
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier: ce1gWnaE1SLbGTd1CLSOoDS+IjZ9tLN5PrPkobclk1o=
Subject key identifier: 89:F0:3F:4A:29:A7:1D:55:36:F2:71:3E:9C:17:E8:26:1F:BF:2B:76
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial: 15A12281CEA7A9FADDE9C9855326F8A06EF889B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number: D2
Signing time: Sat 29 Mar 2025 09:32:51 +0000
Manifest this update: Sat 29 Mar 2025 09:27:51 +0000
Manifest next update: Tue 01 Apr 2025 13:22:51 +0000
Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: yB5baVK+EG7wFKJdTUYSuezENA6foLDJTAFbdnZjL6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a1:22:81:ce:a7:a9:fa:dd:e9:c9:85:53:26:f8:a0:6e:f8:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Validity
Not Before: Mar 29 09:27:51 2025 GMT
Not After : Apr 1 13:22:51 2025 GMT
Subject: CN=89F03F4A29A71D5536F2713E9C17E8261FBF2B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:ef:63:75:77:a8:2e:dd:13:ea:7f:23:6b:
49:a3:9c:82:55:80:23:d9:22:44:e6:71:59:f1:d2:
8d:39:37:03:35:28:27:31:4c:bf:a7:b6:42:84:22:
0b:16:1c:e2:fe:79:1a:c3:31:36:dc:da:62:c9:52:
43:19:d1:70:e3:45:d6:f6:91:37:50:4f:c7:7b:77:
95:06:46:a4:4f:4e:a7:a0:48:b3:cf:ca:cc:c8:b4:
bd:48:cf:7f:bc:3f:fa:40:af:05:61:64:af:3b:97:
fb:ca:84:53:7d:fc:bf:ed:a2:3d:d2:3e:3a:e3:e0:
f1:78:05:67:a9:6d:73:95:a4:d8:d9:91:41:6e:08:
1d:64:f3:03:ec:92:7c:0c:a7:6c:22:b5:c5:97:36:
f3:6b:f9:f0:3c:4f:38:e8:59:cf:f5:ac:aa:86:6b:
6f:e8:58:11:7c:f6:79:7a:1f:5e:10:8f:ad:21:0f:
bc:f8:2b:83:fe:9c:ae:62:1d:77:3b:f8:a1:3f:14:
14:3b:20:21:4c:10:1b:47:4e:17:2c:f1:f7:32:f2:
d6:81:c9:71:02:bc:cc:b9:72:9f:a4:a8:4a:70:a2:
6e:61:b6:08:32:cd:e2:57:91:00:68:ee:03:40:f8:
8b:5c:24:f1:e4:2a:ae:53:f2:25:1b:57:ac:71:2d:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:3F:4A:29:A7:1D:55:36:F2:71:3E:9C:17:E8:26:1F:BF:2B:76
X509v3 Authority Key Identifier:
keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:55:91:16:38:47:74:be:3a:6f:92:2b:37:95:77:f3:5d:
74:89:70:4f:d5:ec:ad:82:e6:c6:85:7e:10:b8:5f:cf:d5:c1:
0e:7b:a5:bf:14:0c:1f:1a:5a:97:ce:87:87:c6:e8:69:b2:e6:
5d:87:5d:a2:84:33:3c:45:0f:17:5c:de:11:ea:f1:05:b5:99:
6e:b8:ca:33:e6:0b:f6:65:aa:5c:ff:98:03:0d:3e:60:c3:58:
1c:f8:ee:10:7c:6c:07:1e:66:4d:c5:56:9e:05:57:1a:b8:96:
3d:30:c7:c8:a6:28:b0:eb:04:53:39:d8:2a:cc:39:5e:af:4e:
93:21:8b:6d:47:fc:f2:a9:e6:ee:12:1f:a6:ac:25:ee:82:45:
9f:f9:d6:d5:ec:7b:66:0b:6e:46:6e:9c:2d:de:58:33:98:03:
3a:26:49:15:19:15:3c:58:bf:6f:fd:0e:c0:0f:08:97:94:2c:
df:56:28:e5:29:08:64:f4:54:1a:c2:1f:40:cc:cc:9a:b8:b4:
29:a8:f7:43:04:a2:ec:dc:66:f4:de:31:56:aa:2d:02:38:08:
d6:49:6c:4a:3d:0f:a2:68:9f:9e:60:08:76:ec:0c:ce:20:e8:
b2:01:7c:c2:02:7e:a0:1d:0a:16:5f:aa:48:dd:05:8a:c4:a6:
10:fc:e6:37
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFaEigc6nqfrd6cmFUyb4oG74ibQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG
NUU0OUUxQTAeFw0yNTAzMjkwOTI3NTFaFw0yNTA0MDExMzIyNTFaMDMxMTAvBgNV
BAMTKDg5RjAzRjRBMjlBNzFENTUzNkYyNzEzRTlDMTdFODI2MUZCRjJCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbu9jdXeoLt0T6n8ja0mjnIJV
gCPZIkTmcVnx0o05NwM1KCcxTL+ntkKEIgsWHOL+eRrDMTbc2mLJUkMZ0XDjRdb2
kTdQT8d7d5UGRqRPTqegSLPPyszItL1Iz3+8P/pArwVhZK87l/vKhFN9/L/toj3S
Pjrj4PF4BWepbXOVpNjZkUFuCB1k8wPsknwMp2witcWXNvNr+fA8TzjoWc/1rKqG
a2/oWBF89nl6H14Qj60hD7z4K4P+nK5iHXc7+KE/FBQ7ICFMEBtHThcs8fcy8taB
yXECvMy5cp+kqEpwom5htggyzeJXkQBo7gNA+ItcJPHkKq5T8iUbV6xxLSyJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUifA/SimnHVU28nE+nBfoJh+/K3YwHwYDVR0j
BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5
MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0
OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk
M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5
MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALAnVZEWOEd0vjpvkis3lXfzXXSJcE/V7K2C
5saFfhC4X8/VwQ57pb8UDB8aWpfOh4fG6Gmy5l2HXaKEMzxFDxdc3hHq8QW1mW64
yjPmC/Zlqlz/mAMNPmDDWBz47hB8bAceZk3FVp4FVxq4lj0wx8imKLDrBFM52CrM
OV6vTpMhi21H/PKp5u4SH6asJe6CRZ/51tXse2YLbkZunC3eWDOYAzomSRUZFTxY
v2/9DsAPCJeULN9WKOUpCGT0VBrCH0DMzJq4tCmo90MEouzcZvTeMVaqLQI4CNZJ
bEo9D6Jon55gCHbsDM4g6LIBfMICfqAdChZfqkjdBYrEphD85jc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:16 2025 by rpki-client