Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft
File:                     33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json)
Hash identifier:          xN0UgHGSU1wiAeky1wSYjB5KGzex/ntEPQgGKK9Qfwg=
Subject key identifier:   6E:19:71:DE:72:AF:E0:C2:7F:71:DE:74:33:CA:B9:55:2C:CB:E3:6E
Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40
Certificate issuer:       /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040
Certificate serial:       389CEB6A3DF3F6E8D230447A849F31C62E8E48D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft
Manifest number:          0199
Signing time:             Wed 29 Jan 2025 15:41:45 +0000
Manifest this update:     Wed 29 Jan 2025 15:36:45 +0000
Manifest next update:     Sat 01 Feb 2025 19:37:45 +0000
Files and hashes:         1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: /hfNXzAjmpcOovWRVl3bYVgbOSpuSLYQHDnVxTKGET4=)
                          2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=)
                          3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: zBmW9Bk2lLkpCt+UwsQR1DXBR9F91BW/SX5QBgtlozE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9c:eb:6a:3d:f3:f6:e8:d2:30:44:7a:84:9f:31:c6:2e:8e:48:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040
        Validity
            Not Before: Jan 29 15:36:45 2025 GMT
            Not After : Feb  1 19:37:45 2025 GMT
        Subject: CN=6E1971DE72AFE0C27F71DE7433CAB9552CCBE36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:1b:95:72:72:e6:fa:83:98:58:27:37:34:
                    94:3d:96:36:86:fd:8a:94:33:a6:49:66:9e:6f:8a:
                    a1:b0:25:02:ac:b4:03:57:60:e5:4e:ef:e7:20:d2:
                    53:b7:e3:5d:82:94:9a:cd:72:1a:75:47:dd:2e:de:
                    c3:28:75:1b:f2:47:05:5b:9a:0b:69:e8:85:93:14:
                    f4:0b:96:ca:eb:8d:f0:09:64:44:21:a9:bd:71:57:
                    8a:1f:01:07:5c:b0:9b:d8:82:10:82:22:cf:4f:cb:
                    a1:4c:a2:3c:28:88:2d:b3:e3:d8:c5:8e:3f:f7:ec:
                    a7:f0:12:82:10:34:0d:df:20:81:25:a5:88:9f:2c:
                    11:2c:a5:0a:2a:32:b7:92:a5:d4:1a:b0:e4:72:c8:
                    d8:b5:3a:70:db:43:a9:b1:56:78:60:87:21:04:30:
                    35:d6:b3:2d:87:58:f8:6e:61:cd:14:27:9a:c3:d1:
                    16:a3:be:b4:0b:b5:f8:a0:e9:32:6b:4a:5c:d6:6c:
                    e5:59:75:a9:c7:00:7f:ad:78:82:94:4f:27:9e:e5:
                    37:fe:12:04:c4:69:3a:49:d6:bc:f5:9e:c6:ca:ae:
                    db:9e:e3:6c:44:90:6c:4a:b6:4f:9d:1b:25:db:06:
                    25:52:84:3c:d2:b2:e9:0b:9a:f2:57:9e:5e:53:52:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:71:DE:72:AF:E0:C2:7F:71:DE:74:33:CA:B9:55:2C:CB:E3:6E
            X509v3 Authority Key Identifier:
                keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:69:03:f3:6c:21:fc:39:33:35:92:30:ce:32:55:f2:bb:08:
         16:d1:2e:3a:cc:06:82:8f:9a:03:cc:f8:9f:3e:0e:e1:66:7d:
         c5:14:ea:1a:e6:fa:31:be:15:77:e7:af:f7:7e:bf:b2:55:07:
         12:74:15:9c:2b:6e:3a:77:ce:9c:59:f5:aa:67:dc:9f:3b:b0:
         8a:aa:4e:d4:b7:3d:89:ea:04:ce:d1:ab:bd:ca:7f:3b:71:56:
         60:48:d4:2a:58:d8:b5:8f:3f:fa:12:3b:29:62:48:2e:5b:e1:
         ee:14:80:cd:19:35:ee:1b:91:50:1c:5c:1a:3e:3a:e2:a2:2f:
         99:65:21:06:05:3f:48:18:2b:b9:e0:b0:c9:74:a5:d8:ca:e5:
         45:70:63:d4:59:19:a1:b6:d4:1e:fe:3d:53:a8:6d:b1:b2:25:
         ac:5d:5b:cd:ef:e7:a9:11:05:2e:39:9d:d6:8a:ef:37:cd:0e:
         0d:ed:4c:76:61:9e:5c:63:e8:e3:09:dd:79:cb:4f:23:7b:73:
         35:6e:b9:ec:56:5f:86:79:18:c5:52:00:ca:ff:fe:de:f1:f4:
         1b:2c:1c:3e:fb:76:5a:11:9c:d1:04:72:26:fc:09:f0:a6:42:
         a6:34:4d:8a:bf:0b:29:06:b7:28:72:03:3e:2e:f4:c4:97:55:
         fc:1a:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:48 2025 by rpki-client