Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
File:                     732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json)
Hash identifier:          /lCyX5z8rLLuXnaP6YR/3SjqpRN/7/wS3FjCzs8cLyU=
Subject key identifier:   68:6E:C0:0E:5F:62:9C:49:C2:5B:6C:81:78:75:45:58:FB:8F:D3:89
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       563B79F7AB7479BCDAD5F8447F0D5D1BCBA1B4ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
Manifest number:          0221
Signing time:             Thu 30 Jan 2025 01:21:00 +0000
Manifest this update:     Thu 30 Jan 2025 01:16:00 +0000
Manifest next update:     Sun 02 Feb 2025 06:52:00 +0000
Files and hashes:         1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: QmIGK8LVylDPu4OAsnPqbgt16RMYqey3M78cCTZ8CVs=)
                          2: 3230322e3138332e302e302f31392d3139203d3e20313331373336.roa (hash: VRIMxbKk2/BgJ4rNh3WEsQrmcL4C16eroJWi/c1DV6o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:79:f7:ab:74:79:bc:da:d5:f8:44:7f:0d:5d:1b:cb:a1:b4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Jan 30 01:16:00 2025 GMT
            Not After : Feb  2 06:52:00 2025 GMT
        Subject: CN=686EC00E5F629C49C25B6C8178754558FB8FD389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:ac:69:e4:95:05:4e:1b:ba:68:35:32:78:
                    ec:62:f4:3c:54:20:94:2b:1d:f3:6d:34:ac:c3:ec:
                    6c:17:9f:3a:b4:92:9b:6d:88:85:af:5f:d9:9c:d0:
                    95:9b:4e:dd:46:f2:8f:74:ba:99:3d:ee:6b:3d:c9:
                    6d:26:ce:66:84:bb:97:12:b6:1c:c2:37:d8:04:06:
                    23:cf:ac:f8:bb:a9:5b:99:0d:c0:a9:04:58:8a:70:
                    30:d9:30:e5:d9:9f:0b:75:3e:6d:48:fa:a0:d7:67:
                    ed:b9:07:fe:a6:51:f7:5b:47:67:9d:79:56:b2:75:
                    f9:ed:3b:33:fe:7e:bc:25:eb:e8:27:d5:ab:e3:63:
                    17:26:e4:dc:a6:77:00:a9:75:b7:cb:5d:64:a2:a9:
                    5d:80:f2:b1:4f:77:e0:57:eb:56:7c:be:a5:97:38:
                    2a:63:7f:34:3f:70:c3:96:0e:9f:52:9f:ed:91:13:
                    7e:00:44:6f:f0:a7:3f:b8:c3:98:d4:ec:29:5f:44:
                    17:a7:b7:b1:22:4a:ee:1a:10:b1:86:01:c4:b4:c2:
                    e5:44:0b:e5:9c:95:31:ef:95:30:b0:24:1f:36:cd:
                    a7:f4:32:27:f2:0d:24:9f:c4:cd:01:bd:04:04:53:
                    48:ec:59:92:eb:84:46:c9:84:1c:e0:cf:2a:0b:fa:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:C0:0E:5F:62:9C:49:C2:5B:6C:81:78:75:45:58:FB:8F:D3:89
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:4e:37:a9:9b:07:4c:5d:c4:8c:d4:f1:63:df:04:f0:18:
         36:89:db:ca:7a:ef:1d:06:5d:5f:a1:bc:aa:85:41:8d:5e:7e:
         00:d4:45:29:f9:5a:5e:7a:d5:74:55:a5:65:31:21:d1:d4:53:
         e3:35:85:92:99:7b:e4:f6:f8:78:61:a1:7d:c1:01:e0:a9:b8:
         13:f4:a3:38:9f:f2:80:55:82:6b:e6:99:b1:92:f2:38:54:0e:
         7c:be:5e:82:b9:9b:2a:29:d1:e9:b4:4f:04:be:e5:fa:87:b6:
         e5:22:72:eb:8d:1c:32:51:a4:fe:ed:c1:93:77:95:98:28:b6:
         1d:be:ba:2c:d1:c6:ff:c6:82:8f:f3:29:7a:a6:1d:ac:fc:9b:
         af:1a:97:69:45:78:01:57:75:ad:27:69:25:05:ef:d2:48:75:
         18:02:7d:a1:be:88:c0:25:98:19:60:34:80:6f:93:10:1a:5d:
         37:5e:62:ad:45:69:b4:09:0d:6e:ef:7f:31:cd:57:8f:be:29:
         a9:52:8f:1a:86:de:3a:d4:47:8e:d5:a1:fe:1a:bb:f4:a6:b9:
         69:55:c0:13:81:49:04:40:42:25:82:56:56:58:f3:71:b0:d7:
         98:4a:95:87:92:97:1d:56:7a:3a:2a:f1:1b:29:ac:72:b7:0a:
         4b:c0:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:17 2025 by rpki-client