Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
File:                     14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json)
Hash identifier:          WP06Fy6fVR5HtTNUyoa3zVsfNKtXfj47zWJeGhgNKBQ=
Subject key identifier:   80:44:A2:76:64:C6:43:DA:1F:B6:E9:37:92:65:F5:A0:57:B4:E5:EB
Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
Certificate issuer:       /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Certificate serial:       7B4246343756DD627E80807541090628384BF26F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
Manifest number:          01DB
Signing time:             Fri 31 Jan 2025 07:11:45 +0000
Manifest this update:     Fri 31 Jan 2025 07:06:45 +0000
Manifest next update:     Mon 03 Feb 2025 15:32:45 +0000
Files and hashes:         1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=)
                          2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=)
                          3: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: PUxgrBRAXiujgcz899NxL8/7xJZUhoIfKcud7G/6jnU=)
                          4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: vQcGVK6JhkO4JP+rgl0UnF9Tyyv/ls7fzCiRnSShb9U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:42:46:34:37:56:dd:62:7e:80:80:75:41:09:06:28:38:4b:f2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
        Validity
            Not Before: Jan 31 07:06:45 2025 GMT
            Not After : Feb  3 15:32:45 2025 GMT
        Subject: CN=8044A27664C643DA1FB6E9379265F5A057B4E5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:ed:24:1c:bb:8b:59:db:e0:ad:e1:64:19:
                    9a:9f:d3:4f:d4:8c:c0:71:93:2e:01:74:26:db:74:
                    b9:d0:8b:94:9c:19:29:a0:85:1c:ea:9f:3c:2e:25:
                    17:8f:86:09:ce:96:8b:5d:4f:61:b7:f4:da:af:6a:
                    b3:80:70:5d:bf:81:5a:61:e8:09:85:48:e6:6f:19:
                    98:5b:ad:8d:af:93:83:61:d0:e2:a4:cd:b2:4a:44:
                    a2:5b:8a:58:b5:c0:39:2a:f4:e8:c1:18:4b:c5:02:
                    81:10:6b:1f:db:db:d8:a7:bf:a0:60:2f:f9:21:21:
                    cd:23:21:bd:ba:92:e6:cf:29:d6:f7:d0:79:c1:c3:
                    68:56:bb:f5:16:6c:c4:97:04:dd:f3:22:55:7b:01:
                    b1:35:8a:17:ce:84:dd:e0:71:7b:84:fa:81:c7:07:
                    3d:00:a8:55:9b:e4:7e:a8:4d:aa:22:ba:67:de:05:
                    b0:4d:c6:3c:ba:a2:16:a6:36:88:4e:e3:78:ae:51:
                    ea:43:ee:c4:40:47:a8:cd:ad:44:31:e0:54:db:76:
                    d8:7e:a0:93:dd:ac:ae:fc:b1:66:e1:cf:5a:9a:e4:
                    08:62:99:ae:62:64:54:dd:32:54:ac:6d:f0:27:db:
                    87:2d:8c:f0:f8:fd:1b:77:66:75:e6:35:2d:72:88:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:44:A2:76:64:C6:43:DA:1F:B6:E9:37:92:65:F5:A0:57:B4:E5:EB
            X509v3 Authority Key Identifier:
                keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:82:ad:d6:79:55:72:f8:cd:83:14:1f:56:42:62:3e:b4:
         7f:73:ee:ce:d8:df:b1:2d:27:71:9e:f4:38:71:5b:26:4c:15:
         20:1c:23:30:22:27:c7:f8:94:46:60:92:ad:a4:d5:ab:16:e8:
         3f:a7:62:9a:69:59:31:d7:34:57:24:a6:ed:0d:9c:38:a3:fe:
         23:23:ec:27:04:cf:dd:b2:84:70:09:b3:8d:6d:b7:74:f5:fe:
         2d:4e:95:10:3a:51:4b:0c:c4:b3:4c:b1:a2:66:5c:83:6d:7a:
         1f:35:f9:cf:89:4a:53:20:97:fe:8e:d1:d3:6a:22:09:33:72:
         9d:84:fd:e0:5e:18:74:35:ea:fa:5b:9f:0c:62:15:ae:2a:65:
         27:2d:9a:9b:39:c8:e4:a0:09:58:80:21:e9:a3:e0:01:33:f1:
         58:55:91:ad:94:f5:e1:9e:a2:75:be:ce:c8:f9:26:9e:3a:52:
         3a:c3:e2:d9:90:3a:5b:80:82:c6:4e:f8:8b:83:42:4f:e6:32:
         d7:03:81:5c:c6:50:f2:01:e4:c8:07:e6:d9:63:d1:70:0b:b1:
         14:df:fc:c3:4b:1d:be:2d:80:73:18:8a:0b:e2:c1:e3:49:a2:
         51:6b:94:0c:2e:be:0d:b8:44:96:b2:cc:ca:a7:af:c9:5f:5f:
         34:23:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:40 2025 by rpki-client