Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
File:                     CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json)
Hash identifier:          XJx+LO3otB/o6ALYr6iBOnQceF7LzKH6eMETFgQFgEM=
Subject key identifier:   C2:3E:06:D4:29:F4:4B:D7:67:6E:1D:6A:83:F3:47:45:EC:B8:E7:86
Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
Certificate issuer:       /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Certificate serial:       169110531C3B2F4D9006744A4F30748937D28216
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
Manifest number:          010C
Signing time:             Thu 30 Jan 2025 08:01:57 +0000
Manifest this update:     Thu 30 Jan 2025 07:56:57 +0000
Manifest next update:     Sun 02 Feb 2025 11:50:57 +0000
Files and hashes:         1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: OWaYDg1cDH9a+akHuxTt6wYPqaxaynY90OG7HIU4OWI=)
                          2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: n0MU5Tts6gnb6lIZSQvsj3iZf88SKiO9fAOO2CddE5E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:10:53:1c:3b:2f:4d:90:06:74:4a:4f:30:74:89:37:d2:82:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
        Validity
            Not Before: Jan 30 07:56:57 2025 GMT
            Not After : Feb  2 11:50:57 2025 GMT
        Subject: CN=C23E06D429F44BD7676E1D6A83F34745ECB8E786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:ee:0b:2d:d9:be:c8:ca:12:34:86:4d:5c:
                    56:5d:6f:a9:08:c2:3a:24:ce:11:3c:b0:27:a3:76:
                    6c:ff:a7:14:e8:16:05:69:82:bc:13:9a:2c:63:d4:
                    55:a7:b6:d9:7d:55:02:6d:ed:c2:a4:6f:a1:ed:88:
                    51:86:3d:4a:c7:36:96:a0:a6:c3:4d:6d:3e:03:65:
                    b6:92:07:c6:8b:59:6c:96:f7:d3:1c:b5:d5:a9:42:
                    c3:a5:9b:06:12:62:7d:dc:b6:09:96:6e:88:a8:d1:
                    ae:e1:2e:9c:67:16:97:53:fb:59:cf:00:45:51:c2:
                    44:cd:2a:71:b8:58:7f:4d:51:91:7e:a6:c0:94:6d:
                    27:5d:b1:c8:e2:8e:df:fd:bf:df:a6:e2:a0:c1:f3:
                    99:54:22:82:66:a4:41:d0:6f:24:dc:64:95:f4:ae:
                    41:1a:3a:3e:b6:dd:92:ff:8a:a5:fc:7c:58:57:f7:
                    93:92:9e:e8:2e:9b:a2:8d:14:90:11:38:fc:c6:bd:
                    8b:2d:2b:dc:2f:5d:4a:86:5f:ea:6d:9f:ea:38:f4:
                    ca:ff:58:bc:68:96:17:a7:26:a8:33:0a:22:52:f8:
                    10:2e:19:85:38:04:4a:32:5f:d7:bc:42:8f:c3:c7:
                    d7:c3:42:35:e8:9a:ea:0e:db:68:09:0b:a6:80:5c:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:06:D4:29:F4:4B:D7:67:6E:1D:6A:83:F3:47:45:EC:B8:E7:86
            X509v3 Authority Key Identifier:
                keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:56:e0:0c:d3:f3:d7:d3:65:8b:ac:49:46:ec:d7:7e:71:b6:
         76:03:ee:04:ae:0d:e1:df:a1:79:0d:e7:6f:a2:91:73:30:59:
         bc:32:74:df:fd:96:08:f6:74:63:68:8c:46:67:20:65:97:1b:
         1c:08:2b:c1:76:3d:10:f0:2d:58:9a:b3:f6:30:e0:01:ef:c1:
         d3:cf:8a:2a:da:d0:02:52:0c:74:3b:18:bd:ef:8a:04:10:6b:
         ff:dd:ed:1f:2b:f6:a9:3f:88:57:dc:10:d6:c9:05:84:19:26:
         96:d8:df:fa:1d:d4:76:ca:2b:72:fc:1d:9e:15:4f:25:1f:cf:
         34:f9:0d:0f:33:c2:e5:6e:91:14:26:a0:28:47:7b:fa:d7:62:
         6a:13:81:6e:d1:00:f4:85:28:ba:42:6f:cc:fd:23:4c:40:b9:
         ef:21:20:97:1c:5d:c6:29:ea:b7:9f:b2:c7:aa:c1:c7:4f:78:
         e1:75:49:95:48:8e:00:f1:de:40:19:7b:ab:51:39:b5:3f:5f:
         a7:d5:60:9e:bf:2d:e2:00:ee:7e:1f:0f:1a:c9:64:ce:da:c0:
         e0:37:20:b2:ba:37:9a:4d:00:30:20:fd:20:f6:e7:57:00:65:
         06:8b:8d:c6:d7:e2:42:99:23:52:a9:83:8d:4a:ba:5d:6b:28:
         e2:33:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:50 2025 by rpki-client