Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json)
Hash identifier: gcygl3Ee1u1WWi/OTkU+uCvFWL/yhhtpN6eL4tqoV2o=
Subject key identifier: BF:AC:F5:01:59:3E:F8:D8:51:76:79:96:B3:F7:A9:BA:6A:A7:DA:F1
Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Certificate serial: 42134C04D662C6974D7AB1C576B942EFEB2C750A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
Manifest number: 02EC
Signing time: Fri 28 Mar 2025 13:11:55 +0000
Manifest this update: Fri 28 Mar 2025 13:06:55 +0000
Manifest next update: Mon 31 Mar 2025 18:49:55 +0000
Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: xmfvEBw1P8sSqglSjh5fK7KpklmguFj/KUnvIPf2TYo=)
2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: Wyb006lvkKiN5NUx8WFIVW7YkUTH/3gHh7Hw/oB/PeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:13:4c:04:d6:62:c6:97:4d:7a:b1:c5:76:b9:42:ef:eb:2c:75:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Validity
Not Before: Mar 28 13:06:55 2025 GMT
Not After : Mar 31 18:49:55 2025 GMT
Subject: CN=BFACF501593EF8D851767996B3F7A9BA6AA7DAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:af:0d:20:0a:34:33:c7:5b:8f:1f:13:19:
55:1b:db:16:9c:0c:65:6a:23:ef:47:7b:f4:84:53:
49:7e:ac:5a:8e:6e:c0:7c:da:0e:a1:0a:c7:b2:9d:
16:5f:10:fc:83:07:3b:1c:4b:92:d4:17:50:a3:49:
b5:b1:3f:32:01:59:50:d0:49:72:86:4e:20:cf:c6:
82:b6:c6:9b:b8:bb:21:ef:2e:bb:ad:5b:cf:ff:3a:
45:f4:d6:c0:dd:cc:6b:a8:ec:64:cb:92:67:e0:03:
52:01:ed:98:35:88:b3:6c:7d:de:9f:bf:2f:3a:09:
3d:dc:17:c2:29:c5:1e:fa:98:30:91:b9:aa:81:67:
c9:cf:5d:42:c8:18:77:18:79:60:8d:9a:c9:f1:bb:
cc:ad:a7:99:58:fe:60:b1:5b:79:00:2a:1a:5d:ec:
bb:b7:f7:82:5a:a1:38:2f:2d:d5:29:14:77:da:c0:
36:04:b3:ee:75:a1:69:10:49:a8:0d:11:b9:47:e8:
04:ad:da:3c:6e:e2:7f:c6:c5:f6:83:b5:89:37:44:
7a:9a:de:2d:31:cc:ad:9b:d6:bd:6d:bd:f7:cf:f6:
61:ac:f9:d9:ca:08:37:6d:0d:2c:f5:5a:eb:07:6d:
c6:87:1c:39:58:29:17:d2:ba:1f:da:10:1c:c9:8b:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:F5:01:59:3E:F8:D8:51:76:79:96:B3:F7:A9:BA:6A:A7:DA:F1
X509v3 Authority Key Identifier:
keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:93:fd:e0:3e:13:f2:dd:a1:63:a6:99:52:83:87:3b:33:
b8:9f:fd:b2:9a:86:bc:51:8e:f7:7c:1a:e6:db:26:d2:b8:ae:
40:cd:58:18:29:7b:c5:f4:e1:a8:5f:8b:e3:11:98:12:e6:fd:
6e:9f:0a:b2:44:c9:85:bd:21:f0:62:1d:b0:c2:20:29:a6:ef:
3f:12:c8:84:a9:30:dc:42:e3:21:f7:5a:d8:a1:55:de:39:bd:
53:ea:99:b1:88:16:3c:8e:30:09:67:2b:62:9f:bb:67:09:c4:
ad:4f:66:e2:81:d3:0d:b6:a1:fb:e5:99:4c:34:47:d8:b8:47:
4c:6b:10:08:75:b4:3c:15:f7:ab:0d:3a:0b:14:8e:eb:87:2e:
17:ed:ac:61:37:02:69:c7:be:c0:24:14:0a:e2:c3:62:79:95:
a8:42:c6:7c:40:b4:61:45:f4:86:ca:79:b8:43:a2:4a:52:a7:
6a:a9:05:3c:5c:e7:a9:02:cc:a4:7e:74:52:12:db:d8:f5:6a:
97:23:94:df:72:7f:44:d1:49:e2:50:14:93:bc:4c:a2:4b:69:
8a:7b:93:b0:d9:2d:97:2b:27:0b:df:f3:96:aa:67:c3:82:3f:
79:4e:68:c2:25:74:0a:10:01:57:f0:9d:bf:cc:1e:f0:d5:a8:
3c:4a:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:09:10 2025 by rpki-client