Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
File:                     08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json)
Hash identifier:          /TKCJpO/X8sY5Oc8LBAQhxpr9UxSfyZg43PcQfo6Ys4=
Subject key identifier:   64:C4:12:64:8E:D7:BC:93:F5:CF:E6:0E:40:D1:02:93:3E:8E:09:57
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Certificate issuer:       /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial:       3D6099CD9013011E1293C63714C9851A8CEB3EB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
Manifest number:          015C
Signing time:             Wed 29 Jan 2025 23:40:36 +0000
Manifest this update:     Wed 29 Jan 2025 23:35:36 +0000
Manifest next update:     Sun 02 Feb 2025 08:46:36 +0000
Files and hashes:         1: 3130332e34332e32352e302f32342d3234203d3e20313336313331.roa (hash: /cjOVMtl39T1r4Zhat66w+QiUbly2nRjcBjJ9q2wwfo=)
                          2: 3130332e34332e32342e302f32342d3234203d3e20313530343633.roa (hash: Wk0pZX2JRd8piWUsdNxkVMQatUeuKvw42A3uwKTN6pA=)
                          3: 3130332e34332e32342e302f32332d3233203d3e20313530343633.roa (hash: cGZRpaHvKb5zHLJT3xGbPkrwkvFng/qUjW6eYCEMMGM=)
                          4: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: tBSE/XDCA8iDlp1eZwldnAAY8HvRSIeP3mBDBzeb3aI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:99:cd:90:13:01:1e:12:93:c6:37:14:c9:85:1a:8c:eb:3e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
        Validity
            Not Before: Jan 29 23:35:36 2025 GMT
            Not After : Feb  2 08:46:36 2025 GMT
        Subject: CN=64C412648ED7BC93F5CFE60E40D102933E8E0957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:c2:7c:15:bf:08:d9:29:e5:7f:29:73:81:
                    51:56:87:26:92:c6:75:70:1a:1c:a2:23:01:8f:a2:
                    5d:f6:9d:df:84:a6:56:38:8a:a5:75:8b:9f:6f:9d:
                    cc:c3:1f:29:c8:6e:cd:83:f3:fa:4e:e6:81:65:87:
                    b3:ce:ef:5f:b4:b8:ec:af:1b:de:ed:d5:ba:e7:a3:
                    ec:a6:72:67:4c:35:f4:ee:c9:df:12:7f:6c:f7:3d:
                    91:6d:9c:1b:a3:6b:d9:98:ac:98:91:2f:ff:9c:13:
                    0f:e6:e2:82:ab:38:1e:79:10:ca:47:81:61:ef:6c:
                    f0:11:b0:fa:db:5c:ea:db:09:10:e8:9b:d3:07:48:
                    6c:aa:c1:31:1a:18:b5:c3:0b:53:ae:24:0b:e7:65:
                    c3:63:86:40:0f:80:79:1f:31:05:26:c9:38:f2:6d:
                    e9:a8:a1:a0:db:be:37:87:e3:f2:a4:4b:88:7f:fa:
                    d2:4b:e5:96:5d:a1:52:ad:73:b7:cb:8a:83:cd:d2:
                    a1:ea:5f:ec:ef:5f:11:88:22:09:50:55:12:a6:45:
                    e3:e4:7f:a0:73:9e:2e:47:62:5f:8b:eb:82:cc:ac:
                    7a:1a:4b:1f:a6:ae:fb:a4:6e:f9:e6:24:fa:a6:32:
                    44:8f:41:ae:03:80:6f:be:46:ca:75:4b:29:80:b4:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:12:64:8E:D7:BC:93:F5:CF:E6:0E:40:D1:02:93:3E:8E:09:57
            X509v3 Authority Key Identifier:
                keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:bf:b1:83:97:92:29:e0:a1:fd:89:ca:8b:dd:eb:8e:1c:
         7c:c6:84:28:89:cc:44:01:9c:04:1a:cc:04:92:20:07:8d:b0:
         2e:40:56:f4:ef:d8:04:55:78:92:c7:5d:bb:20:33:f0:5a:69:
         3f:e6:6e:ad:a1:ce:b4:ca:8f:4a:12:6f:5e:b3:47:af:4a:91:
         01:44:56:cb:9c:94:e4:0d:d9:3e:13:de:15:4f:cb:2c:0b:ad:
         4b:5c:90:41:7f:df:a8:a4:a0:44:5e:94:23:4b:75:52:16:1c:
         b8:0a:b5:da:63:78:74:c5:e9:59:cf:34:da:24:fb:0c:64:7b:
         96:29:93:70:f2:ca:cb:25:6c:62:c7:00:16:4d:64:86:93:ee:
         de:67:5a:97:11:11:08:55:ef:3f:b8:fc:64:e5:07:b6:21:0f:
         75:61:27:18:d6:dc:ff:43:e0:d7:15:0f:8b:9b:78:06:29:50:
         53:ea:02:17:48:3d:a0:ef:fb:5f:c8:fe:b9:55:bf:bb:c3:05:
         64:9a:cc:0f:0f:d1:e0:68:91:2a:2e:97:fa:3f:43:fe:89:b1:
         63:9b:cb:67:53:e5:d3:eb:e2:4c:8a:4c:90:25:d8:d6:82:87:
         85:08:c4:e8:a7:c8:b0:04:82:8d:6d:a6:c7:d8:4e:f4:68:51:
         ef:c2:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:15 2025 by rpki-client