Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          0dorq+eA0/L/JRB3B/S1iim6x+1wK59RksSxZaUNCj4=
Subject key identifier:   C3:E0:FC:6A:3C:54:6A:14:67:A8:B3:6A:2E:4F:00:4F:D7:0D:C2:72
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       2DDDB5FF7A8E57730C3E026A7A9425859217C777
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          04A2
Signing time:             Fri 31 Jan 2025 18:30:01 +0000
Manifest this update:     Fri 31 Jan 2025 18:25:01 +0000
Manifest next update:     Mon 03 Feb 2025 23:52:01 +0000
Files and hashes:         1: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: bQw0KbKgcC/O9nn9tyQb0fzy23YAWxhKf2AeJS9XGSk=)
                          2: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: m+q7ZgpD2GbDgHvxK3Mi9rcFamM0AOK41baaZkFJd+o=)
                          3: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: loxHv0+F3ZLNQEYmkghwWbkz+YGFFT2QGW5V6emi7YY=)
                          4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: nL0LSsh/K4F6n/0vBenQ8E/fDc1hwgkktfBtKNqqfSs=)
                          5: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: Rlel+43pEirvrfeffHgQ7cuDwzepsYOgj+qpnAyZmJg=)
                          6: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: U6ziSuUpUkVdqXRSHe0CewbD/X71rI71q8SILZolHDo=)
                          7: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: x6HUjSxF1Hesr3n3pxIOWyMuhd/gV3tPQ4S5VvjGCt4=)
                          8: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: poWV1SmxZOV82NJAx11/DVCuVnOVWtTUoFxKct51ClQ=)
                          9: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: 9/RRwI5l/NtYziLvL1Tovl6lPdp6toGo7gvjHA/JNLU=)
                          10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: jiBUWbPw0O2a3brcntkLSXcufEsvlRQsB7AoiBmO/Ec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dd:b5:ff:7a:8e:57:73:0c:3e:02:6a:7a:94:25:85:92:17:c7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jan 31 18:25:01 2025 GMT
            Not After : Feb  3 23:52:01 2025 GMT
        Subject: CN=C3E0FC6A3C546A1467A8B36A2E4F004FD70DC272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:79:cf:ec:b3:e5:a1:59:73:83:67:b6:03:
                    d6:41:a5:d7:d8:ba:41:e8:e0:43:02:f4:af:d5:0d:
                    4f:a8:c3:7a:32:4a:49:c7:3d:55:c0:5b:ef:d3:de:
                    79:14:d3:d1:42:eb:95:f2:b3:5a:d5:e8:f7:2b:aa:
                    95:ab:85:30:46:26:5e:4a:48:f9:21:3c:f5:ab:c7:
                    ce:41:05:13:58:e7:91:87:d9:43:83:6a:89:66:b2:
                    39:2a:d0:12:88:14:9c:51:3d:6b:78:8e:ae:d0:6c:
                    70:03:a1:3f:17:ca:e3:2b:bc:f3:74:01:55:57:4c:
                    2f:3c:37:52:f1:3f:a1:f0:6c:83:f5:6c:80:9d:1d:
                    34:80:17:0c:f6:8d:8b:08:a7:02:63:7e:8b:14:a6:
                    da:94:80:42:8d:24:93:66:52:ab:8d:3a:7a:d0:7b:
                    8b:55:0f:b2:d4:ed:04:c6:b1:d5:92:12:81:73:69:
                    60:d2:3f:4d:36:b3:af:36:fd:3c:2f:3c:d8:86:b3:
                    1e:23:de:6a:54:ec:e3:79:09:8a:ca:16:21:8d:83:
                    b9:e7:16:bc:e8:87:fe:4b:f9:6c:6e:8f:59:95:28:
                    9d:05:13:55:95:87:59:cc:06:89:42:f0:42:44:ed:
                    48:90:eb:d2:be:43:18:d4:03:26:2f:51:35:43:63:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:FC:6A:3C:54:6A:14:67:A8:B3:6A:2E:4F:00:4F:D7:0D:C2:72
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:fa:48:00:ac:56:41:6a:c0:69:59:f3:90:c1:c1:83:5c:
         70:fc:d5:74:8d:4c:67:3d:67:d1:c0:cf:68:25:ee:9f:9f:b0:
         a4:dd:bc:00:b6:37:74:d1:91:a8:58:1c:0c:93:2f:ce:cb:d5:
         22:8c:85:ce:48:58:3d:07:06:28:4f:9f:9d:49:f9:c9:b6:c3:
         5b:9b:8b:c5:f4:d5:0b:88:73:5f:dc:9c:ed:30:33:17:43:5e:
         60:05:28:bd:d6:b1:68:ed:49:0f:13:37:21:d1:b2:f8:13:89:
         7e:19:32:02:49:11:78:98:12:37:f3:e1:91:72:0b:91:14:3b:
         47:3d:f6:47:2a:34:45:37:76:85:2a:12:1e:e1:35:73:03:f2:
         cc:53:6d:ec:77:cd:13:a9:f6:52:d9:3e:06:8a:25:9d:c0:49:
         f3:7e:02:1c:97:3e:38:4c:14:a8:3f:63:36:00:c2:11:ed:3b:
         33:a9:8d:8b:14:7c:89:1f:5c:b3:f4:7d:d8:97:3a:73:0e:93:
         e3:75:0c:b4:36:d6:97:40:bb:1c:62:04:15:52:fc:f5:84:8b:
         38:59:b8:37:d4:56:78:ab:cd:57:36:cc:b8:2f:a7:fa:92:08:
         cc:d0:87:4f:5b:ad:84:2e:34:6a:49:0a:c9:97:7a:20:2c:92:
         d9:b9:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:47 2025 by rpki-client