Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
File:                     889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json)
Hash identifier:          BwOjN45303Qfde5Ac10oG1dijrdjiRjmYBmYqB+vtFo=
Subject key identifier:   AE:92:BF:76:A8:2A:3D:87:D3:A7:93:3D:0B:DF:A0:30:08:B4:DB:DF
Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7
Certificate issuer:       /CN=889933E416F356762F7F72858168C9C8A2E241C7
Certificate serial:       32CDDB10D8B455B7E2B83366D1DCAADA6FB3109C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
Manifest number:          017E
Signing time:             Thu 30 Jan 2025 02:20:33 +0000
Manifest this update:     Thu 30 Jan 2025 02:15:33 +0000
Manifest next update:     Sun 02 Feb 2025 04:48:33 +0000
Files and hashes:         1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=)
                          2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=)
                          3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: 0WG+1zVnPYHzredct4ykybcNb5aRIb0I+n/d8DAAO34=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:db:10:d8:b4:55:b7:e2:b8:33:66:d1:dc:aa:da:6f:b3:10:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7
        Validity
            Not Before: Jan 30 02:15:33 2025 GMT
            Not After : Feb  2 04:48:33 2025 GMT
        Subject: CN=AE92BF76A82A3D87D3A7933D0BDFA03008B4DBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:f4:c4:9f:2f:c7:e4:4c:1e:55:21:95:d4:
                    76:9d:0e:6f:a0:c1:77:22:0e:c6:3a:d8:59:19:41:
                    7c:49:09:da:bf:62:d5:51:18:cd:75:1a:89:4c:51:
                    f7:e4:4d:44:50:d5:06:57:6d:4b:21:59:fc:d8:d2:
                    59:ad:34:5a:4b:c1:e4:24:8f:9f:62:d6:b2:7c:85:
                    5a:73:ee:05:d6:5e:cc:87:9d:99:12:81:85:e5:9c:
                    c0:38:aa:4a:d1:88:9a:31:ea:57:6a:90:ce:9a:c9:
                    91:8c:08:5d:60:b6:b1:ee:94:4f:14:d5:51:4d:c0:
                    f1:66:ae:73:8a:e6:88:b3:e5:e4:04:a0:25:3e:48:
                    7d:c8:4d:2c:88:2c:14:fd:19:9f:1a:57:b0:b4:6d:
                    c0:9e:b7:cd:ea:cd:17:73:18:8e:9c:4d:62:83:a0:
                    5c:5a:18:83:10:eb:b9:89:bd:ac:b6:91:55:ab:83:
                    87:c9:35:8f:b8:7d:3a:dc:e5:98:6b:97:a9:58:df:
                    18:1c:24:1e:7d:d0:83:28:b4:2a:cf:b5:a2:0b:41:
                    23:43:4b:6f:71:7e:0c:ed:89:ee:c2:b1:b6:4a:20:
                    3e:d3:20:30:e9:07:e5:fa:ca:d8:33:17:37:a8:c0:
                    30:af:48:78:5f:f4:a5:01:96:9e:df:3b:f9:cc:56:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:BF:76:A8:2A:3D:87:D3:A7:93:3D:0B:DF:A0:30:08:B4:DB:DF
            X509v3 Authority Key Identifier:
                keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:3a:cd:b3:5f:0b:88:02:9d:c2:b2:c3:00:d2:64:75:64:
         69:19:64:ac:00:dd:36:84:a9:18:32:32:ad:41:c6:63:29:f1:
         54:74:58:38:af:a0:20:07:3b:48:4b:51:0a:a9:ca:bc:1a:cd:
         2d:e9:e8:ec:33:43:96:b0:c1:c6:86:4a:9d:21:b3:af:c6:5f:
         da:66:53:c3:4b:e0:a5:48:29:a3:f0:3f:50:3c:7a:d4:27:33:
         04:76:35:ed:ed:76:31:69:04:39:ee:41:90:bc:66:d0:0a:98:
         2a:f1:d6:1c:58:d6:1e:8f:8b:9c:fc:51:37:dd:31:63:93:1f:
         ce:49:fb:ab:d8:ff:e4:02:09:4c:2e:8e:95:01:29:c7:7c:69:
         de:67:50:10:db:9b:41:c4:3a:32:28:26:ce:1b:1d:8f:d4:47:
         f0:17:7e:7e:a3:6a:94:9d:86:b0:a4:44:1b:81:30:f4:6d:52:
         df:4e:19:c2:96:ec:bb:97:1d:e2:c9:9f:52:81:1e:22:48:61:
         48:80:ff:ad:a8:c3:34:67:af:43:14:47:01:db:5f:bb:1b:d4:
         30:87:52:56:8f:f5:86:3b:2c:13:bd:d2:c9:9b:be:4e:0f:d1:
         de:5a:c0:b2:c9:27:90:36:96:c8:ec:e9:ce:b3:71:8b:d1:9b:
         2c:90:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:38 2025 by rpki-client