Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
File:                     D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json)
Hash identifier:          YrODaRSIgEEcf6zvmyBysKnEtv3LAkXr3UnPH1ZPVZ4=
Subject key identifier:   DD:6E:85:72:3F:32:10:4C:C0:E5:E4:90:6E:AE:3F:3A:25:04:A8:A9
Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Certificate issuer:       /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Certificate serial:       28558B4DE274BE31E0D6BEDF421563147F49622A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
Manifest number:          01BA
Signing time:             Thu 30 Jan 2025 08:31:43 +0000
Manifest this update:     Thu 30 Jan 2025 08:26:43 +0000
Manifest next update:     Sun 02 Feb 2025 11:14:43 +0000
Files and hashes:         1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=)
                          2: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: lVeF8FnkQ1gBQZ8zRzw0dYrwoUqPIzUDd4xw9UVQRxU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:55:8b:4d:e2:74:be:31:e0:d6:be:df:42:15:63:14:7f:49:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
        Validity
            Not Before: Jan 30 08:26:43 2025 GMT
            Not After : Feb  2 11:14:43 2025 GMT
        Subject: CN=DD6E85723F32104CC0E5E4906EAE3F3A2504A8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:cb:b2:1e:2e:be:fb:2a:12:db:ae:3e:f6:
                    fd:4d:d5:b4:c2:a3:50:ff:f4:2e:17:0e:6b:2e:e3:
                    5d:41:e9:51:77:1d:8a:34:9f:2c:7c:b8:d6:8e:03:
                    3b:3f:74:5e:db:4b:b3:6d:62:77:af:2c:e5:d3:67:
                    28:fd:5a:a6:9b:64:06:73:0a:e9:f1:2d:f5:71:b9:
                    4f:5c:a1:9a:5a:99:9c:e8:66:26:b6:c9:ba:de:e4:
                    39:20:b9:d6:ee:8c:3d:f4:c9:a4:4b:cd:f9:88:c4:
                    20:31:16:a6:4a:68:7b:e7:eb:6c:69:8e:ea:47:7d:
                    cc:9f:53:53:93:c9:b8:ab:16:f5:fb:24:45:1b:ba:
                    07:ed:3f:73:af:15:8c:d4:7e:b9:a6:53:97:b9:fd:
                    8c:e9:c4:bf:05:01:34:02:44:33:0e:ad:d9:4f:29:
                    92:ef:99:fb:71:31:b7:e3:5f:48:cf:11:d8:9c:17:
                    1b:44:ee:09:9d:53:d2:8c:a1:4a:52:49:3c:d3:65:
                    b2:8c:0a:d1:de:35:40:a5:4f:20:b0:b1:17:df:82:
                    0d:ce:03:c2:31:00:f2:d4:b9:fe:2f:22:d7:5f:89:
                    94:1c:1c:fb:6e:32:c1:64:18:a7:95:f1:8e:00:4f:
                    bd:75:9b:3b:71:0f:b7:c1:27:08:cd:dc:94:e1:6a:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:85:72:3F:32:10:4C:C0:E5:E4:90:6E:AE:3F:3A:25:04:A8:A9
            X509v3 Authority Key Identifier:
                keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:e8:58:36:b6:a5:ba:e7:49:05:26:1b:eb:cf:13:a7:fd:
         26:35:b1:e3:6a:b7:54:c1:cc:19:00:8d:ea:83:d0:37:19:fa:
         fd:de:56:ad:aa:34:9a:66:ab:bb:87:6a:7b:32:97:dc:4c:d5:
         7c:8a:ea:54:96:7b:75:30:ad:b5:0a:43:54:d2:d1:5f:c6:2d:
         1f:42:70:a5:c4:ed:97:8a:c7:71:c4:e0:6d:f2:41:fb:53:9f:
         8d:d9:da:da:8e:cf:1e:ed:35:9a:7d:0a:e2:bb:c3:3b:7b:43:
         5b:b3:9c:eb:7c:b3:80:e6:d1:d9:d1:0e:b7:e5:a8:c9:a9:33:
         68:23:69:db:af:cf:64:33:4a:4f:77:4d:a7:f2:70:6d:83:20:
         4a:91:f0:fc:22:54:10:fd:80:77:d4:9b:cb:82:e1:41:09:a5:
         7d:60:9b:b6:fb:43:72:3c:6e:e7:8c:c8:9b:3b:96:68:40:be:
         de:cf:4e:6e:51:e2:6c:db:14:a4:e3:6f:96:06:9b:7f:a5:fe:
         c7:fb:f1:04:21:8c:7d:59:80:4a:bb:0d:3d:57:c3:a4:fb:f2:
         41:6c:57:15:b6:3a:4a:42:e6:48:2f:81:bc:f7:c9:09:78:3a:
         1e:ac:98:67:02:96:8e:5b:f6:92:9a:06:87:d0:4b:67:67:2c:
         a4:9a:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:42 2025 by rpki-client