Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft
File:                     8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json)
Hash identifier:          MiQ40ha4EsNX0iWNwsmDz86qLBvPD1hjNGkty2wLGGI=
Subject key identifier:   7C:49:26:3B:E7:9F:F4:91:D5:91:38:71:C9:F1:06:20:B3:3E:F7:C6
Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F
Certificate issuer:       /CN=8955B36815B4084BAFC7908A639810631BEED49F
Certificate serial:       4AA1AFA5C68FF8CF8A33EF010700B2E7453FD7CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft
Manifest number:          0494
Signing time:             Wed 29 Jan 2025 19:10:42 +0000
Manifest this update:     Wed 29 Jan 2025 19:05:42 +0000
Manifest next update:     Sun 02 Feb 2025 06:44:42 +0000
Files and hashes:         1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: l6NTJh44jziSQitd9WWw/5MxZwe3jVvZ001+e+Ug7bY=)
                          2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 7EctcIPxfFZPW1P5p9qAy089fiBQ6Wvhy3EiPuauiGc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a1:af:a5:c6:8f:f8:cf:8a:33:ef:01:07:00:b2:e7:45:3f:d7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F
        Validity
            Not Before: Jan 29 19:05:42 2025 GMT
            Not After : Feb  2 06:44:42 2025 GMT
        Subject: CN=7C49263BE79FF491D5913871C9F10620B33EF7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:a9:35:65:fe:70:61:2a:5d:74:31:91:fe:
                    be:f5:3f:e1:44:e6:bb:5c:43:76:4c:e3:7c:b1:a7:
                    7f:94:2f:a4:de:63:b9:35:aa:e0:b9:9a:96:1d:69:
                    0e:e3:29:c0:69:cb:8c:62:02:e7:2b:29:c2:42:22:
                    81:99:30:5e:07:2b:66:b2:e1:87:1b:f5:82:0d:da:
                    e5:20:00:6f:ae:f0:7d:ef:f4:71:f1:27:94:6c:00:
                    f2:09:c4:0e:fe:07:e0:ea:39:d4:05:04:f9:8e:d8:
                    d2:6d:63:22:51:44:7b:27:52:10:8c:fa:40:5b:64:
                    38:ad:d2:7c:c7:f3:78:b8:8a:ae:1d:4a:95:53:21:
                    1d:c3:da:4f:1b:3d:2e:6c:03:a9:45:e9:a7:e2:2b:
                    ba:70:2c:ba:a3:1c:da:47:b7:6c:84:fb:d6:19:1b:
                    9d:8e:fb:c5:bb:5f:f5:dd:b0:6c:25:59:ee:55:7e:
                    27:c7:23:87:24:6a:1f:20:a3:47:f2:b5:e2:55:79:
                    9b:bb:c4:e6:b1:21:30:9d:60:20:d1:89:28:42:bc:
                    60:87:3f:6e:9e:95:14:28:32:07:35:50:f8:98:94:
                    4c:04:3a:32:4b:63:79:49:0b:4b:08:bc:4b:ef:53:
                    ae:a6:ef:a6:8c:74:11:43:af:5e:ad:48:b2:04:09:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:26:3B:E7:9F:F4:91:D5:91:38:71:C9:F1:06:20:B3:3E:F7:C6
            X509v3 Authority Key Identifier:
                keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:4c:f1:3e:ce:bc:eb:d2:19:47:47:0a:fe:04:18:7c:9b:
         27:79:42:83:1d:5b:8b:54:6a:06:51:31:e7:03:52:44:55:44:
         a7:d6:7c:10:12:83:17:20:e6:f3:cc:06:5f:a8:27:24:87:ee:
         0a:8b:24:1f:1c:a9:a1:c9:1f:0b:0a:d6:b9:fb:2c:a1:1f:03:
         b9:d2:3f:7b:38:9b:57:96:6a:f0:ea:91:65:4f:a0:97:35:aa:
         91:9d:3a:80:47:16:d4:e3:e4:9b:ad:4e:5f:75:71:c4:64:0f:
         c9:ca:2a:43:28:eb:73:40:b9:67:94:e7:03:8e:f1:b3:37:d1:
         90:54:68:9e:5a:42:df:83:bd:67:6d:4d:57:ce:25:ff:a3:cf:
         9c:a3:30:e4:04:c8:8c:d1:3f:d2:d4:b2:19:0a:c8:45:c4:53:
         a6:01:f5:87:a6:cc:45:d0:17:c0:0c:74:d4:b9:f8:e1:28:0e:
         17:9c:87:02:ba:a8:bb:a9:f9:f3:e6:93:26:74:f0:1b:d7:50:
         51:6c:42:81:e9:7c:ae:86:da:11:70:88:f0:8f:80:9d:18:aa:
         c4:46:d0:f1:95:82:93:b3:d5:0b:db:11:5d:00:32:7e:82:78:
         98:eb:3e:54:1b:d9:c5:ee:c8:14:90:d5:16:b5:53:ad:1d:5c:
         d2:ac:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:19 2025 by rpki-client