Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
File:                     7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json)
Hash identifier:          D1+eXc1HXD2Akp8vMIMnmPhopEzAPihPmZ3Jvv9WeK0=
Subject key identifier:   4C:E1:DB:AF:B5:69:3B:D2:29:4C:7E:78:D9:7E:63:8B:4F:84:BA:05
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Certificate issuer:       /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial:       48EE1B036BB8E8376C909DDFFA79D3B6918D17F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
Manifest number:          0141
Signing time:             Fri 31 Jan 2025 07:52:09 +0000
Manifest this update:     Fri 31 Jan 2025 07:47:09 +0000
Manifest next update:     Mon 03 Feb 2025 17:05:09 +0000
Files and hashes:         1: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=)
                          2: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=)
                          3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=)
                          4: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: RDH0+aKVtDN333xYtmZpCx3+P5J+FJW40wQMoiPtdmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ee:1b:03:6b:b8:e8:37:6c:90:9d:df:fa:79:d3:b6:91:8d:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
        Validity
            Not Before: Jan 31 07:47:09 2025 GMT
            Not After : Feb  3 17:05:09 2025 GMT
        Subject: CN=4CE1DBAFB5693BD2294C7E78D97E638B4F84BA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:74:a4:84:3a:f7:0e:a9:50:17:14:91:31:
                    71:79:2e:bc:85:ff:7c:fb:51:90:22:99:3b:14:a8:
                    9a:95:e6:db:ea:90:92:ca:21:9e:2e:c4:b1:20:2a:
                    60:9d:09:d1:ef:da:cc:6d:e7:7b:83:90:09:34:1c:
                    dc:f8:4d:ef:e8:f9:81:5e:50:22:c6:6b:ad:d7:d4:
                    08:99:a0:c3:51:c8:9c:77:2d:a3:ff:d8:58:ee:36:
                    1c:08:0a:24:9d:84:94:b7:a1:7f:e9:5b:22:4d:95:
                    07:1f:ca:46:f6:29:65:cf:f5:ec:29:e5:6e:ea:23:
                    19:56:f8:4c:a5:9a:12:f2:b5:78:2e:c0:17:bb:fd:
                    9e:c8:0b:11:46:e9:13:da:6c:5f:a3:58:d1:7a:bf:
                    8d:a9:96:5e:85:76:ba:cb:69:f4:2e:0c:a0:a7:26:
                    26:36:ff:26:17:4c:fb:b2:20:5e:9c:be:cb:9e:6b:
                    1b:08:f9:18:ad:2b:96:f1:5c:46:77:66:74:f8:44:
                    61:64:ba:b8:80:e6:21:89:c3:71:0d:70:aa:4f:f0:
                    59:35:50:a0:aa:50:0a:ba:1a:56:bb:68:51:39:a1:
                    4c:6f:87:2e:59:10:19:34:9d:1e:cf:82:75:e4:d6:
                    b0:53:03:9a:75:ef:85:ed:d5:ca:69:4c:98:eb:65:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E1:DB:AF:B5:69:3B:D2:29:4C:7E:78:D9:7E:63:8B:4F:84:BA:05
            X509v3 Authority Key Identifier:
                keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:20:2c:a5:ff:c8:a7:73:1a:2f:0b:bf:9a:9f:a7:57:37:a4:
         2b:53:2c:26:12:e4:19:60:36:40:38:11:57:87:e5:02:dd:4d:
         26:67:dc:a5:d9:c3:71:d1:5a:80:0a:f2:73:52:0b:84:69:67:
         77:ab:46:e8:26:b4:02:2f:25:90:cf:d1:65:78:ec:fe:74:f8:
         3b:c2:b1:2e:f7:0f:39:83:46:13:d5:4c:ad:5d:63:f6:98:ec:
         16:18:08:f8:4d:ad:18:be:0f:80:c7:f8:cd:ea:a7:35:23:a4:
         1b:f8:cd:61:4f:5e:40:fd:f6:39:7c:1f:e1:36:d5:b1:b6:3d:
         56:2c:eb:45:96:d4:6f:c6:d5:eb:60:81:d0:ca:2c:63:d2:65:
         68:70:1a:c2:d1:0c:32:0b:a2:c7:c0:25:82:fe:d5:dd:be:81:
         ca:b3:f1:d5:94:15:fb:96:13:ec:43:73:b0:27:81:06:a5:b7:
         14:5a:13:ea:b9:fb:17:b5:37:b9:fc:5a:0c:85:fd:63:86:72:
         ba:48:a0:fc:9a:16:cd:31:56:d4:df:27:58:f1:19:25:da:37:
         7a:e2:ba:4c:5b:91:c1:f3:02:23:00:87:c4:23:69:21:51:42:
         8f:da:ae:81:5f:d1:f6:9b:aa:56:5c:7f:d1:ee:9b:15:d4:ae:
         f0:13:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:43 2025 by rpki-client