Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
File:                     49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json)
Hash identifier:          3eEI288TN6SHWd7WLy3ocZIGnyCwn31lsZJCggiVCtQ=
Subject key identifier:   5D:2E:6C:AE:E6:E3:E6:F0:47:76:45:14:1D:2D:FA:19:64:7B:5B:76
Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61
Certificate issuer:       /CN=49011B0D97FF49210FC27249FDD23F7172FD5561
Certificate serial:       607FCEE3DF306FF67BB2C2E330B6ECE25EBF18A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
Manifest number:          C4
Signing time:             Fri 31 Jan 2025 06:42:14 +0000
Manifest this update:     Fri 31 Jan 2025 06:37:14 +0000
Manifest next update:     Mon 03 Feb 2025 15:36:14 +0000
Files and hashes:         1: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c=)
                          2: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: TKP790AAwR8hCxpxY6XlUTk0SSo07cpQq/iHTU/7HUU=)
                          3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=)
                          4: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: eQwZ0HpEaRU5AO86abCZFFKH0HF0iLl7VUx7NHne24s=)
                          5: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:ce:e3:df:30:6f:f6:7b:b2:c2:e3:30:b6:ec:e2:5e:bf:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561
        Validity
            Not Before: Jan 31 06:37:14 2025 GMT
            Not After : Feb  3 15:36:14 2025 GMT
        Subject: CN=5D2E6CAEE6E3E6F0477645141D2DFA19647B5B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:45:a5:b1:b3:af:f0:45:9f:bb:eb:e9:78:
                    7e:cc:db:c6:b2:18:ae:84:e8:6e:e9:fa:38:32:52:
                    1b:29:64:ff:12:28:6f:a7:7e:ae:1a:ad:94:7d:99:
                    03:7e:85:7d:f3:91:bf:0e:01:17:63:bc:86:ba:82:
                    fe:ff:de:34:61:fe:1a:78:b6:cd:c7:94:0d:24:6a:
                    42:c6:d6:ba:64:37:de:14:06:5d:b6:28:ac:4f:8a:
                    bb:90:be:d2:79:ea:06:13:cd:bf:d3:d1:80:d7:86:
                    90:f1:62:dc:4a:4e:7c:e4:90:d4:ea:54:a4:4d:ed:
                    b0:77:10:dc:47:1d:29:9f:8a:99:b2:7d:e3:f6:83:
                    f4:ee:42:75:65:48:ec:c9:0c:6e:c1:92:b0:1a:90:
                    94:0a:f6:01:e6:ed:f3:27:5f:68:09:4e:fa:fb:fb:
                    0a:b1:87:74:b9:bd:8f:d8:b1:e5:06:78:8b:2b:ff:
                    86:04:d6:31:62:c9:ab:f3:d2:d9:6a:72:2f:44:3a:
                    12:ce:f0:00:d4:d2:0d:89:4b:31:0e:d8:09:73:ba:
                    5b:3b:67:e3:1e:33:73:e6:ab:e1:54:23:d9:a3:6e:
                    6a:86:26:4c:b8:cb:c2:a1:d7:61:d1:d2:fe:12:d3:
                    2b:5e:f5:29:25:85:f2:a0:4c:3f:44:3d:88:ae:99:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2E:6C:AE:E6:E3:E6:F0:47:76:45:14:1D:2D:FA:19:64:7B:5B:76
            X509v3 Authority Key Identifier:
                keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0a:60:4c:dd:c9:f9:1f:28:c3:f8:5e:1e:44:60:fe:9e:9d:
         5d:6f:0b:cf:8a:dc:c3:14:15:cc:9e:12:44:12:23:37:e3:86:
         02:a0:58:f7:6a:a8:02:c2:ad:bf:16:0a:bb:9b:68:ce:cd:de:
         95:15:bf:4a:a3:4e:5c:a5:7f:fc:de:ab:db:f5:3b:9f:ab:dc:
         8d:83:b6:06:92:50:42:91:f1:42:a4:5e:10:a9:c8:65:6d:79:
         42:89:14:c4:42:0c:fd:b1:ca:0a:cd:53:12:95:07:7a:c7:2f:
         3d:1a:58:5f:4d:ce:38:62:88:5c:c8:9d:37:a9:eb:77:cb:9b:
         70:3b:b7:84:09:d0:8c:06:4e:f0:92:f1:5e:d6:5b:10:44:57:
         85:76:6c:8b:07:2b:87:b3:88:f0:8a:81:56:9f:d1:b3:72:96:
         53:0b:47:68:5e:ff:bd:82:e9:e7:f0:39:d1:cf:06:61:39:41:
         a8:cd:59:cd:59:0c:b0:cc:5c:68:10:f0:87:1d:1d:29:69:83:
         d9:94:b7:6e:76:89:e0:bb:30:85:4d:f5:66:c2:b1:1f:01:3a:
         1b:fe:b4:37:e2:7b:2a:ea:15:c3:47:a1:7a:50:4d:a6:e8:e8:
         fe:06:6a:7c:60:2a:fd:3a:f3:88:67:eb:63:d1:f5:c8:cf:5a:
         47:4c:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:38 2025 by rpki-client