Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
File:                     901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json)
Hash identifier:          Hw8B7u9KG2BGEPbYr2xmo+JmSZjzR8BDQWR98SXRhD8=
Subject key identifier:   BA:45:25:CC:3F:7C:A6:3B:C2:ED:D9:E6:99:E1:3F:DE:B6:DB:EB:E4
Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78
Certificate issuer:       /CN=901FA7FD9132963972C91517CDC7E5EE9077E078
Certificate serial:       6D8039EA06D3287D61E493F37A86F950BA52A64B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
Manifest number:          C9
Signing time:             Fri 31 Jan 2025 16:30:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:25:45 +0000
Manifest next update:     Mon 03 Feb 2025 18:20:45 +0000
Files and hashes:         1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: aET3UaPWTGjFWVugkyuWZ/EqN5P/cW/CgjZgt2JOGA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:80:39:ea:06:d3:28:7d:61:e4:93:f3:7a:86:f9:50:ba:52:a6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078
        Validity
            Not Before: Jan 31 16:25:45 2025 GMT
            Not After : Feb  3 18:20:45 2025 GMT
        Subject: CN=BA4525CC3F7CA63BC2EDD9E699E13FDEB6DBEBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:d2:22:78:fc:c0:b9:74:28:31:69:44:19:
                    f3:28:3c:b4:a8:af:c8:46:c1:a8:54:0c:de:5b:e5:
                    fe:6f:ba:95:10:ae:37:df:51:10:97:2d:91:ab:d3:
                    92:eb:e5:44:2d:be:e6:16:49:84:a5:74:c3:c3:cb:
                    52:a4:49:14:1f:dc:b8:49:df:3c:4d:61:25:5d:a3:
                    c9:f3:88:b9:34:16:9c:5a:cb:f5:78:d9:e5:14:68:
                    ca:9a:f6:40:64:9f:34:e2:b9:ec:ad:19:a7:6c:e1:
                    45:5a:7c:53:eb:0f:07:f5:e7:82:bf:d6:ae:f5:31:
                    4b:aa:6f:91:13:c9:55:93:4c:35:72:b8:8b:27:36:
                    11:95:c9:bd:27:97:0a:c6:87:c2:97:70:2a:0c:99:
                    92:fc:15:d2:7b:04:d1:a4:fe:cd:67:84:0b:7c:dc:
                    74:4d:fa:d3:06:da:86:88:10:c0:65:c4:50:c0:b7:
                    6f:b9:78:95:17:25:18:25:8e:f8:bf:4f:9e:64:33:
                    c5:d4:9d:42:3a:2f:70:ca:fd:81:66:3d:f4:8f:ee:
                    91:8c:01:14:1b:51:47:05:f1:d5:53:51:5f:d0:2f:
                    ee:9c:ea:41:26:d3:1c:29:68:5d:cb:de:b3:9f:d5:
                    06:86:75:02:fc:9c:60:64:6e:63:4c:97:65:e8:08:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:45:25:CC:3F:7C:A6:3B:C2:ED:D9:E6:99:E1:3F:DE:B6:DB:EB:E4
            X509v3 Authority Key Identifier:
                keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:94:5a:28:03:b2:8c:a3:3a:2b:6d:bb:c6:90:a6:8a:70:
         7a:b1:e2:e9:60:b8:1c:f5:cf:d5:d3:3d:9b:67:07:4f:74:2f:
         50:57:be:ec:b5:b2:e0:4d:b9:50:68:95:e0:54:de:b0:8d:2f:
         40:ac:2b:f7:96:57:f5:60:9e:ac:c6:e2:88:82:b9:81:b4:2a:
         05:29:a6:4b:d4:5f:43:05:d5:fb:52:b1:84:16:0d:32:28:1d:
         af:24:e3:db:64:75:d2:01:8b:ab:1d:58:be:dc:21:08:b6:c8:
         e2:3f:63:b4:1a:08:14:4e:ff:6d:fa:40:84:be:07:a5:d0:29:
         14:66:ba:fb:d6:56:f1:b3:11:c2:c3:3f:24:de:38:fb:d4:f8:
         e0:e6:7f:a9:94:d4:43:28:5e:e2:dd:60:95:4a:9a:b0:ce:7d:
         d0:f8:af:5a:3f:00:6d:ad:6f:72:5c:b6:ed:d8:e2:f7:b0:b7:
         aa:fc:5a:87:a0:78:f0:1e:8c:1b:c4:cf:c0:a3:74:78:86:c2:
         da:1c:3b:74:bf:eb:f1:a5:9d:99:c6:33:f2:4f:51:f4:ca:ee:
         55:f2:56:36:49:20:92:81:21:71:10:ff:b3:68:cb:b5:5d:36:
         cd:0c:f3:c8:0c:35:fa:90:38:cc:a0:4a:bd:50:9e:62:3c:06:
         6f:bb:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:35 2025 by rpki-client