34:71:97:ea:c6:17:64:3c:81:
ca:e8:f3:f4:75:ca:02:a9:7b:0d:f0:cc:45:74:91:90:48:79:
bd:bc:80:4a:f2:05:e4:2c:bd:9d:d0:c2:47:24:ad:43:d0:69:
79:8c:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:31:36 2025 by rpki-client