Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft
File:                     477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json)
Hash identifier:          B1iXu/WP8qIqOHN3RfHTxaP22quynItTc7/w3JywDHg=
Subject key identifier:   94:BB:8D:FE:04:3A:25:33:DF:0F:01:89:52:A5:64:74:5D:3E:03:B6
Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05
Certificate issuer:       /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05
Certificate serial:       01ACCE72119197DD37764EAECF6A19896C0DFD75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft
Manifest number:          032A
Signing time:             Fri 31 Jan 2025 08:21:18 +0000
Manifest this update:     Fri 31 Jan 2025 08:16:18 +0000
Manifest next update:     Mon 03 Feb 2025 10:10:18 +0000
Files and hashes:         1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: DH7QV88PTQiGqyLH8/L+pQ6VL1/sKXRG19c3SfASYDI=)
                          2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: IW8bQszHsJQaspCBHwRuV25Qt9b0hSoRJR3AAA3IqeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:ce:72:11:91:97:dd:37:76:4e:ae:cf:6a:19:89:6c:0d:fd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05
        Validity
            Not Before: Jan 31 08:16:18 2025 GMT
            Not After : Feb  3 10:10:18 2025 GMT
        Subject: CN=94BB8DFE043A2533DF0F018952A564745D3E03B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:e3:13:2f:2a:38:7d:4f:2e:d5:2b:e8:a9:
                    ab:f0:c4:97:e4:47:48:ce:e7:82:ab:06:0c:3e:5a:
                    7b:90:46:9e:01:b3:d4:9a:d7:15:68:60:59:5b:55:
                    f5:63:9b:ab:4f:8d:c4:f8:20:83:a0:e2:9f:03:3f:
                    94:13:db:f0:6d:2b:45:1d:53:cc:08:3b:72:7a:ba:
                    38:c8:4d:c5:1b:c8:91:a7:40:e2:74:15:01:48:56:
                    5c:91:0f:70:a9:f9:ee:35:91:d7:22:5a:25:66:9d:
                    c3:7a:8e:5f:83:a2:ae:ad:09:55:32:fe:ba:e4:0d:
                    dc:41:35:f1:c8:5d:0e:b2:82:fe:23:0f:c7:d8:47:
                    12:ed:a1:dc:f9:c8:cf:05:f5:29:0a:ec:98:f4:60:
                    ea:e4:dd:1e:35:78:9a:b1:d9:58:c8:ee:6b:33:ad:
                    df:7b:4d:10:80:db:b0:3e:10:92:c1:f8:57:28:4f:
                    44:9b:d0:60:f9:d8:4a:50:b7:cc:9f:f2:4e:69:67:
                    f8:c0:d6:c6:ef:96:f4:ef:66:fe:e1:ea:e7:77:ce:
                    ee:77:d9:75:f5:9e:b2:73:fa:33:87:4e:dc:ad:55:
                    fe:d6:1d:6d:5c:38:ea:2b:d5:64:c9:37:ac:ba:53:
                    a6:2e:00:be:be:0c:a8:95:01:67:f0:25:b3:89:09:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BB:8D:FE:04:3A:25:33:DF:0F:01:89:52:A5:64:74:5D:3E:03:B6
            X509v3 Authority Key Identifier:
                keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:3b:a3:c7:7e:ba:00:14:97:af:1c:4e:1b:e4:15:5c:64:
         04:33:7c:40:94:49:2c:fb:30:2a:f3:71:92:16:ff:37:98:76:
         55:fc:05:9b:cd:21:64:8e:8f:be:9c:4c:7e:4c:99:10:4d:d3:
         3e:90:ed:12:59:6e:c2:d5:33:54:65:a4:3b:b4:85:6f:5a:06:
         a5:6d:d6:a4:ac:9c:f0:0d:f1:b1:68:74:00:a1:3b:ee:06:76:
         9d:1c:b6:88:8c:45:75:b8:fb:c9:54:f9:d4:3b:fa:f4:f8:8c:
         d0:b9:5d:42:24:cc:87:91:45:ef:e5:b7:5a:1a:40:5d:4f:85:
         58:3f:51:94:8f:66:f9:20:91:be:64:a7:03:07:22:89:6d:2c:
         3b:38:04:e6:9b:26:23:2b:3e:3d:8d:47:42:14:4e:fd:d8:77:
         fe:4b:7e:b1:fa:57:82:4c:95:45:fe:69:9c:2b:f9:d4:2b:95:
         d7:55:ae:77:ba:df:50:b9:df:7a:dc:4b:9a:ae:fe:a1:30:a7:
         05:db:66:63:2f:40:86:e2:77:18:4a:26:ee:8d:64:c2:29:e2:
         e8:03:c7:b2:ce:0f:e3:cb:3d:27:02:3a:87:ef:d3:2a:df:f1:
         73:fe:9c:51:90:b5:60:17:5b:54:c7:d6:e5:2f:7a:fc:53:f6:
         38:32:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:28 2025 by rpki-client