Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
File:                     528A271B82B6185862B06F250499140113F6FE20.mft (raw, json)
Hash identifier:          anBntMI8p27hQ2WuP21uqSWgcQjVvnt6TRgq9a0W2e4=
Subject key identifier:   43:5C:B0:3E:F2:18:5B:8D:EF:7B:9F:FD:8A:EB:22:AB:DD:13:12:F3
Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20
Certificate issuer:       /CN=528A271B82B6185862B06F250499140113F6FE20
Certificate serial:       60456204D8CEE4F8A680F3409C1E33327D1E5017
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
Manifest number:          01B2
Signing time:             Fri 31 Jan 2025 06:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 05:55:55 +0000
Manifest next update:     Mon 03 Feb 2025 06:55:55 +0000
Files and hashes:         1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: r+BkcP38XEQmDQX+LbW7W+6HM3iMc5p4cRI8+H+wwwU=)
                          2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: SffqdAz1gd+t/rUnnOAfpFPhA27m18dkwd09UZgq2W0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:62:04:d8:ce:e4:f8:a6:80:f3:40:9c:1e:33:32:7d:1e:50:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528A271B82B6185862B06F250499140113F6FE20
        Validity
            Not Before: Jan 31 05:55:55 2025 GMT
            Not After : Feb  3 06:55:55 2025 GMT
        Subject: CN=435CB03EF2185B8DEF7B9FFD8AEB22ABDD1312F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:d9:76:6b:15:8b:80:61:2a:31:68:e0:49:
                    b6:77:46:9d:5b:55:4f:eb:b6:9b:4d:3d:90:af:2f:
                    22:74:88:66:79:ea:80:cd:5a:07:cc:8b:e5:59:3d:
                    2e:9c:f7:db:a3:21:40:23:be:87:fc:01:e2:1c:95:
                    1d:57:f8:78:97:36:67:57:d7:5a:47:e0:de:ad:04:
                    95:4f:1e:61:d3:7b:f9:52:15:86:6f:45:c6:c5:ef:
                    a8:ea:db:d4:a3:84:09:7e:68:d2:ba:71:01:f5:61:
                    d2:39:5c:b5:99:f5:ae:12:25:b9:72:6b:01:aa:c7:
                    2e:1a:1d:c6:c1:55:00:dc:21:7c:c0:6f:5c:e3:ce:
                    80:9e:1e:6a:ef:b0:32:b9:6f:13:d5:87:1e:7d:e1:
                    8b:7f:98:c3:5e:21:7e:23:29:ee:9e:42:96:78:6f:
                    1c:d1:e1:e9:4d:2f:d1:e6:4f:d1:69:3d:05:98:36:
                    f4:d5:48:4b:01:af:60:0f:92:97:36:46:07:89:76:
                    aa:58:c1:10:f1:f5:b7:55:45:37:ec:13:13:f9:de:
                    3e:1a:0b:f2:c7:25:77:8a:9e:60:7a:00:eb:5e:89:
                    84:35:69:6f:33:0d:6f:f8:ce:2d:41:d4:e6:f5:80:
                    b0:9d:67:28:c4:8c:e7:81:38:52:78:d2:9b:bf:ad:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:B0:3E:F2:18:5B:8D:EF:7B:9F:FD:8A:EB:22:AB:DD:13:12:F3
            X509v3 Authority Key Identifier:
                keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8e:55:5a:66:53:17:c6:b7:4d:ce:cb:dc:d7:ac:e8:2e:b8:
         91:d3:d4:3d:5c:2e:82:fa:5b:d9:5a:71:c2:3b:5a:5b:05:b0:
         84:ad:7c:17:82:b6:eb:01:55:bd:95:48:d3:91:a4:9a:24:c4:
         01:7c:f2:f4:31:12:73:df:e3:62:85:2d:3f:21:d1:ba:6d:10:
         2c:99:8c:53:53:e6:2d:48:81:65:da:3b:bf:60:d4:91:58:d5:
         8f:e9:36:2d:c3:93:a8:dd:53:13:dc:81:06:ad:b5:df:22:88:
         96:91:77:2b:5d:0e:a4:52:4e:4c:42:dd:6a:11:78:b8:7f:8b:
         24:74:d3:29:fc:8c:d0:62:bd:df:b3:bb:b5:b4:e3:56:5f:dd:
         c7:c7:c5:80:cd:32:a9:dc:b8:d2:ac:f0:f7:6c:19:e9:f0:27:
         ab:e4:75:21:3c:95:7b:fb:c0:bb:ad:8c:73:19:94:9c:33:55:
         04:d9:27:e0:7c:83:37:dd:25:3b:5a:23:cc:09:3a:70:7f:5d:
         e1:53:bb:f4:18:33:81:3d:6f:73:7f:31:45:f0:1b:f9:67:bd:
         53:94:5c:b5:b1:af:de:9f:b3:af:54:19:f6:44:7c:cf:78:39:
         5f:4a:18:42:b7:33:8d:ac:12:e9:23:25:83:81:0d:69:61:ee:
         16:1b:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:01 2025 by rpki-client