Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft
File:                     DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json)
Hash identifier:          Sdky9VK4hnA/f84T1y8dv74LKxMGUJQxx7as8YG4oIE=
Subject key identifier:   49:D9:27:2D:43:23:E5:FE:13:D2:B1:97:E1:AC:BD:1E:05:37:9F:1F
Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8
Certificate issuer:       /CN=DC0680824B7F80117B62C239676444B0691128B8
Certificate serial:       3D383FA8D10DD45ADDBAE076E99DF0979C11536D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft
Manifest number:          22
Signing time:             Fri 31 Jan 2025 02:21:34 +0000
Manifest this update:     Fri 31 Jan 2025 02:16:34 +0000
Manifest next update:     Mon 03 Feb 2025 02:37:34 +0000
Files and hashes:         1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: b3dhL+QQykV6VJPJy5mLy/wfiakOA1bEUE6a9QM+UrU=)
                          2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:38:3f:a8:d1:0d:d4:5a:dd:ba:e0:76:e9:9d:f0:97:9c:11:53:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8
        Validity
            Not Before: Jan 31 02:16:34 2025 GMT
            Not After : Feb  3 02:37:34 2025 GMT
        Subject: CN=49D9272D4323E5FE13D2B197E1ACBD1E05379F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:3e:6f:c1:49:ee:3c:e7:36:ec:1e:d6:7f:
                    90:98:6a:76:72:cc:f9:54:61:c9:cb:ff:eb:40:27:
                    97:ed:dd:a5:5a:0b:14:a0:ae:56:5b:ef:cd:41:c7:
                    3e:7d:46:20:31:ff:c9:fa:9b:01:13:6a:9b:2d:4c:
                    76:d4:3e:6b:82:e7:f6:84:dc:72:6c:e1:54:ff:eb:
                    27:05:f6:a3:46:d8:5d:26:39:5b:7f:16:37:e1:0a:
                    4c:76:d9:8f:96:39:c8:90:d1:4d:b6:b5:1e:84:07:
                    ba:fe:3c:2e:0a:15:5e:55:dc:ea:5a:f2:66:19:4b:
                    48:8c:ed:13:92:aa:54:4d:c8:7f:60:72:7f:b2:f5:
                    33:8c:b5:cc:18:78:17:cd:f7:69:88:aa:63:da:f8:
                    af:b6:5a:9d:32:55:4a:4f:e9:c0:00:7b:53:56:5d:
                    a4:8b:9a:33:6d:7f:34:0f:b9:8e:03:e6:53:35:de:
                    a7:b0:75:55:b3:2a:71:ff:e4:dc:8b:55:c9:8e:7d:
                    e5:b1:3c:4c:2c:bf:6a:d5:79:95:b1:bd:b2:7a:ce:
                    09:d2:40:f8:4b:bb:38:6b:66:7f:59:61:1b:40:59:
                    86:e7:df:61:c6:8c:95:fe:44:30:6d:df:96:b0:31:
                    af:09:ae:bb:e9:90:8b:c1:2d:d5:83:27:13:38:6f:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D9:27:2D:43:23:E5:FE:13:D2:B1:97:E1:AC:BD:1E:05:37:9F:1F
            X509v3 Authority Key Identifier:
                keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:23:62:16:28:6c:20:66:34:2f:23:c3:c4:dd:5e:3f:9f:
         7d:4d:36:e6:78:2a:39:c3:cc:50:3c:78:16:68:05:2b:ba:d2:
         0c:66:d0:21:d7:fb:09:da:00:41:08:ad:2a:02:7b:85:78:41:
         d4:4c:81:e7:3d:33:7e:35:db:15:e1:dc:ef:1d:b4:cb:95:c9:
         49:d4:51:2a:3a:b6:37:28:e7:4b:22:b2:a1:a4:2f:1d:c8:95:
         c0:d4:3d:5b:6d:9a:ac:22:bd:f3:4a:89:a5:cb:39:6a:22:e1:
         e8:d0:3e:8c:27:36:dd:b6:7e:a9:b1:97:fb:db:d7:f6:80:25:
         22:35:68:40:b6:39:77:ed:cc:47:49:e1:16:b8:50:5a:9c:cc:
         c8:de:61:07:29:bb:7b:3e:5e:ff:d6:c0:24:c0:6c:0f:18:bc:
         c3:83:1d:60:d3:df:63:e5:44:a9:2b:3b:fa:b5:86:e3:de:55:
         54:45:d4:2d:45:59:f3:2b:4a:8a:f2:f9:b8:15:fd:0d:ba:51:
         1e:55:16:ab:29:d6:9c:95:e1:a3:c6:18:7e:b4:9d:9a:4f:87:
         c3:fb:14:1f:6f:ab:94:cc:48:15:00:da:30:6e:9e:2f:60:47:
         f4:ae:17:c2:87:b2:5a:59:cc:76:aa:8a:e5:0c:35:96:7d:8e:
         7e:ce:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:27 2025 by rpki-client