
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json)
Hash identifier: bsHsgaU4GgRx2uRx5hBi1dbWkrHbnNRn0pw5l87qXjU=
Subject key identifier: C0:C8:F3:EA:CC:CB:60:D3:18:B5:EF:66:21:A5:8D:3B:67:BF:3B:A6
Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB
Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
Certificate serial: 1293E7CFCF6E167A54B5900D920954D15B7B266A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
Manifest number: 036A
Signing time: Thu 27 Mar 2025 07:41:28 +0000
Manifest this update: Thu 27 Mar 2025 07:36:28 +0000
Manifest next update: Sun 30 Mar 2025 16:22:28 +0000
Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: hF9hXXB8iA+2l2L+1MIOzldnaMOCrgjLZJVTKusikL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:93:e7:cf:cf:6e:16:7a:54:b5:90:0d:92:09:54:d1:5b:7b:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
Validity
Not Before: Mar 27 07:36:28 2025 GMT
Not After : Mar 30 16:22:28 2025 GMT
Subject: CN=C0C8F3EACCCB60D318B5EF6621A58D3B67BF3BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:71:86:15:99:b2:da:fa:4d:67:f2:c0:76:
01:db:1b:85:3f:0f:5e:3c:45:ee:a3:93:85:df:ea:
e1:44:83:55:ba:1e:8c:03:59:f5:76:22:46:c9:9d:
6a:ac:21:be:cf:44:29:3d:b3:6d:28:f4:5c:56:91:
80:ef:1e:53:a0:6b:ed:7e:07:53:87:60:ec:aa:8b:
2c:eb:b4:fc:b2:33:70:5b:70:2e:2d:5f:b5:28:5c:
78:b8:71:29:11:31:4a:4e:91:f1:dd:ed:86:1b:87:
00:c2:56:3a:72:41:ba:e3:9c:01:82:5d:bd:ff:31:
35:24:45:fa:60:92:21:b4:4c:c5:98:94:2c:d0:e8:
43:69:03:52:10:a7:99:3c:c4:4e:8f:e9:19:f0:38:
9f:99:cd:af:af:d9:98:68:70:9f:72:69:dd:e2:55:
37:1e:b0:9c:ae:57:f7:3b:7b:c7:1d:f5:a1:40:bd:
42:be:e0:ff:31:e9:f4:aa:4c:f6:bb:ad:09:df:a5:
a4:4d:fa:0d:87:70:63:50:98:65:03:66:e2:6d:0d:
d1:e2:23:d4:21:f9:15:32:83:f4:9c:5d:d6:33:c0:
d9:10:70:03:00:fa:af:90:fb:e3:49:5b:c1:f8:72:
15:ad:bd:bb:b0:ff:67:7f:04:fc:f6:b4:b0:e5:d4:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:F3:EA:CC:CB:60:D3:18:B5:EF:66:21:A5:8D:3B:67:BF:3B:A6
X509v3 Authority Key Identifier:
keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:52:14:4f:0a:e1:5b:9a:41:30:d9:eb:30:a2:4c:05:48:
7f:b6:1c:6b:da:39:59:8e:f8:cf:1e:bd:c6:a2:5c:df:e4:07:
33:87:c9:e0:f8:27:a3:dc:18:df:f4:53:18:79:53:d2:c0:f2:
74:ce:98:72:80:53:af:b0:9e:9c:2a:48:9a:f6:e2:77:e3:03:
15:9e:14:8e:d5:31:b0:01:a9:94:71:fa:e2:32:08:69:c3:07:
a5:b8:71:20:c1:4a:71:08:6c:2a:5d:0f:38:c7:9d:9f:36:d2:
51:42:cf:2b:b8:ac:58:b7:c6:11:c4:29:e8:fd:12:ae:d3:fc:
68:a8:91:85:31:71:a8:9b:4e:cd:ef:40:08:bb:39:74:2c:90:
e1:23:f4:db:85:7c:ee:0f:8f:9e:5f:ee:43:df:05:fa:c7:a8:
dd:36:83:80:0e:57:29:57:d3:df:14:4d:ba:46:1f:7e:e5:f6:
bf:5e:7a:c3:0c:03:e7:a6:a6:08:fe:85:82:fb:8c:5d:de:df:
0b:c5:42:8d:8b:30:92:a9:4b:d8:45:b7:cd:db:3e:2e:fa:66:
a4:22:b9:86:aa:d4:78:83:4a:d7:27:a2:97:24:e9:bd:8b:a5:
12:c7:d3:3d:3f:e6:17:88:b0:7d:ea:4c:64:6e:53:e2:5d:18:
2d:5e:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:41:10 2025 by rpki-client