Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft
File:                     5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json)
Hash identifier:          aPPTqyz9gcSXqT0fX70VenTfeASWVzH2gTispdCbc8E=
Subject key identifier:   97:4B:25:B6:A8:FE:09:60:36:46:14:FB:06:49:FA:6E:DA:14:F2:42
Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70
Certificate issuer:       /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
Certificate serial:       123DB3840744225BAF0994F110B35201CAA71540
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft
Manifest number:          022A
Signing time:             Thu 30 Jan 2025 01:30:47 +0000
Manifest this update:     Thu 30 Jan 2025 01:25:47 +0000
Manifest next update:     Sun 02 Feb 2025 12:29:47 +0000
Files and hashes:         1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: qCItcg6ed4ASeCJ8K8rqsaZHRYSyWu2f0Yx5H6KJKvk=)
                          2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5P014E1vh45qM6aR+Ldp3g4rfdACGPl5tqqo9VwzVBw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3d:b3:84:07:44:22:5b:af:09:94:f1:10:b3:52:01:ca:a7:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
        Validity
            Not Before: Jan 30 01:25:47 2025 GMT
            Not After : Feb  2 12:29:47 2025 GMT
        Subject: CN=974B25B6A8FE0960364614FB0649FA6EDA14F242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:e6:1f:67:af:9f:8a:ca:d2:8c:78:88:56:
                    91:f6:26:14:23:8c:c4:fb:e4:44:33:b7:d5:d5:a0:
                    5b:71:fd:8e:5e:cc:f7:2f:9e:c6:79:51:1c:c0:5d:
                    ef:2c:b5:8a:36:2f:f1:c7:cd:3a:06:3d:04:8c:9d:
                    ac:e7:ee:13:4b:40:bb:ba:3b:bd:75:45:cd:80:8b:
                    e3:06:17:51:5c:a6:25:bf:f9:53:eb:06:82:21:03:
                    ca:18:e5:7a:46:ad:9c:5f:cb:47:86:fd:6d:f6:ad:
                    c4:06:67:a4:a4:ec:83:c5:4a:d9:9e:d6:cd:b2:03:
                    58:e8:3d:ef:23:1c:32:d7:17:fd:57:2d:8e:69:5a:
                    66:c5:81:b9:1d:75:0e:3c:51:d1:ea:a0:f6:07:83:
                    a9:5c:cf:f5:4e:c0:72:80:6e:c3:60:0b:5e:ad:5e:
                    02:10:00:a4:91:04:c1:f2:cd:ab:d6:8a:68:97:fc:
                    00:c3:80:ce:2e:7b:b4:fc:cd:c9:3c:3e:06:9d:a0:
                    6c:1e:a9:9d:0f:58:40:2b:00:05:f4:32:ea:24:31:
                    7b:f2:0b:1d:3e:4b:82:99:ea:ee:20:47:b9:9e:32:
                    0c:bb:e8:79:38:71:2f:03:ba:f9:ec:34:2b:43:9a:
                    94:69:b2:88:73:35:68:65:7d:6e:48:72:66:55:e0:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:25:B6:A8:FE:09:60:36:46:14:FB:06:49:FA:6E:DA:14:F2:42
            X509v3 Authority Key Identifier:
                keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:84:bd:93:51:72:8a:1b:44:ae:be:f9:f1:8d:b0:eb:3b:c3:
         72:02:44:c7:51:26:de:e8:5b:bf:12:eb:a9:77:00:90:ad:dd:
         1c:ab:4e:b1:f6:8e:fd:e1:d0:90:d1:55:28:d1:58:15:c0:e4:
         89:17:3f:33:f1:f3:7f:69:3a:12:eb:19:ab:31:c8:da:db:62:
         30:dc:83:e5:08:db:47:87:02:3a:d5:26:a9:86:71:21:ec:96:
         72:92:18:81:0d:d4:9a:74:dc:e6:9e:1c:52:27:21:57:42:e5:
         d8:0d:e0:2a:78:a1:92:95:9f:61:45:98:3f:0b:be:7b:8a:28:
         32:3a:33:41:99:7d:7b:9a:6b:44:01:52:02:e0:02:af:19:d9:
         78:90:05:c9:fc:e3:29:0a:b6:1b:35:1f:c7:4b:95:49:42:ce:
         2d:58:7e:0a:65:bd:58:e5:5c:73:df:e5:6c:31:cf:e4:06:ef:
         65:4e:3e:7c:ee:20:17:0c:87:eb:39:5b:1a:d8:57:a4:9c:4e:
         34:85:b2:cc:62:f0:b9:8a:32:1d:54:88:24:65:91:54:e8:0c:
         f5:f0:05:f5:47:79:dd:e2:cf:82:58:f6:98:fc:cd:a9:5a:0e:
         d1:bd:c9:5d:60:0f:fb:ec:d8:18:e8:31:f8:92:f7:79:71:48:
         fa:59:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:47 2025 by rpki-client