Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
File:                     0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json)
Hash identifier:          3N7a/UHQz5RNMy1UjRqmqjh98NKUdmGj9eRurXu/lcE=
Subject key identifier:   F3:45:3C:BB:7E:19:AD:A5:AD:81:1C:B5:C1:A4:E1:7B:C3:67:51:21
Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E
Certificate issuer:       /CN=0D14F274908EB737876B8079A7129AF9936DB91E
Certificate serial:       03BE13AF5083FC72EEECB0E6F996E6344952F80D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
Manifest number:          0F
Signing time:             Fri 31 Jan 2025 07:02:08 +0000
Manifest this update:     Fri 31 Jan 2025 06:57:08 +0000
Manifest next update:     Mon 03 Feb 2025 08:24:08 +0000
Files and hashes:         1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=)
                          2: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: 7Kv+CtfBkVI0nVEHORlZHaUVh+bPa/4qg3+0BYhVWPI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:13:af:50:83:fc:72:ee:ec:b0:e6:f9:96:e6:34:49:52:f8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E
        Validity
            Not Before: Jan 31 06:57:08 2025 GMT
            Not After : Feb  3 08:24:08 2025 GMT
        Subject: CN=F3453CBB7E19ADA5AD811CB5C1A4E17BC3675121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:68:9e:ac:1e:62:c1:f2:83:1b:5f:aa:55:
                    3d:89:f6:8f:3d:88:a9:c8:f3:42:ca:79:c8:de:9c:
                    96:79:4a:51:49:b0:9b:a1:66:cd:86:eb:a3:8a:c8:
                    f7:97:40:5c:9c:63:2a:5c:7c:d4:95:64:bd:2f:b9:
                    eb:4f:6a:fa:eb:34:a8:da:d4:07:a7:a1:d2:2c:96:
                    29:ea:5e:2b:41:92:d9:8f:bc:3f:c7:a5:d6:ab:1c:
                    0e:f9:cc:5d:44:3f:a0:3b:03:f4:eb:3a:35:ac:cf:
                    13:e9:2e:30:7f:38:b2:ec:1b:88:bf:30:c9:40:82:
                    19:51:55:8f:bb:0f:e4:f6:90:51:87:bb:72:5d:a2:
                    df:14:4b:cf:8d:c9:bf:ac:bf:fb:7d:f5:e4:ac:a6:
                    c9:75:2d:78:bb:f3:42:23:83:cd:58:24:e0:7b:70:
                    67:90:04:3d:17:90:cf:96:ef:84:3e:05:0a:dc:ec:
                    39:0c:cb:50:2f:da:11:1b:eb:3b:b0:8f:fc:ab:27:
                    7b:81:c7:58:72:26:34:2a:f1:47:8e:f4:b9:67:0a:
                    3f:de:2e:79:70:ad:97:a3:c7:27:04:b9:fd:85:c7:
                    d9:11:0a:ed:76:d0:18:03:d2:66:5b:91:cd:e6:6a:
                    e4:d6:aa:30:0a:07:36:9a:da:d5:e3:c6:b1:2d:11:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:3C:BB:7E:19:AD:A5:AD:81:1C:B5:C1:A4:E1:7B:C3:67:51:21
            X509v3 Authority Key Identifier:
                keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:d9:0c:1d:b6:fe:9f:f0:9f:6e:fa:34:2a:6a:aa:6d:76:
         54:bb:b4:4b:51:37:10:20:db:fe:64:54:c2:08:89:e3:ac:36:
         3d:d0:ec:c8:1f:7a:eb:d9:19:06:e7:9c:3e:ac:66:2a:b8:7b:
         56:15:d0:d6:17:83:5e:74:93:5b:21:c4:b5:02:49:a6:ba:27:
         21:17:1c:0f:9a:a2:b2:cc:b6:32:09:2d:60:c8:b1:40:aa:7e:
         f6:f3:08:03:1f:ab:94:72:f9:6c:25:e7:32:85:4e:cd:b5:6c:
         f4:61:a3:29:17:51:98:8f:a1:37:4d:86:41:b1:0d:e4:88:94:
         bc:5b:54:da:62:70:56:95:d3:08:38:cf:1e:36:b7:46:f0:53:
         fe:a2:03:76:4c:55:12:d9:90:50:c2:04:82:a8:f8:ef:e6:6f:
         79:b2:94:31:74:30:59:90:a7:b4:98:36:36:86:72:43:f6:7c:
         28:40:0c:79:e0:13:55:55:cf:ef:a2:69:e1:b5:cf:d9:09:d4:
         96:2b:a1:b8:a2:9b:c0:c5:bf:27:47:76:58:83:5c:11:bb:39:
         01:49:8f:e8:c4:a9:ff:58:ff:9f:7c:50:90:5a:a5:0f:62:b6:
         cd:32:24:51:df:75:88:a3:33:2e:cc:c8:05:9f:13:75:77:00:
         fb:28:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:43 2025 by rpki-client