Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
File:                     83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json)
Hash identifier:          xuflUsqK2NyEi3vtDBxbvYG9VYwYFgON+7Si9OlnTTI=
Subject key identifier:   F5:8E:F9:FA:1B:C7:76:DF:ED:8F:29:BC:65:CB:CC:B0:DB:B9:B6:1A
Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
Certificate issuer:       /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Certificate serial:       2911A26C689727277855FCAAF4D7CB004455C085
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
Manifest number:          CE
Signing time:             Fri 31 Jan 2025 04:41:08 +0000
Manifest this update:     Fri 31 Jan 2025 04:36:08 +0000
Manifest next update:     Mon 03 Feb 2025 15:38:08 +0000
Files and hashes:         1: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: x3kzy45IgxrrujHFNfyJkcO6iFJc1nyBAES1E3zvgTw=)
                          2: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: VOjEzV3Shtj9aEqL1g0fZRiOAg4XpoQhCSTBlsBEdq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:11:a2:6c:68:97:27:27:78:55:fc:aa:f4:d7:cb:00:44:55:c0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
        Validity
            Not Before: Jan 31 04:36:08 2025 GMT
            Not After : Feb  3 15:38:08 2025 GMT
        Subject: CN=F58EF9FA1BC776DFED8F29BC65CBCCB0DBB9B61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:4c:fb:d4:84:cc:71:ba:1b:39:41:aa:3c:
                    53:bf:04:0b:4e:de:db:85:c9:46:87:4d:e6:0d:23:
                    df:ed:75:91:4c:f2:f0:e7:67:e3:6d:27:4c:fc:c6:
                    fe:8e:ea:dc:d2:6a:6e:84:6c:5f:cc:17:a6:38:a1:
                    09:64:db:8e:1c:34:79:b1:10:90:46:df:3f:04:f5:
                    cc:80:fe:d3:5b:df:38:a7:3a:16:55:e6:a4:27:67:
                    d8:b8:6c:8c:dc:21:ad:f9:90:b6:c9:4c:ba:db:4a:
                    17:33:59:c0:e7:bf:23:a2:c1:a7:12:00:cc:ca:bd:
                    37:3b:9d:b1:30:cd:e6:2d:f0:1a:01:da:51:d0:7b:
                    79:35:3c:51:cf:7e:a8:08:af:ec:05:44:1b:81:65:
                    b9:cd:1d:57:15:9f:b2:c9:39:3c:e8:9d:a9:0f:b4:
                    62:22:89:b2:84:54:e0:83:5c:15:ab:0b:d5:37:55:
                    c9:db:79:7a:d0:b2:da:db:f4:eb:c9:4a:9a:e9:d4:
                    13:71:16:79:b7:34:b6:df:32:3a:be:ee:69:d5:18:
                    12:c8:0b:ed:10:ac:c5:d5:76:bd:13:b1:ee:34:a8:
                    83:21:bb:ae:cb:8e:66:73:e9:ff:56:65:a8:14:3d:
                    5e:48:a3:52:6a:e7:42:19:24:9b:e0:29:af:8e:99:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8E:F9:FA:1B:C7:76:DF:ED:8F:29:BC:65:CB:CC:B0:DB:B9:B6:1A
            X509v3 Authority Key Identifier:
                keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:03:9a:a6:9d:85:54:af:a9:76:62:3c:68:e5:52:d1:fb:b0:
         9e:82:07:29:ee:41:6d:e6:ac:e7:79:67:62:13:66:20:a0:d0:
         47:26:1c:fb:6a:68:3c:ee:d3:09:26:ea:59:c7:6f:d2:ab:03:
         b1:31:7e:d2:ab:bd:8f:f5:01:9f:1d:91:ca:34:be:e5:62:83:
         20:8f:11:b6:a2:60:72:03:89:57:ba:a7:0f:c4:93:46:27:b8:
         55:89:90:4f:08:b8:3e:59:5b:d3:35:9d:fd:71:f8:cc:5d:06:
         f2:37:92:8f:4f:58:c6:d5:13:32:af:1f:f1:30:6d:97:1a:82:
         46:ff:32:cc:92:94:36:a9:38:87:9a:bc:ca:60:93:8e:77:28:
         a4:dc:ae:95:ea:3b:3b:90:dc:df:4a:18:83:3c:23:0a:7a:33:
         2a:7c:3d:44:a4:66:93:41:54:60:86:a3:d1:49:f4:f8:25:4f:
         d0:70:64:9f:84:e0:03:0e:b1:09:21:07:f5:75:1a:ed:c4:93:
         d7:e0:7b:4b:34:ac:e2:17:57:ff:9e:7c:ac:18:18:bb:d7:ca:
         44:5b:7a:84:93:75:08:8f:91:de:31:9e:10:df:cc:8c:6e:cb:
         7f:20:aa:8c:1e:da:6d:b1:5c:82:73:a6:da:80:f7:07:9c:4a:
         b2:8a:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:30 2025 by rpki-client