Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
File:                     28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json)
Hash identifier:          9koHdiZuzIAs33boMKn43I64vZLF2p2VzlMISRcQykQ=
Subject key identifier:   5E:57:FA:51:5C:57:5F:5D:67:CC:F6:0A:A9:B6:8F:2B:D2:C5:D5:E0
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Certificate issuer:       /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial:       689AC2D2A63F8766DAF94B918BA11718C34F9BEE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
Manifest number:          018E
Signing time:             Wed 29 Jan 2025 15:12:00 +0000
Manifest this update:     Wed 29 Jan 2025 15:07:00 +0000
Manifest next update:     Sat 01 Feb 2025 20:53:00 +0000
Files and hashes:         1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: mXKx1qyhUS0hiMTdfJSmdK4GWzSoXqNranTINNxgEF4=)
                          2: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: WAM8LzXIJx5krdWc3hy1Oy3kMn09ylHcJLe1/WPk6IA=)
                          3: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ=)
                          4: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:c2:d2:a6:3f:87:66:da:f9:4b:91:8b:a1:17:18:c3:4f:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
        Validity
            Not Before: Jan 29 15:07:00 2025 GMT
            Not After : Feb  1 20:53:00 2025 GMT
        Subject: CN=5E57FA515C575F5D67CCF60AA9B68F2BD2C5D5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:e2:6e:cd:69:f8:7a:39:52:9b:8a:02:97:
                    48:d7:8a:f3:9b:fc:98:ab:0e:27:ac:ff:c3:27:2e:
                    f4:5e:d2:af:21:7e:a4:5d:9e:1f:75:d4:38:12:c2:
                    c4:12:b6:ff:1c:9a:59:14:4b:ea:63:8c:32:00:f5:
                    dd:97:7e:68:a3:cb:52:2a:51:a5:f0:1c:7e:cf:93:
                    f5:eb:9b:46:bd:6f:a2:97:6d:35:37:83:28:34:c6:
                    5b:08:e2:ac:f7:2f:82:96:1a:4d:10:4d:0d:b8:23:
                    ec:50:64:0e:37:fc:06:b3:e7:f7:5c:55:6f:fc:11:
                    0c:42:1a:ef:d7:b9:50:ea:c5:9c:95:fa:a4:e0:7f:
                    2e:96:e0:00:50:98:bb:f0:1c:fe:86:a1:d8:f5:28:
                    9b:c4:1e:fa:85:87:ef:ea:bb:ec:57:d6:58:04:2a:
                    55:fd:4a:e8:07:da:2e:80:4a:71:ce:1b:c4:33:f8:
                    f5:9d:90:89:cd:d9:bc:0c:4b:18:0c:e1:df:6a:a7:
                    57:b5:dd:d5:0a:3d:59:ff:20:fa:0d:f9:20:be:3c:
                    e1:48:0c:bc:12:88:94:b3:8a:52:6c:21:fe:ff:ab:
                    70:0b:b7:b4:7d:de:1a:8e:8e:62:36:3f:93:78:f6:
                    96:0b:f8:88:a7:5a:3b:97:51:7a:97:3f:d3:0a:30:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:57:FA:51:5C:57:5F:5D:67:CC:F6:0A:A9:B6:8F:2B:D2:C5:D5:E0
            X509v3 Authority Key Identifier:
                keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:80:0f:6c:cd:36:69:80:b5:7a:5e:de:32:5e:61:98:78:ad:
         ac:87:eb:f9:79:7b:a4:48:40:71:04:d9:d8:b0:f6:01:71:ec:
         f7:af:86:c1:7c:6d:b0:dd:34:a0:ea:b4:8c:04:73:9f:da:8c:
         75:11:c3:5b:e6:78:82:6e:fb:4c:80:3e:e1:f4:62:a5:7f:e8:
         63:47:48:01:4c:e3:e8:11:32:4d:7d:23:c9:31:54:1a:30:48:
         e1:3f:ce:63:a4:db:82:21:94:54:d3:3c:77:b9:a6:c1:c9:b1:
         14:24:47:28:3e:f1:18:e6:16:c0:48:34:cb:70:ef:cb:eb:bb:
         82:ed:a4:93:ba:27:8f:83:b1:2f:68:60:d4:9c:e2:07:89:31:
         44:82:49:61:d4:d0:fd:e7:5f:e9:32:c9:df:55:82:ec:0d:d8:
         17:85:6a:6f:36:69:e2:5d:86:06:3e:97:dd:82:5a:78:9a:24:
         47:57:16:0f:3b:57:08:e3:01:2f:7e:8f:0b:2b:51:32:9f:9e:
         f0:86:7f:d4:6d:38:94:39:12:6a:ec:40:96:70:aa:1e:81:93:
         b7:ef:7e:35:47:1c:86:0e:aa:0c:c8:6c:48:69:81:64:c8:4e:
         72:42:a7:1f:85:6b:89:ec:83:67:02:f2:ea:ec:d9:01:f4:dd:
         1b:74:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:34 2025 by rpki-client