Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
File:                     82EE517606C76902159E8886F875EF96B0327C72.mft (raw, json)
Hash identifier:          ToHC8bkAay32sBqLIT4Qh3qttewxMlXWJeEuDX/7zbU=
Subject key identifier:   96:76:C9:C9:9D:0C:AF:05:C7:9D:00:56:22:91:5E:21:D1:E9:77:2E
Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72
Certificate issuer:       /CN=82EE517606C76902159E8886F875EF96B0327C72
Certificate serial:       1B9D5BC13C492F608A71D67B7E1E1A4E915387E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
Manifest number:          0411
Signing time:             Fri 31 Jan 2025 06:12:03 +0000
Manifest this update:     Fri 31 Jan 2025 06:07:03 +0000
Manifest next update:     Mon 03 Feb 2025 06:41:03 +0000
Files and hashes:         1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: PvGUACm4ijzIPaxD0+PAB/B/JCQ56MWhw9C11hrAztM=)
                          2: 82EE517606C76902159E8886F875EF96B0327C72.crl (hash: MYVJcCNXptoMk0+2u/jc35Mpy9mkaKni6FfqrwHerdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:5b:c1:3c:49:2f:60:8a:71:d6:7b:7e:1e:1a:4e:91:53:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72
        Validity
            Not Before: Jan 31 06:07:03 2025 GMT
            Not After : Feb  3 06:41:03 2025 GMT
        Subject: CN=9676C9C99D0CAF05C79D005622915E21D1E9772E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:e3:cd:6f:ac:28:d4:79:12:de:76:b5:b3:
                    e3:7f:8d:1b:6c:d1:5d:c0:ae:19:92:72:24:81:62:
                    9f:34:54:8b:7c:30:68:2f:ca:82:c5:27:49:cf:87:
                    c1:27:f4:eb:60:f1:b2:01:23:dc:0b:9a:17:ec:7c:
                    af:e0:dc:3b:b7:27:fa:66:96:4f:b6:6f:97:c0:2a:
                    8a:24:f1:4b:f2:31:48:30:41:58:ba:9c:87:14:32:
                    0d:24:c4:29:5e:46:c0:6d:1c:e7:c6:9a:81:d8:b0:
                    b5:bd:c5:39:0e:50:76:a5:9e:e0:fe:82:0a:aa:20:
                    53:f5:d6:f6:32:63:5d:6d:9b:56:1c:80:f2:03:d7:
                    46:85:e1:45:b2:c7:c4:35:9a:20:f6:51:e6:76:4c:
                    d1:14:5a:ec:f7:45:20:80:06:98:ea:d6:f3:07:0f:
                    b0:c5:58:0a:5f:0a:e3:dd:31:3d:16:b3:87:b4:f6:
                    e7:a7:b9:9d:d4:a6:0a:f8:82:60:9e:2a:f9:2b:cb:
                    e1:bd:4c:bb:bd:30:3a:31:8b:f1:70:1f:29:84:9f:
                    0e:b5:d9:6c:a7:bc:62:cb:3e:ec:9c:84:18:7b:0d:
                    2b:c0:44:07:54:95:71:d7:24:8e:da:6c:3b:9c:af:
                    b5:c5:6b:84:34:c6:d6:70:e2:d7:6e:a1:1b:32:d0:
                    1f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:C9:C9:9D:0C:AF:05:C7:9D:00:56:22:91:5E:21:D1:E9:77:2E
            X509v3 Authority Key Identifier:
                keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:b6:07:3d:65:f6:0f:38:d4:8d:89:05:df:03:d1:10:e1:
         0f:06:10:e8:4b:97:0b:02:cc:66:ea:5e:d2:93:99:ba:04:ea:
         7a:cc:9d:f3:4a:63:88:70:e6:7f:ca:8c:6d:98:7d:bb:e4:4f:
         df:10:9a:0d:41:13:2b:c2:8e:78:e7:01:d3:a5:6c:51:b6:db:
         c2:b6:10:2f:70:00:cc:73:2c:ac:ad:78:65:37:75:a3:9f:07:
         6e:9e:24:24:6f:4d:f6:7e:93:8f:f4:17:00:f8:a5:9e:4f:af:
         7c:36:5d:9b:43:bb:fd:7b:de:91:59:30:72:d0:a1:6f:62:19:
         b0:57:bb:99:6a:f7:6a:8a:dd:06:64:df:ae:da:71:d7:ac:09:
         2d:51:73:c2:bb:cb:3e:76:eb:57:99:d5:f9:b2:ea:84:ab:0d:
         c4:dd:73:d1:47:fd:5f:b4:da:85:06:34:3d:75:f6:ae:b5:ec:
         40:b2:d3:eb:a4:c2:5f:48:fc:90:0b:2b:36:5b:a6:24:70:11:
         f9:c9:7c:b3:ff:89:1c:fa:1f:7c:f7:a5:49:ec:8b:03:e3:01:
         e3:22:3f:9d:c9:dd:ad:53:0b:40:8d:3b:53:78:7f:d8:f8:13:
         4e:2a:f4:7b:ea:4e:d5:64:df:5b:23:1a:d1:82:b4:66:bf:55:
         ac:07:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:08 2025 by rpki-client