Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
File:                     F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json)
Hash identifier:          Y9Qyk4fSoZngQ1OLoSoyZZZ+38haAy1Qkkjy/Ne+RAU=
Subject key identifier:   BD:23:FA:75:F1:9F:C6:FD:0F:60:F8:9D:C7:74:01:2F:9B:62:86:4E
Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
Certificate issuer:       /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
Certificate serial:       4E49F5E5FB13163D11F6DDBD0BA28AA609D5BC3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
Manifest number:          52
Signing time:             Fri 31 Jan 2025 03:51:04 +0000
Manifest this update:     Fri 31 Jan 2025 03:46:04 +0000
Manifest next update:     Mon 03 Feb 2025 08:32:04 +0000
Files and hashes:         1: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: uvm4fz5TuOdgjgA4uerXBSE0ZPcfae3Y2Ipezq4s2eM=)
                          2: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 2NTDN0N3a2fcLi0JauUpmbSOFigLmvDTHZI9ZqrrAbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:f5:e5:fb:13:16:3d:11:f6:dd:bd:0b:a2:8a:a6:09:d5:bc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
        Validity
            Not Before: Jan 31 03:46:04 2025 GMT
            Not After : Feb  3 08:32:04 2025 GMT
        Subject: CN=BD23FA75F19FC6FD0F60F89DC774012F9B62864E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:1e:37:8b:ad:dc:d9:e4:aa:af:00:4b:c7:
                    fc:a3:26:e8:fb:a4:21:bc:40:0d:50:01:ab:6e:47:
                    19:9f:83:13:fa:8c:58:65:e0:a5:5d:60:65:92:4d:
                    44:5a:43:dc:ca:fd:38:f6:36:ef:6c:4b:32:3b:61:
                    c0:99:2c:19:84:37:1f:b8:66:11:62:a2:b8:d6:61:
                    c6:fb:44:36:d4:3e:d3:a8:82:c4:48:12:af:0d:5e:
                    cf:75:d4:60:34:14:06:ca:00:2e:c5:e3:f0:e8:6d:
                    13:9c:ec:36:04:e1:df:39:bd:10:b9:1b:b3:60:af:
                    6c:56:54:7e:eb:6f:46:37:38:4c:0f:39:ed:f9:fb:
                    95:b1:cc:e7:e4:8c:be:f8:b4:43:73:e3:80:11:8a:
                    aa:30:be:44:e9:48:ad:5d:24:4c:df:a1:8c:de:2e:
                    49:85:8a:da:2b:2f:65:98:11:90:90:57:e8:1b:4a:
                    7a:0d:5e:8c:70:ef:56:0c:e4:03:b7:80:e9:a3:39:
                    1a:a8:c7:ab:ec:93:a6:33:f0:c4:b9:f7:cc:d5:0f:
                    83:38:34:02:00:b3:c8:39:03:a3:6c:f5:7d:a1:50:
                    0e:13:21:f6:fb:3a:7d:97:51:7d:af:a7:dd:e3:f3:
                    c9:67:93:2a:51:ff:0e:f8:16:41:e6:0c:85:9c:23:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:FA:75:F1:9F:C6:FD:0F:60:F8:9D:C7:74:01:2F:9B:62:86:4E
            X509v3 Authority Key Identifier:
                keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:25:8c:c4:42:15:33:9f:87:ba:c9:d6:4e:e8:a7:b7:56:
         a6:10:e2:95:a7:9c:4d:2a:76:d3:8a:2e:6e:c9:d9:4a:c8:d2:
         89:cf:9f:c6:7b:eb:90:bd:c8:0b:b5:fc:cf:7a:03:cd:8b:65:
         3c:02:60:3f:33:cc:8f:ec:07:4d:43:3f:8e:0b:3c:20:29:78:
         ec:7e:f3:2d:b6:35:8c:5a:41:3f:aa:88:95:48:2c:df:2a:71:
         b9:6b:5f:00:8f:4e:36:a4:09:4a:f9:62:ab:fb:df:b7:70:48:
         7f:d8:a3:0a:83:10:f5:19:68:10:9b:1d:b2:46:97:5f:85:fa:
         7d:3a:f7:fd:f2:51:0d:33:a8:f4:f0:29:f4:98:1f:20:3b:45:
         5d:0a:9c:ba:35:b7:e8:50:07:4e:47:12:57:40:f9:07:07:75:
         52:b9:37:27:d2:4f:a3:ea:c7:54:9f:24:1d:e6:ab:15:83:2e:
         39:58:fe:48:7c:83:dc:2f:56:da:9a:d3:0b:f0:70:0e:da:f8:
         41:03:b9:6d:30:e0:10:3c:e3:72:c3:07:7a:bc:c5:f1:1f:d1:
         e0:d9:76:d3:8d:4d:3a:22:e8:0c:f2:23:2f:27:d3:9c:db:43:
         7c:2a:65:bd:14:f0:8d:c6:22:82:54:c6:dd:5f:fa:2f:61:5d:
         90:98:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:06 2025 by rpki-client