Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
File:                     6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json)
Hash identifier:          mMYJQBqTlTD/aeyUTtJEvHkkCJC78mEMDsCrsjT18ws=
Subject key identifier:   0C:C4:6E:FB:5F:E5:27:BD:80:61:0F:D0:47:42:7C:97:20:54:C9:70
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Certificate issuer:       /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial:       20D2A35D58E7015EE28CC39F8CDA064CBBF48B35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
Manifest number:          01A4
Signing time:             Wed 29 Jan 2025 10:00:02 +0000
Manifest this update:     Wed 29 Jan 2025 09:55:02 +0000
Manifest next update:     Sat 01 Feb 2025 18:48:02 +0000
Files and hashes:         1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: xVOwIPvBQ0n872k/gfDVvNmh+7kWsfCWp3uf32P6Pv0=)
                          2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: jKU5gtVU219lnceaTucZefwhfrwPqEuRsJNHBd5zgSY=)
                          3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: 1RMT6G7QnsJcXCeoX41dd9HXbMd1FoTOfa/tEvmM6xo=)
                          4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: YIKiMUOdnm/ocP5ji3otFiZ4qan7A3bPE3+CKc4gr3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:a3:5d:58:e7:01:5e:e2:8c:c3:9f:8c:da:06:4c:bb:f4:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
        Validity
            Not Before: Jan 29 09:55:02 2025 GMT
            Not After : Feb  1 18:48:02 2025 GMT
        Subject: CN=0CC46EFB5FE527BD80610FD047427C972054C970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:28:cd:73:23:93:32:c6:a0:67:af:4c:51:
                    9f:32:1d:de:6e:5e:3a:9e:4e:72:ef:00:b1:22:05:
                    4d:f3:2f:88:11:2d:82:b0:e6:fd:4c:4b:71:0b:1e:
                    48:e9:98:9b:4c:a7:78:59:ef:b0:e6:a5:57:82:8f:
                    eb:43:82:75:5e:36:fa:93:86:86:df:9c:a7:2f:c0:
                    37:79:53:77:ea:03:b4:16:34:8b:88:aa:b9:55:a9:
                    58:51:22:a2:ec:77:4e:90:d6:8e:83:15:33:85:02:
                    10:ec:65:ee:b6:f7:b1:9a:25:13:e4:72:e9:d5:87:
                    3b:55:06:10:08:2f:42:1c:e4:74:a0:58:11:b8:73:
                    e2:ce:d0:7f:88:8e:db:80:29:83:ac:3f:76:8c:09:
                    05:29:73:42:73:d2:29:5d:c5:be:1f:09:45:65:e4:
                    4b:41:df:ed:34:30:49:c1:50:ea:70:2a:d1:1f:24:
                    b6:d0:d4:72:82:53:eb:d7:27:43:f3:21:35:9f:5a:
                    d8:87:5a:c7:d8:91:18:df:44:2c:4f:18:c2:30:9f:
                    03:75:e6:f5:ff:73:ba:7a:6e:f0:4f:0d:97:59:bf:
                    98:7f:4b:6b:94:40:a4:13:4d:9d:a9:0f:fd:bc:3c:
                    3f:b2:51:ac:e7:06:07:a2:26:93:e9:7b:4a:9e:6f:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:6E:FB:5F:E5:27:BD:80:61:0F:D0:47:42:7C:97:20:54:C9:70
            X509v3 Authority Key Identifier:
                keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:a9:c2:ad:d8:0d:08:c6:64:52:24:03:07:84:4b:4f:3e:
         58:36:d2:ec:47:28:81:97:8c:8a:13:45:22:f1:e6:65:fb:3c:
         58:82:e8:09:49:7a:63:3c:5b:eb:11:93:6f:6f:07:41:5f:53:
         0f:5e:aa:f8:20:2b:38:6e:41:67:9a:9e:55:e2:af:ac:bd:84:
         2f:b8:46:db:a6:c7:61:b4:34:33:30:75:38:e2:65:e5:4a:46:
         1e:42:00:60:82:93:c3:53:60:fc:51:3a:94:de:c8:8b:eb:12:
         1e:79:35:ce:94:5d:1e:32:1d:26:89:76:dd:a8:b7:e8:52:64:
         6f:45:72:cc:6a:17:04:8a:5d:6d:38:b0:7b:9d:6f:17:4c:59:
         4c:d0:81:6f:b3:58:24:0b:b9:4a:e7:d8:c7:34:21:d0:a2:8d:
         ca:92:be:8d:e4:78:3d:cc:98:d2:f3:79:64:f2:32:cb:53:c1:
         09:9e:6b:67:33:c7:10:6b:bb:97:7e:76:22:a9:30:c2:2e:f9:
         8b:5c:a4:fb:be:f7:ce:ec:51:e3:9f:9b:f5:bc:8a:28:46:ba:
         f2:48:f9:eb:0b:b4:5c:91:20:c8:c3:f9:43:bc:78:37:9f:24:
         c9:df:0e:25:8d:73:b3:e3:63:28:71:fd:47:35:ca:d1:5c:ce:
         ea:8e:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:38:17 2025 by rpki-client