Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
File:                     139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json)
Hash identifier:          58/GWeqd+c//FKhHvf3XFHcxyPNMOshqgZpFFvlGg/o=
Subject key identifier:   B8:B3:01:55:30:21:6F:4E:94:8C:93:81:D2:16:03:0D:56:2A:00:DC
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Certificate issuer:       /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial:       380038FDFC3E82CEA136945F8366CF650B2DC27E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
Manifest number:          0210
Signing time:             Thu 30 Jan 2025 21:02:17 +0000
Manifest this update:     Thu 30 Jan 2025 20:57:17 +0000
Manifest next update:     Sun 02 Feb 2025 22:33:17 +0000
Files and hashes:         1: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: KDaG3uoxhdk7I5rS6GUBmY5RsXcYi6pODIjOMiOliPI=)
                          2: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: P+IUE1LGD8ElXeQQSjrtgfcVyLtwl4130alY1sqZ59Q=)
                          3: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: MLL6/qDsxtEsMRa44Zl6aIIBEl0tDem6dFSdspx4PV8=)
                          4: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: eYrdqV2eJFnxCahDbApV4knHEj3k//y61qNLVNaT8KE=)
                          5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: 3EvU4TBtv6BXZiyYaAbxIfh7U9gKO1iNAgsQ6ldwMyE=)
                          6: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 5cGFOXICgLmaNpmZAogfW5ytKDPAYz1pnqRlwPOSxTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:00:38:fd:fc:3e:82:ce:a1:36:94:5f:83:66:cf:65:0b:2d:c2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Validity
            Not Before: Jan 30 20:57:17 2025 GMT
            Not After : Feb  2 22:33:17 2025 GMT
        Subject: CN=B8B3015530216F4E948C9381D216030D562A00DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:e4:24:1c:e5:b1:5a:64:39:f7:3a:2b:44:
                    be:b9:45:5a:3c:87:f7:d9:48:45:03:c5:36:f2:a5:
                    02:a9:78:a7:3a:aa:2e:36:13:08:c1:17:09:a2:e2:
                    31:dc:0a:99:94:78:84:08:29:bb:9b:0c:6b:94:d2:
                    b8:b0:40:23:32:27:91:89:4a:8d:1b:f1:eb:7e:1e:
                    53:cb:6c:af:f6:86:c6:dd:81:51:b0:a7:34:36:7e:
                    c7:b2:77:72:71:2a:29:01:39:80:1a:86:c1:cd:14:
                    e0:9e:43:ab:53:cc:f1:01:95:8a:64:d4:f5:26:57:
                    db:78:e0:39:09:a9:c7:68:57:fa:21:1f:93:34:0e:
                    db:f9:5f:09:86:79:7b:e9:ad:e1:19:cc:04:c0:a2:
                    f0:36:48:2d:5d:2d:0f:c6:79:24:d5:37:36:76:af:
                    cb:eb:07:b8:b8:c9:32:ba:a0:9d:28:27:16:4c:d5:
                    54:c7:8a:71:17:9d:8d:fc:6d:51:f8:57:d4:b0:cc:
                    cd:01:85:03:46:81:c8:17:a2:6b:87:6f:a9:2b:77:
                    48:5b:aa:fc:6c:da:7f:a8:cf:12:95:6d:c8:a7:e2:
                    3e:ac:5c:bf:4d:17:10:48:01:03:58:34:9f:2b:cd:
                    5b:f5:b4:84:0f:19:89:85:5f:0f:c4:af:14:18:9b:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B3:01:55:30:21:6F:4E:94:8C:93:81:D2:16:03:0D:56:2A:00:DC
            X509v3 Authority Key Identifier:
                keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:0d:c4:1e:c1:76:66:56:af:db:95:d9:cb:12:01:df:69:
         96:6a:89:fc:ef:51:e4:fe:a2:34:c1:45:ef:cc:93:f0:b1:a2:
         6c:76:0e:4f:38:2f:43:25:8c:01:f6:02:36:05:1a:ad:d2:d8:
         52:ab:30:8f:c7:2a:5e:9d:5a:74:d3:4b:14:15:b7:da:06:60:
         06:f1:88:d7:2c:40:1e:54:a3:1f:29:37:bd:c7:27:e4:e3:01:
         7b:47:c9:0a:9b:d4:43:31:61:ca:62:01:af:80:53:c3:f1:e4:
         8a:56:d2:64:4a:61:34:c2:49:0a:fe:23:b2:29:40:a5:46:2a:
         66:f5:2c:05:f6:8f:fa:46:3f:0c:c3:a8:1c:c4:99:68:9c:4f:
         83:fb:f9:cd:5c:14:0e:7f:58:cd:9a:19:72:4d:eb:8c:8e:57:
         39:2c:05:a1:68:ad:ff:6d:68:79:84:62:78:af:3a:74:5c:6d:
         c5:de:0f:ce:0d:fa:58:07:b9:f6:2d:e6:99:01:e1:a8:ba:1f:
         ae:7a:cf:47:49:af:90:a9:69:53:7d:c9:37:35:b8:ed:42:a2:
         c5:cd:86:e2:05:ad:67:04:8a:64:ec:d2:77:1f:ec:fe:6b:c4:
         4a:0c:3b:4a:63:8a:58:50:b6:43:02:b2:04:48:f6:2e:67:b2:
         9e:d4:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:17 2025 by rpki-client