Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
File:                     4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json)
Hash identifier:          xIazqsEhadWuIM5xHLH8Yugxx9EMP+mBj93fAvC3zAo=
Subject key identifier:   90:DC:AA:F5:F4:60:EE:1F:33:57:EE:51:AC:3C:08:91:8E:F9:82:48
Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
Certificate issuer:       /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Certificate serial:       1B58BC5720DDF861683DA493F38D97C39F81B56D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
Manifest number:          0163
Signing time:             Thu 30 Jan 2025 17:01:32 +0000
Manifest this update:     Thu 30 Jan 2025 16:56:32 +0000
Manifest next update:     Sun 02 Feb 2025 18:41:32 +0000
Files and hashes:         1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: h87GIrTJMQyGb0m1sPwlgli09SuNOJCczFxB7rjFa/w=)
                          2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: ho+g/a4N2DXZpmKq1NAHM43m4J15MuAyj9wRpaujWss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:bc:57:20:dd:f8:61:68:3d:a4:93:f3:8d:97:c3:9f:81:b5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
        Validity
            Not Before: Jan 30 16:56:32 2025 GMT
            Not After : Feb  2 18:41:32 2025 GMT
        Subject: CN=90DCAAF5F460EE1F3357EE51AC3C08918EF98248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:52:54:d9:a1:8c:7e:aa:9b:89:d4:10:79:
                    58:84:b6:bc:ef:f9:58:57:e6:28:be:8e:85:8e:72:
                    e2:ea:ec:c7:1a:2c:78:2e:bd:fa:87:36:0e:a9:2c:
                    5a:80:65:ab:ba:00:c9:d2:ca:37:b0:26:1a:0b:16:
                    ea:34:e5:96:02:c0:88:d4:01:3f:bf:3b:fb:c9:be:
                    2a:51:a3:40:dd:da:4a:67:02:5f:14:a2:52:58:3a:
                    ed:dc:3e:47:28:42:2f:df:6f:cc:b4:bb:d8:6a:7c:
                    e6:96:02:8e:0e:67:b8:f7:a8:74:24:74:8f:af:cc:
                    95:73:e2:c9:30:24:88:03:3e:05:b9:2e:fd:47:bd:
                    0b:b6:dd:76:12:7c:99:44:6c:6a:3d:6c:94:19:44:
                    cc:bb:f1:b8:0b:60:1a:87:a8:38:32:a5:6b:0a:a7:
                    14:2e:d3:9d:5b:31:1c:eb:6b:48:8e:f6:90:a6:f4:
                    46:d6:fa:f9:7c:95:90:37:b8:c8:80:bc:65:b3:08:
                    80:4f:37:0c:84:7a:1c:b2:22:63:2b:b9:52:a9:5a:
                    2b:af:e3:66:f1:03:d3:39:44:15:57:8c:00:b8:a5:
                    b0:d6:35:c9:86:a6:74:dc:dd:c4:29:79:df:ec:06:
                    97:d5:1b:a1:b2:72:a9:85:9e:e1:38:b5:8b:22:de:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:AA:F5:F4:60:EE:1F:33:57:EE:51:AC:3C:08:91:8E:F9:82:48
            X509v3 Authority Key Identifier:
                keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:81:7b:cf:6c:4a:7f:fb:01:02:e3:27:88:dd:33:4f:cd:3e:
         66:60:6e:c4:ec:03:48:cf:1f:3c:d7:23:79:5b:44:25:68:ce:
         15:39:4d:a2:89:fb:3a:16:24:3c:ce:33:08:c8:8d:5a:74:2f:
         34:f8:f9:f3:e4:c4:5c:6d:65:40:e7:0d:91:e4:38:16:a4:83:
         29:07:d2:ec:12:28:dd:2a:66:ac:68:82:77:81:14:61:c6:a7:
         8e:cc:c9:41:e6:e0:d9:16:41:36:b8:ef:cf:ad:b9:d6:9d:81:
         1a:d7:bc:4f:68:51:b0:94:7e:55:78:19:43:8c:e5:89:e6:73:
         c8:52:82:dc:81:95:c2:e2:32:d4:1b:34:ad:f4:2d:c7:5c:cc:
         d2:41:1e:8d:5d:87:e7:f3:63:b7:b4:cf:fa:e1:86:26:84:85:
         78:54:5d:45:b1:14:1c:27:a9:32:c8:b9:c7:f2:22:c0:d4:0d:
         bd:c2:aa:02:15:48:59:f0:52:7e:6c:c3:25:dd:97:99:3b:51:
         82:1b:37:7d:eb:48:cd:87:4a:35:ea:9c:2d:e2:c4:25:ee:a8:
         f9:3e:26:f3:4e:42:c9:14:bd:24:1c:fd:23:91:45:52:10:c6:
         05:a9:f3:ce:26:42:4d:6e:82:d5:e5:38:15:8c:79:bc:70:ec:
         e6:08:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:03 2025 by rpki-client