Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
File:                     B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json)
Hash identifier:          lhUzYcJ3aUaYfbaA2mZRfcXL6YqIOdyTi0/TXTn+3wI=
Subject key identifier:   2F:02:A3:E1:AD:6B:AD:1C:58:27:06:DC:CF:F0:6B:E3:1B:7B:52:0C
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Certificate issuer:       /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial:       F54564A62CB9726AF91E2C03A7351FEF6B60B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
Manifest number:          0236
Signing time:             Wed 29 Jan 2025 10:51:47 +0000
Manifest this update:     Wed 29 Jan 2025 10:46:47 +0000
Manifest next update:     Sat 01 Feb 2025 22:02:47 +0000
Files and hashes:         1: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=)
                          2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=)
                          3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=)
                          4: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=)
                          5: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=)
                          6: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=)
                          7: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=)
                          8: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: +SO0grcFbsm6Zl4gIwOjBDpkwPYXoBpSl5kMKfK8mXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:45:64:a6:2c:b9:72:6a:f9:1e:2c:03:a7:35:1f:ef:6b:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
        Validity
            Not Before: Jan 29 10:46:47 2025 GMT
            Not After : Feb  1 22:02:47 2025 GMT
        Subject: CN=2F02A3E1AD6BAD1C582706DCCFF06BE31B7B520C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:78:a3:35:ab:f2:df:63:b5:5a:1c:55:3d:
                    32:1b:16:ef:18:44:40:8c:8a:c8:4c:f5:dc:e6:c7:
                    6b:bb:ef:5f:d7:0a:64:3f:3d:ba:6e:d9:6b:7d:08:
                    8b:de:ab:4f:b6:15:16:6e:5e:2b:1d:fa:c2:cd:7e:
                    5a:56:09:8d:14:d9:54:dc:78:68:81:bf:0a:00:db:
                    60:9c:ea:ce:f3:7b:c8:96:3c:17:48:32:7b:bb:1c:
                    b9:4b:d6:58:5d:c9:3f:8c:c1:32:0e:45:f2:fd:b6:
                    af:69:5c:47:19:c2:eb:00:a4:fe:16:ef:0a:47:a8:
                    aa:00:f7:23:66:0c:ee:13:4b:65:d8:3e:18:79:83:
                    ab:c4:31:f8:cc:52:bd:fd:f7:c5:8d:1e:d2:71:ed:
                    77:8b:2b:52:b0:fe:d0:f2:56:01:1b:02:51:02:b2:
                    93:78:5f:b2:0a:54:59:3c:86:d9:01:53:ef:b6:35:
                    25:7e:aa:9f:6f:a8:ef:8d:59:db:df:b0:a2:b8:0d:
                    0e:71:96:ab:70:8e:e8:bc:81:34:bb:da:ab:18:9c:
                    cc:87:95:74:4f:71:e2:05:3f:35:38:d3:15:a6:72:
                    38:f1:a1:14:4d:b5:73:29:87:07:aa:34:13:ea:1f:
                    26:0d:a8:1f:d5:fa:04:cd:d1:13:c0:f4:a6:22:da:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:A3:E1:AD:6B:AD:1C:58:27:06:DC:CF:F0:6B:E3:1B:7B:52:0C
            X509v3 Authority Key Identifier:
                keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:f1:cf:66:43:69:8b:10:fc:17:67:e4:b0:f1:18:ef:3c:
         b6:41:af:c6:af:4b:05:d0:ae:f2:f7:08:47:d2:15:62:2a:1e:
         53:8a:8d:39:3e:76:e5:9e:67:ad:04:57:19:43:f1:fe:5b:64:
         5d:fe:14:00:01:49:d5:b8:02:1f:67:3b:71:de:2d:d0:a6:ad:
         27:d9:e5:cc:cb:35:f1:76:88:42:9f:e5:cd:46:24:7c:18:29:
         66:ae:41:00:78:94:ae:6a:d6:d5:66:25:e8:f2:db:06:75:15:
         56:97:d3:2f:be:2e:15:1c:58:e2:51:9a:b7:7f:cc:e5:91:b7:
         28:5c:d9:ef:52:a5:e3:e2:7c:bd:fb:9a:19:fe:07:89:5b:85:
         35:ad:5f:39:fd:34:06:9b:f9:bf:32:38:68:52:08:e4:0e:82:
         1f:42:4f:28:65:14:68:c4:54:0a:50:a2:b7:aa:fb:29:61:a3:
         59:4a:d8:79:2f:d0:b7:7d:11:11:9f:fa:a9:9d:d9:ec:eb:53:
         1f:d8:f0:2c:f0:9a:35:14:93:41:b1:2e:40:a3:20:c8:c0:95:
         49:c1:01:07:82:22:bf:90:e8:02:b9:1c:5c:bc:4e:53:d0:73:
         97:b7:b9:1a:92:57:e0:dc:67:fd:bb:ff:84:e5:cf:7e:eb:28:
         96:55:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:27:23 2025 by rpki-client