Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
File:                     658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json)
Hash identifier:          HH0QRV9f/e+5qpDMD6XFGptucABtN9Vxl2v2rJBRb1M=
Subject key identifier:   BD:4A:FA:B9:84:A9:58:56:A1:A2:E0:B7:60:AE:26:E8:D6:DE:AC:D6
Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
Certificate issuer:       /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Certificate serial:       386701E8C9E4405D45D792088F653C757D62044C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
Manifest number:          0185
Signing time:             Wed 29 Jan 2025 16:31:55 +0000
Manifest this update:     Wed 29 Jan 2025 16:26:55 +0000
Manifest next update:     Sun 02 Feb 2025 03:02:55 +0000
Files and hashes:         1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: MewgEFV8/Gf2xWiAF3HMTn3UuwwnwcLIAP9RU1oUnnE=)
                          2: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: 48+L1G8c0vPJ3Xwh9g6Jvkl9utn16OoluFEE7IOJhNo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:67:01:e8:c9:e4:40:5d:45:d7:92:08:8f:65:3c:75:7d:62:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
        Validity
            Not Before: Jan 29 16:26:55 2025 GMT
            Not After : Feb  2 03:02:55 2025 GMT
        Subject: CN=BD4AFAB984A95856A1A2E0B760AE26E8D6DEACD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:dc:3e:fa:e0:02:c0:b5:ba:56:31:cb:5b:
                    bf:3c:1e:43:c5:1c:00:d0:15:7c:b8:07:a9:f5:8c:
                    61:0a:15:9e:1e:fb:eb:43:a4:b6:77:35:60:6f:29:
                    b6:f4:ed:21:1d:1b:ca:ea:70:54:39:5e:b2:a5:14:
                    54:ad:2b:95:18:2c:77:2c:19:50:12:bb:71:3b:32:
                    74:60:8f:d2:a0:c3:6a:fa:11:b1:f3:c9:cb:d3:3f:
                    28:84:bc:4b:19:83:5a:ce:0d:73:1f:68:b0:82:05:
                    1b:93:b7:55:cc:48:89:ad:fb:ba:3b:03:81:71:97:
                    8e:a7:c3:53:81:ed:38:e6:2a:ba:13:b2:85:22:aa:
                    08:ee:be:63:59:e1:80:3b:b8:7b:b5:cd:70:13:55:
                    af:0b:40:eb:27:05:d2:74:57:0f:01:78:c7:a9:f1:
                    ae:ec:64:5a:26:c8:0f:8c:11:1a:95:c1:f7:13:da:
                    1c:00:b8:3d:e9:f2:a6:c6:c0:d7:06:c0:42:97:8b:
                    35:1a:d1:92:18:22:c4:06:8a:eb:a8:9f:72:9e:14:
                    67:16:41:de:16:a4:3a:de:32:d7:7d:c2:41:5a:b8:
                    98:3a:e5:8a:be:23:be:b2:a7:d9:05:48:da:33:68:
                    3e:57:ea:98:27:93:95:01:44:78:f2:94:0e:58:c3:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4A:FA:B9:84:A9:58:56:A1:A2:E0:B7:60:AE:26:E8:D6:DE:AC:D6
            X509v3 Authority Key Identifier:
                keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:4f:1d:2d:55:18:7d:ea:42:01:75:2c:25:4a:01:5d:d0:
         86:6a:63:a7:ef:91:cd:0c:68:5e:58:fa:22:2e:37:c3:76:1e:
         59:d4:4c:bc:ed:4e:24:79:b5:b1:93:2b:ac:07:d0:dd:53:91:
         ed:9b:bf:2f:55:16:d2:07:9c:85:24:e6:cc:c3:11:f7:b8:b8:
         47:c8:c2:79:f1:44:1c:4b:b2:66:b5:16:82:1c:47:a2:c2:86:
         14:26:c9:b8:bc:2b:dc:bf:14:83:d7:52:7f:fc:9b:44:f5:5e:
         9f:0a:7b:71:df:38:6c:30:99:6d:08:61:4e:a5:ba:19:09:e4:
         f3:d0:21:07:04:11:4b:d2:60:ac:c9:5b:6a:07:3c:6e:e5:38:
         21:ac:4d:92:37:af:1f:51:9e:29:53:5a:12:ed:bd:a1:73:9d:
         8f:02:4f:d9:e6:ad:8f:db:31:f7:d4:88:6f:0f:33:a5:fb:20:
         65:e2:42:87:91:f0:59:04:10:b0:cf:8c:5b:f3:c8:18:9d:f8:
         6d:b4:ac:da:0a:79:4a:95:0e:fe:eb:d3:af:22:91:8a:e5:32:
         85:b2:82:23:d6:9b:a8:8f:bf:3a:07:d7:59:10:7e:2d:22:4c:
         3d:6e:3a:55:8b:44:30:1e:bf:1d:86:16:ae:45:45:c8:e5:c7:
         6f:9f:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:46 2025 by rpki-client