Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
File:                     4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json)
Hash identifier:          eAxYS9V81NNEg1mTCOKPZtkSP6qoYRjMrvnG1+8pnJY=
Subject key identifier:   5D:02:70:9B:10:53:17:D1:79:1C:62:BA:6B:5E:8D:CA:00:FE:8A:12
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Certificate issuer:       /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial:       15D19BB3457B8D8CA6DBFBDAC61F552D98768596
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
Manifest number:          01AB
Signing time:             Fri 31 Jan 2025 07:50:43 +0000
Manifest this update:     Fri 31 Jan 2025 07:45:43 +0000
Manifest next update:     Mon 03 Feb 2025 13:34:43 +0000
Files and hashes:         1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=)
                          2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: IjDU6VchKiVRt/VpnNfkp1NDPemNIu86cnCMdMAMgr8=)
                          3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=)
                          4: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=)
                          5: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: CAf3r6rGoUvQKr/FlCaeGmP3goa2dwKVoX3Rjj+EXM8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d1:9b:b3:45:7b:8d:8c:a6:db:fb:da:c6:1f:55:2d:98:76:85:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
        Validity
            Not Before: Jan 31 07:45:43 2025 GMT
            Not After : Feb  3 13:34:43 2025 GMT
        Subject: CN=5D02709B105317D1791C62BA6B5E8DCA00FE8A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:38:3a:64:1d:66:10:af:71:7c:a7:5f:75:
                    10:2b:53:c7:d9:38:a8:7e:92:cb:47:4a:4e:6f:af:
                    a0:87:75:65:28:d9:a4:4c:3f:37:d1:32:3c:6f:20:
                    dd:49:d4:85:53:6e:ab:8c:a9:4d:5b:42:39:62:9c:
                    01:b5:81:55:a3:ac:13:34:cd:fd:13:ae:18:4f:71:
                    a3:f8:f0:39:a7:5c:43:05:66:00:17:28:85:1d:0d:
                    42:79:b9:27:40:85:8b:52:f5:1b:ec:cf:d6:50:a7:
                    4c:2b:45:cf:5d:1e:3a:43:39:ae:e8:de:79:a0:02:
                    41:9b:6c:99:d5:44:45:a2:2f:c3:0b:9d:0a:f9:ba:
                    16:c7:88:60:cb:54:2a:57:3b:2d:26:a1:af:93:0a:
                    2a:bb:d9:84:44:9c:6d:3e:00:fc:67:ef:37:ea:7a:
                    ab:4f:db:a5:94:97:6f:8d:ec:04:66:03:11:eb:1a:
                    e4:34:34:e2:50:03:a0:c7:9a:7d:69:04:54:bb:e0:
                    d8:50:79:08:9b:8f:58:66:07:bc:82:49:46:50:cc:
                    85:32:6f:87:26:c8:f1:ef:c7:95:76:3c:09:73:08:
                    c7:69:46:48:0b:54:70:98:58:60:b5:f5:d0:95:aa:
                    aa:83:1b:b2:a6:cc:f9:7b:36:b1:7b:5b:fa:2f:d5:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:02:70:9B:10:53:17:D1:79:1C:62:BA:6B:5E:8D:CA:00:FE:8A:12
            X509v3 Authority Key Identifier:
                keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:96:42:b6:c8:c1:ca:56:ec:a2:8e:90:f5:8d:a6:a7:9b:
         1a:5c:6c:55:b6:be:29:71:6d:53:a9:07:2a:80:05:d9:36:00:
         88:7d:4b:b6:5f:1c:2a:af:ee:e1:cd:8a:ee:99:58:4e:51:e6:
         18:e4:50:74:19:f8:65:5e:a0:ab:c0:da:1e:fd:6c:f9:85:d8:
         c6:95:18:23:6c:af:ff:e6:27:6d:5e:86:52:1b:27:6f:7c:f4:
         70:8b:de:48:5b:b2:a3:05:ac:4d:1c:4b:9d:6b:75:de:e7:7e:
         ce:7c:8c:06:07:80:c3:20:5c:19:00:45:88:18:f3:9d:08:c9:
         56:6e:b6:fd:6e:12:63:ee:c6:60:b7:62:8b:81:e0:a9:27:1c:
         9e:97:0d:8d:68:57:02:71:13:25:33:cd:a2:3d:06:38:ae:62:
         02:8e:7e:56:7d:4a:1d:08:c4:b3:b1:17:79:8c:97:f1:19:ba:
         92:5b:d5:a2:8b:30:d0:1d:11:15:ea:51:02:2c:3b:a2:22:da:
         9e:4f:df:0f:0a:0d:33:56:5e:4a:f2:78:65:ac:78:8b:76:e4:
         ac:23:bd:1c:73:05:9e:d7:79:76:b2:9d:1f:cd:b8:dd:9e:5b:
         49:7f:2b:73:65:63:7c:33:dd:76:24:95:58:26:ae:bf:12:60:
         d5:b8:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:48 2025 by rpki-client