Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft
File:                     D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json)
Hash identifier:          Bi534YAUeMugZhU7c8Te10qInidTr43VerpwuZH1zkc=
Subject key identifier:   14:2D:A3:B0:1F:A1:75:3A:7D:AA:08:36:4B:B6:90:FB:CD:6D:16:7C
Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19
Certificate issuer:       /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19
Certificate serial:       29C34DB6DC5BC10C1D10851D8C861B47B5992AB9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft
Manifest number:          76
Signing time:             Thu 30 Jan 2025 09:02:11 +0000
Manifest this update:     Thu 30 Jan 2025 08:57:11 +0000
Manifest next update:     Sun 02 Feb 2025 12:02:11 +0000
Files and hashes:         1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 4jkdQCcw/oC60Uqzp6OYMYN8DQx59gTLPYhgvW+GgPw=)
                          2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: 7MDnihsOxzeb9xY9B8VQ/h0sqdu8RRfyo92E8BcAU7A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c3:4d:b6:dc:5b:c1:0c:1d:10:85:1d:8c:86:1b:47:b5:99:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19
        Validity
            Not Before: Jan 30 08:57:11 2025 GMT
            Not After : Feb  2 12:02:11 2025 GMT
        Subject: CN=142DA3B01FA1753A7DAA08364BB690FBCD6D167C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:41:05:bd:cf:53:3d:b2:90:b9:54:c1:b7:
                    70:c3:3d:20:cf:23:78:a2:2a:fd:38:7c:a5:bc:57:
                    35:e1:49:c4:3c:ad:90:eb:c2:4d:b1:c4:36:0b:5b:
                    7a:01:c0:96:44:31:23:82:f3:ee:19:5a:15:c8:37:
                    d9:cd:92:3e:a0:e4:13:37:53:03:86:b2:cb:dc:20:
                    c1:c3:bf:87:bc:02:b2:7b:32:5a:43:a1:ee:3c:f8:
                    d4:c9:53:0b:d0:e0:97:0e:4d:e6:1b:33:b8:74:dc:
                    96:b8:09:97:01:87:eb:fd:64:23:cc:49:cc:39:46:
                    4f:fa:db:b0:ba:71:75:de:e9:d5:f5:15:32:46:5c:
                    21:41:6e:86:a0:3f:4f:dd:3d:54:87:51:d4:9c:9a:
                    17:47:6f:79:cd:6b:94:4a:c9:79:93:c4:58:4f:2f:
                    45:54:7d:4d:f7:4e:04:6c:91:7f:db:ec:01:e5:ca:
                    a2:80:6f:f7:c2:7b:a7:b3:d7:c9:a9:d6:ed:4b:da:
                    97:18:69:18:a3:50:de:6a:54:9f:a4:ac:fd:27:a8:
                    32:56:40:02:86:d5:e5:2c:d8:8b:92:27:00:bf:0d:
                    15:1b:0f:63:46:3b:31:bb:7a:cf:6c:a4:ca:4a:40:
                    c0:a2:b4:aa:3a:2d:eb:19:5c:4d:b7:9b:00:49:9b:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:A3:B0:1F:A1:75:3A:7D:AA:08:36:4B:B6:90:FB:CD:6D:16:7C
            X509v3 Authority Key Identifier:
                keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5e:aa:79:1e:d1:90:14:d5:46:80:53:54:68:36:34:45:ba:
         39:b1:ec:04:02:b9:ca:e0:7f:69:a6:ec:e9:92:84:fe:12:1a:
         14:c7:2e:83:20:e4:d0:ca:5d:ce:5b:2b:c8:5c:c6:1d:fd:82:
         11:11:8f:75:3a:f6:5d:cc:c0:11:da:73:36:3f:2c:0d:6b:08:
         f2:47:51:5c:90:fd:68:0f:83:fd:18:07:bf:76:85:d4:3b:e4:
         21:6e:9f:47:eb:78:e2:b7:85:90:8f:d8:ae:f4:6c:15:62:19:
         2a:49:87:fe:c2:80:a2:8c:33:02:29:58:d9:13:73:b5:3b:16:
         78:bb:ce:56:96:d9:95:bb:24:4e:9f:3e:7d:fe:6a:c2:8b:7a:
         76:69:39:71:c1:40:a9:06:10:21:69:af:e5:96:8a:47:a1:60:
         21:75:33:c1:d3:8e:c8:1f:e6:d7:87:f7:4f:b7:c6:00:29:5d:
         96:a0:c9:ad:d6:c1:81:d3:4a:f2:0d:20:8d:62:5d:c5:f2:45:
         04:56:df:b8:44:e5:bb:70:31:e9:93:81:c0:94:8e:68:04:db:
         76:24:61:53:25:7b:13:e0:cc:5c:8c:eb:86:be:41:a9:6f:a7:
         77:4e:af:1c:8b:51:39:44:0f:16:c6:92:f6:1d:1e:2a:2e:a3:
         aa:d8:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:29 2025 by rpki-client