Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft
File:                     6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json)
Hash identifier:          g9i1tDhpg1UKe1We8kKgMnockKWNBJl2rt1pehfkvLA=
Subject key identifier:   C9:85:07:0F:20:D8:2F:5C:C4:EF:43:32:AC:34:E3:C2:4F:76:C1:2F
Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E
Certificate issuer:       /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
Certificate serial:       79E0B3D72EAFA466E706472D998F39AA422A3749
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft
Manifest number:          015B
Signing time:             Thu 30 Jan 2025 00:21:22 +0000
Manifest this update:     Thu 30 Jan 2025 00:16:21 +0000
Manifest next update:     Sun 02 Feb 2025 02:09:21 +0000
Files and hashes:         1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o=)
                          2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: LAd5CQzjElFqfB2ZCm4wbrze1/e+lrzYYkHbv504nc8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e0:b3:d7:2e:af:a4:66:e7:06:47:2d:99:8f:39:aa:42:2a:37:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
        Validity
            Not Before: Jan 30 00:16:21 2025 GMT
            Not After : Feb  2 02:09:21 2025 GMT
        Subject: CN=C985070F20D82F5CC4EF4332AC34E3C24F76C12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:02:d1:2a:81:54:99:94:03:58:ca:e4:e9:
                    bc:35:26:a7:48:b7:47:dd:b9:c1:8b:2e:20:4e:4b:
                    9f:c2:f9:fb:6e:a1:e6:fd:42:3d:fd:3f:5b:1c:f7:
                    a4:dd:29:55:4c:df:19:4e:e4:a8:73:b3:e1:20:70:
                    c9:94:de:97:a3:af:bc:78:c8:fe:ff:a8:a1:35:51:
                    51:d1:b5:08:dd:3b:1a:e9:f6:4a:ad:d4:06:43:69:
                    7b:9b:15:ee:29:70:30:f3:a6:55:15:70:ed:70:1c:
                    42:e1:ef:d2:f2:06:a2:52:9a:47:1c:00:69:5a:cb:
                    74:11:08:a2:1a:56:aa:3e:79:22:0e:cc:23:d3:04:
                    71:7b:0a:de:1e:18:f1:04:7d:2b:3f:eb:fa:46:6e:
                    07:05:c9:01:a9:9e:73:03:c6:b1:ab:b7:09:5c:1f:
                    b1:50:6b:fe:53:37:02:04:30:0e:27:63:80:dc:98:
                    2c:e9:f2:7e:33:9c:e4:19:67:e2:f7:14:eb:f7:cb:
                    f9:c0:12:1c:3b:6c:49:46:81:58:67:69:1e:6a:40:
                    b1:b5:ae:8b:a1:b0:f1:2f:d3:a0:0e:b1:4d:44:6c:
                    dc:32:84:ac:74:94:d2:9b:96:9a:df:24:e5:39:48:
                    9b:e8:2a:b3:df:29:f0:57:e2:cd:68:35:a8:80:94:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:07:0F:20:D8:2F:5C:C4:EF:43:32:AC:34:E3:C2:4F:76:C1:2F
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:af:0a:a7:99:30:c6:8d:e9:4f:39:ff:db:3a:69:47:52:
         67:79:f3:30:ca:67:2e:65:61:cb:fd:e2:30:32:b3:2e:c7:17:
         86:88:a8:df:25:22:47:d8:4b:bc:1c:64:57:11:e8:29:38:32:
         02:c2:2e:68:64:dc:7e:81:5e:53:bc:cb:fb:a2:c2:95:8a:6d:
         93:29:a4:c8:f7:ed:f2:51:74:5f:c5:a6:ca:07:d3:6a:57:52:
         d2:f4:ee:dd:f1:ad:34:11:27:e4:d3:51:ee:ac:23:e7:19:7d:
         8c:28:79:e7:2b:77:2e:58:a1:40:d6:83:e4:9e:b4:d1:cb:ab:
         50:a8:e5:ce:e5:89:be:c4:14:58:93:1c:78:96:7d:84:b5:5c:
         10:43:e5:6e:96:af:11:9a:35:34:1a:94:35:fc:b5:13:4c:b1:
         36:da:e2:cd:ea:c1:b3:bb:da:c5:76:4e:c2:47:aa:02:14:f3:
         0a:64:c6:51:ed:75:fd:a8:f0:25:3c:de:f0:27:63:92:e7:d8:
         3a:1f:98:eb:14:19:44:86:d1:5c:a4:db:75:a1:51:cb:26:3f:
         04:3f:91:60:68:a9:de:3d:28:6c:94:e8:3c:e4:36:42:2d:8a:
         4b:15:0c:b6:2c:be:76:33:2f:11:7d:53:0c:e5:c7:d4:07:5e:
         7b:5a:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:18 2025 by rpki-client