Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json)
Hash identifier: 7xGqncmsUdhqFHhda62zCg258609mk2LwEiBfue8z4I=
Subject key identifier: 2A:35:0F:11:18:8E:B7:CB:A6:9A:64:91:5F:30:A5:0A:98:A8:96:B5
Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28
Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
Certificate serial: 3FFA8C9E3CC8B73919B7DC4FD45E061E27B116EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
Manifest number: 04BD
Signing time: Sat 29 Mar 2025 04:41:15 +0000
Manifest this update: Sat 29 Mar 2025 04:36:15 +0000
Manifest next update: Tue 01 Apr 2025 06:17:15 +0000
Files and hashes: 1: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: bsB62BR2JZMMITbwW+3cpP31f8uRmlM8H4CqZFZus18=)
2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: 5aELkp52c47kJfpzS6eF8UEMP56gj1U8I8vH3s1IURw=)
3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Nis2CwI3ez8v1WSHl89eT2Oh6FaKWW6bg0hXnRqd+og=)
4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: cGLu2UMdrJRPRQG7pt7UtR/38tRpV8ciHNgw5Tldj8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fa:8c:9e:3c:c8:b7:39:19:b7:dc:4f:d4:5e:06:1e:27:b1:16:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
Validity
Not Before: Mar 29 04:36:15 2025 GMT
Not After : Apr 1 06:17:15 2025 GMT
Subject: CN=2A350F11188EB7CBA69A64915F30A50A98A896B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:38:64:29:8f:7a:50:a8:c3:c2:45:71:4a:
32:1f:1d:cf:99:29:85:47:97:f8:dd:3b:d9:ac:8f:
28:39:bd:ad:4f:22:83:26:ef:33:1f:1d:90:04:6b:
8f:26:36:60:62:1e:ef:6d:9b:32:06:d8:7c:4f:ab:
a2:0a:69:4f:d4:12:39:eb:c8:58:3f:81:5d:78:5b:
3b:49:e1:ac:74:10:85:3c:72:04:47:6e:b0:0f:23:
39:a9:26:88:01:35:77:86:b7:27:74:f3:c6:de:8c:
b2:2d:fb:f0:47:dd:93:b1:b3:22:9b:c0:1d:18:ea:
38:05:05:83:97:76:79:5c:e7:1b:de:66:c6:87:00:
c2:0e:a8:1c:24:6f:f3:a2:f0:c1:03:12:43:2b:95:
e3:06:14:96:96:74:19:47:70:2e:2a:31:78:ae:21:
e3:47:fb:51:64:9d:99:16:83:ec:3b:79:9d:69:a3:
17:d3:c5:9e:0f:83:2d:a2:f5:01:6f:e8:f9:ff:30:
52:69:e4:1c:7c:ac:e1:22:b2:4c:85:fe:cd:94:08:
78:72:79:f7:2f:09:32:f7:4e:83:00:cc:ab:47:51:
a1:82:e9:04:48:02:be:98:12:a5:f4:75:d5:0e:1e:
bf:72:bd:1f:a7:a4:47:20:4a:ac:bb:0e:53:d2:9d:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:0F:11:18:8E:B7:CB:A6:9A:64:91:5F:30:A5:0A:98:A8:96:B5
X509v3 Authority Key Identifier:
keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5a:ae:31:73:44:ea:c7:de:73:1e:f4:33:99:c5:05:65:9c:
fc:da:f8:79:fd:25:fa:6d:1e:9f:a8:16:4a:aa:3b:8c:85:64:
2f:b9:78:d0:72:1a:a8:6e:e1:ac:00:e4:15:21:ef:55:b4:5a:
91:2d:54:88:eb:75:7e:2c:ec:d1:7b:53:dc:81:f4:e1:c2:d6:
b4:5a:37:ff:66:96:bb:69:f0:fe:ae:ca:e8:82:40:9c:25:94:
57:d6:c1:40:f9:f9:81:d5:e4:91:20:7b:c5:cc:d2:c0:38:8c:
c9:ec:e2:ab:86:b2:05:0b:7d:d2:fd:2a:c2:64:1f:f8:d5:66:
31:7c:21:54:87:c9:15:1b:78:5a:f3:b1:e8:76:61:12:bb:b2:
05:f3:7b:63:ba:be:89:3b:59:76:1f:eb:b2:f8:0b:f7:2d:6b:
21:4c:26:2f:46:f7:16:b0:61:e7:1d:d7:a4:6d:74:27:b2:5c:
a9:a1:72:0f:d0:a9:8e:a0:73:bc:be:c2:ce:7e:bc:7b:5a:f4:
1c:45:58:24:4f:f1:96:68:1d:26:f2:20:4e:b7:45:c8:42:8e:
b8:21:23:f1:34:c5:3e:a8:b1:11:8f:f0:16:11:53:c5:12:83:
c2:45:1f:ed:19:c4:c9:d4:43:5e:b6:f8:18:fd:c5:04:1b:1f:
84:68:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:02 2025 by rpki-client