
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json)
Hash identifier: xWcgfgSo3C6XDXCuwfpIst/ZDnmOMjUY7RonPaI66RE=
Subject key identifier: F4:1D:B6:AC:C2:E2:27:30:C9:D3:5D:F9:44:75:0A:C0:99:93:91:BD
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 525779716509448000B96258E0F5025914B415F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
Manifest number: 01CB
Signing time: Fri 28 Mar 2025 22:11:04 +0000
Manifest this update: Fri 28 Mar 2025 22:06:04 +0000
Manifest next update: Tue 01 Apr 2025 02:52:04 +0000
Files and hashes: 1: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=)
2: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=)
3: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: mhK/eLV/tbDYhbv2p7aOA7BG2G7C03W5dX8u/wxLeLA=)
4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:57:79:71:65:09:44:80:00:b9:62:58:e0:f5:02:59:14:b4:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Mar 28 22:06:04 2025 GMT
Not After : Apr 1 02:52:04 2025 GMT
Subject: CN=F41DB6ACC2E22730C9D35DF944750AC0999391BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:8e:5b:4f:8f:5b:d9:3d:5b:a7:b6:33:70:
dd:15:68:97:03:a5:45:16:23:f4:3f:38:ea:6f:54:
54:27:26:76:71:5f:15:93:d7:d8:a3:b7:f6:7d:50:
1e:c5:9a:12:19:70:aa:28:b2:44:2a:91:e0:4b:64:
5a:d1:02:80:93:f5:c4:23:3f:a0:a7:5e:1e:0d:af:
41:c3:de:7f:65:44:17:b5:f7:f9:e9:6b:6e:1e:f6:
98:86:c1:91:8e:e0:19:96:30:65:f8:78:9d:38:40:
17:63:e2:69:e0:1b:ec:19:2b:6b:e5:9f:96:b9:1a:
9d:7e:87:26:56:86:fa:ca:ee:94:04:c5:9d:6c:0f:
bc:c1:67:ab:dd:6b:b0:4d:6c:0e:7c:a2:90:04:1e:
53:89:a2:a8:89:8f:ff:02:f4:49:8e:22:d2:04:f2:
53:db:22:3d:54:ab:0d:12:b5:00:4d:b0:37:ed:65:
1e:22:4e:bc:f4:46:ab:1e:e0:59:05:1b:4e:7e:a0:
5a:92:35:22:ef:5d:fe:4e:bc:fa:bf:7d:b0:03:34:
80:8d:43:c6:ab:a2:29:fd:e5:14:1c:f3:c2:be:60:
9f:9d:cb:48:11:7a:d4:34:98:51:b1:2a:91:8c:25:
23:45:e5:66:ff:f1:7e:0f:55:64:63:65:c4:49:c2:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:B6:AC:C2:E2:27:30:C9:D3:5D:F9:44:75:0A:C0:99:93:91:BD
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:df:09:fe:00:9a:7d:f1:e7:df:fd:75:12:9a:e1:e7:44:
70:41:61:df:f2:88:6a:22:a4:4a:95:24:56:20:da:47:3a:c0:
1c:97:05:b3:4b:76:db:a1:4c:19:cc:06:0b:8b:8c:d6:f6:2c:
d3:75:18:e5:0a:2e:2d:9f:2f:01:8d:c9:2e:35:9b:db:48:1b:
db:db:88:7f:cb:bb:ad:d5:a6:c9:c2:65:e2:b7:cb:c8:de:47:
cd:27:de:55:dc:e8:d4:c1:9c:cd:75:2a:2b:cd:7d:d6:50:38:
cb:8b:f1:e3:4f:6b:cd:2d:9d:98:3a:8f:83:46:01:6d:11:e8:
d5:19:a7:4f:c5:76:f5:33:87:a3:83:d5:14:f0:ed:9e:c3:da:
0a:73:38:d4:93:76:1d:34:aa:59:82:ff:3a:58:ea:7b:1e:82:
f6:58:33:2d:42:51:ca:ea:e0:32:51:f1:0d:6b:1e:ce:8e:19:
a4:60:8e:c4:7a:45:53:a3:91:81:8d:66:09:84:b7:70:0c:26:
80:3b:2b:b3:57:24:f9:24:57:91:fa:78:45:12:b5:a9:a7:99:
97:d1:5a:86:46:05:31:2a:af:15:6c:66:91:15:f4:3e:3a:df:
55:db:08:22:22:95:37:21:d3:a5:32:d0:6e:03:98:f9:3b:5e:
49:1f:38:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUld5cWUJRIAAuWJY4PUCWRS0FfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy
NzdCOTlEMTAeFw0yNTAzMjgyMjA2MDRaFw0yNTA0MDEwMjUyMDRaMDMxMTAvBgNV
BAMTKEY0MURCNkFDQzJFMjI3MzBDOUQzNURGOTQ0NzUwQUMwOTk5MzkxQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAV45bT49b2T1bp7YzcN0VaJcD
pUUWI/Q/OOpvVFQnJnZxXxWT19ijt/Z9UB7FmhIZcKooskQqkeBLZFrRAoCT9cQj
P6CnXh4Nr0HD3n9lRBe19/npa24e9piGwZGO4BmWMGX4eJ04QBdj4mngG+wZK2vl
n5a5Gp1+hyZWhvrK7pQExZ1sD7zBZ6vda7BNbA58opAEHlOJoqiJj/8C9EmOItIE
8lPbIj1Uqw0StQBNsDftZR4iTrz0Rqse4FkFG05+oFqSNSLvXf5OvPq/fbADNICN
Q8aroin95RQc88K+YJ+dy0gRetQ0mFGxKpGMJSNF5Wb/8X4PVWRjZcRJwoJpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9B22rMLiJzDJ0135RHUKwJmTkb0wHwYDVR0j
BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB
NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC
OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0
MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC
QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKAJ3wn+AJp98eff/XUSmuHnRHBBYd/yiGoi
pEqVJFYg2kc6wByXBbNLdtuhTBnMBguLjNb2LNN1GOUKLi2fLwGNyS41m9tIG9vb
iH/Lu63VpsnCZeK3y8jeR80n3lXc6NTBnM11KivNfdZQOMuL8eNPa80tnZg6j4NG
AW0R6NUZp0/FdvUzh6OD1RTw7Z7D2gpzONSTdh00qlmC/zpY6nsegvZYMy1CUcrq
4DJR8Q1rHs6OGaRgjsR6RVOjkYGNZgmEt3AMJoA7K7NXJPkkV5H6eEUStamnmZfR
WoZGBTEqrxVsZpEV9D4631XbCCIilTch06Uy0G4DmPk7XkkfOG8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:19 2025 by rpki-client