Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json)
Hash identifier: k/lujo14Rcqe5zIW+0TC+dvv1JiLXxmG++hH0pYuS4E=
Subject key identifier: 3C:E1:E0:71:F6:A6:79:69:8C:B9:25:27:3C:44:DD:44:24:B8:8B:86
Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Certificate serial: 667F78E86B2A4C1A6FE16E9C3096DE50C9F771F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
Manifest number: 04BA
Signing time: Fri 28 Mar 2025 08:21:05 +0000
Manifest this update: Fri 28 Mar 2025 08:16:05 +0000
Manifest next update: Mon 31 Mar 2025 19:58:05 +0000
Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: gmt+nGKsUgZqtGSFzMzFjMz9wo9g6NblprfmJgpjqr0=)
2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: czpyfmW5qXUOgmdTX+fLvnr7WIFjh3STKQ+hvn+zqQg=)
3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: +wADgBbGHlnAaJF9ne9rrntz6G0qBIbnlfj6NpTrwJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7f:78:e8:6b:2a:4c:1a:6f:e1:6e:9c:30:96:de:50:c9:f7:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Validity
Not Before: Mar 28 08:16:05 2025 GMT
Not After : Mar 31 19:58:05 2025 GMT
Subject: CN=3CE1E071F6A679698CB925273C44DD4424B88B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:bd:a6:7b:d6:3e:3a:fa:87:dc:45:da:06:
69:5e:40:74:c9:fa:d3:2e:46:78:48:5a:6b:f2:4c:
90:da:9d:30:6a:d9:a8:d8:ac:71:8d:c5:98:f8:1d:
c9:b4:87:8a:be:17:55:e6:14:20:e5:d4:24:bb:08:
48:cd:2a:ee:a4:c5:54:5a:9c:7c:53:cc:34:9f:e3:
9e:ac:6c:ed:ce:f7:1d:8d:d2:84:98:6b:54:40:27:
34:f3:43:7b:da:a7:2c:27:81:e8:4c:c7:f2:af:1b:
cc:3c:39:53:6e:31:d2:59:1d:ac:86:8b:14:b8:b0:
81:d3:77:4a:e7:24:14:e6:6b:a9:61:90:ba:06:9e:
60:36:84:1f:9d:fe:3d:f7:a0:d5:2e:39:b8:25:97:
26:29:62:ef:e1:c5:3a:40:ba:a2:c5:3a:77:75:22:
c9:dd:5f:99:32:b9:32:04:ca:c5:2b:8b:50:63:d6:
02:37:35:17:ce:20:91:4e:e3:e4:a6:4a:af:28:5a:
ec:b4:7d:0b:36:c2:a2:f2:fc:14:d1:b1:cb:2d:d1:
cf:70:e4:83:ff:9a:8d:2b:48:6e:e2:59:84:f9:17:
a6:4b:62:78:86:b8:e2:a2:d6:06:73:b9:9d:fb:45:
ed:1d:a9:7a:ce:30:4c:51:4f:da:91:9b:fa:e5:27:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:E0:71:F6:A6:79:69:8C:B9:25:27:3C:44:DD:44:24:B8:8B:86
X509v3 Authority Key Identifier:
keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:d8:a9:7d:17:3b:14:54:b6:04:7c:ec:cf:a7:38:53:0d:
db:2c:f2:2a:74:c4:42:02:2b:5e:d9:ab:48:05:8d:c0:a8:b9:
82:99:ab:ed:25:97:91:bb:8b:e8:2b:4a:81:cb:b5:6b:56:49:
5c:f7:53:17:63:e8:84:a3:2a:96:42:11:62:85:0f:89:8f:4a:
93:6d:37:69:d8:9f:20:6b:e6:f0:ac:03:42:12:9b:46:39:fb:
a6:77:d4:51:0c:f8:a4:fd:07:ab:31:52:34:4b:7b:26:5f:d6:
fb:ad:87:e7:d4:0d:ec:bd:34:af:32:0c:92:c8:fe:cb:a7:c8:
83:07:09:4e:a8:18:eb:e0:a7:4d:1b:4a:cb:5e:1c:40:03:e6:
82:33:af:d4:89:41:74:7e:59:1e:22:d3:fd:20:97:85:64:5c:
80:17:d7:95:8f:72:55:f0:4e:84:5f:88:c8:4c:eb:eb:da:38:
4c:6f:8b:49:ac:d7:08:9f:d3:d8:ce:3d:56:79:7f:97:65:e0:
b9:b7:a0:66:ed:93:d0:78:9c:b1:c9:1e:91:45:24:23:26:ae:
13:6d:df:92:16:da:4d:60:21:0d:f7:a7:71:db:62:9b:3a:5f:
99:85:f2:c9:26:19:a7:99:99:33:62:54:4c:a7:6d:0c:7e:93:
eb:c5:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:35:51 2025 by rpki-client