Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File:                     8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier:          M17hKy5RqVmud4OIRHTBMVX4ql1uwaIsYs5nJC+QGCs=
Subject key identifier:   99:A4:68:77:8D:11:8F:76:CC:FA:C0:F9:A0:88:AA:DA:8B:E4:B6:36
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer:       /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial:       5C5492A4C26A8A7A8F1782411C54E80CA3A9DE81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number:          022B
Signing time:             Wed 29 Jan 2025 14:41:58 +0000
Manifest this update:     Wed 29 Jan 2025 14:36:58 +0000
Manifest next update:     Sat 01 Feb 2025 22:40:58 +0000
Files and hashes:         1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=)
                          2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: FIeSg5kIy9VvsB9sZeJeBP5VoAonAzjeb72mB4MbGQg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:54:92:a4:c2:6a:8a:7a:8f:17:82:41:1c:54:e8:0c:a3:a9:de:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
        Validity
            Not Before: Jan 29 14:36:58 2025 GMT
            Not After : Feb  1 22:40:58 2025 GMT
        Subject: CN=99A468778D118F76CCFAC0F9A088AADA8BE4B636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:fe:28:60:9d:df:b0:5d:99:86:e1:0d:2a:
                    e8:f7:14:e4:84:f7:26:99:92:cf:f0:be:62:2c:67:
                    c5:8f:53:b7:ac:c4:df:53:ef:c6:a6:43:ce:3f:6e:
                    7c:fd:63:a4:21:84:07:c6:e3:44:9f:73:5d:da:23:
                    e3:8f:5a:30:1c:c7:cf:4b:6f:ec:f5:29:40:57:1f:
                    7a:6d:4c:98:69:d9:c1:3e:cf:60:6b:5f:94:f0:7f:
                    32:fa:06:35:4a:44:e0:a0:96:fc:d6:b4:30:67:67:
                    db:cf:6d:ee:18:81:b7:98:73:8e:0f:c1:ac:9b:04:
                    31:00:8f:cf:d1:d4:99:85:b6:3c:30:29:42:cc:57:
                    01:b2:74:5f:c0:5e:16:62:93:ab:1c:22:76:62:80:
                    85:c5:45:5d:25:c2:80:f1:81:73:7e:c6:8a:ec:b3:
                    1c:fc:1b:6b:43:8e:73:51:be:c2:6a:f1:53:cd:10:
                    6a:5a:44:3b:80:94:6f:12:d3:7e:b6:2c:01:88:f7:
                    be:a3:27:51:f7:71:87:c1:7d:03:14:5c:56:8c:9e:
                    a2:5c:38:e4:3d:41:03:d6:1d:25:da:b3:df:22:19:
                    8e:68:fc:45:ba:b3:77:41:c9:e7:3c:53:20:6e:e1:
                    5c:b3:e0:76:51:13:c6:b1:4e:63:a8:8d:07:15:43:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:68:77:8D:11:8F:76:CC:FA:C0:F9:A0:88:AA:DA:8B:E4:B6:36
            X509v3 Authority Key Identifier:
                keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bf:4a:15:de:07:c0:ad:ee:82:cd:24:98:52:6e:57:ad:5d:
         0a:92:79:74:8e:c7:e1:f2:ea:6c:e6:4a:b0:6a:5f:81:2d:ed:
         d3:14:63:fe:b5:06:e8:a2:d0:0c:77:d4:0e:da:bb:ac:7e:3b:
         1f:c3:de:76:75:90:bc:11:02:8c:bc:a7:d1:69:c6:36:2c:cd:
         81:cf:e6:7b:3a:0c:97:87:7e:b3:1d:43:9c:49:5c:b2:14:bd:
         ea:4b:94:9e:24:9d:6a:7f:57:c1:1d:2d:16:29:3b:2f:de:4d:
         2d:bf:cc:b3:f3:91:15:e7:ee:11:f2:b3:ba:6d:f1:33:1e:05:
         ab:0f:07:07:86:69:ed:c6:74:c0:13:51:a6:5d:74:c4:12:15:
         db:1f:74:16:eb:2b:10:af:20:d5:25:81:b0:4a:ad:ec:41:4c:
         e0:68:5b:ec:cf:79:61:ba:e0:39:a2:81:b5:f6:9c:c3:8f:6e:
         b1:12:61:ac:a2:f1:2a:c4:01:06:43:57:aa:c2:83:60:b5:49:
         2a:73:02:7e:ef:ed:57:95:31:68:6c:0c:70:90:08:bf:07:78:
         77:79:fc:1c:82:45:88:3d:39:d8:56:2e:08:16:e3:a0:a5:84:
         d7:b5:4d:42:89:d3:5f:ed:97:51:f4:e5:a8:a1:70:9d:3d:9f:
         a7:9c:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:44 2025 by rpki-client