Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File:                     229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier:          SQf94y6dCBWtRXo0fFp/Vq7HRzO2MC0nqTQph5qMksw=
Subject key identifier:   2F:99:89:91:3D:0C:BB:30:55:4B:E9:9E:11:C4:1C:05:0B:8B:E3:ED
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       3D5C039EA81317C5C44CCBF5CADB07C781FD8A7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number:          04AF
Signing time:             Thu 30 Jan 2025 04:51:43 +0000
Manifest this update:     Thu 30 Jan 2025 04:46:43 +0000
Manifest next update:     Sun 02 Feb 2025 16:46:43 +0000
Files and hashes:         1: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: ePbw5LzYJS0AiBZQHTO6Q5MCZ/VnP7T0OLUDTcaYM4M=)
                          2: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: /sxwdh5+OtxXAGTYR7aj++1jHVBESLDkQaA5vts3J0c=)
                          3: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: txvhHjZQd4OZTYtpVnuV9pyOVezURJio/Glm+Xp4MtI=)
                          4: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: EyFmNpVev4JvWr+WYttkKg/oGZR4UtQfn7nLk3N2X3Q=)
                          5: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: XCuxF6ruUczOzJvMHii/FDEIeSq2U8u1TMO0ZyKrZco=)
                          6: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: wpINU5BWyJoTYFHNOwNTC5jvpvPocCu1HASyDr8iPyk=)
                          7: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: U2g/V+5DkmPDBw3eY9QLKy/ZMSI+q2dEB25C6uu5Yuc=)
                          8: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: TmlDYYFpoUzNq8ZR6YwWBT4mIzmdRv82c4JZfaIsztM=)
                          9: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: ta4+QDMsgit89wEmm8ey/12QjqBluuNGxk0RPu1WcS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5c:03:9e:a8:13:17:c5:c4:4c:cb:f5:ca:db:07:c7:81:fd:8a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Jan 30 04:46:43 2025 GMT
            Not After : Feb  2 16:46:43 2025 GMT
        Subject: CN=2F9989913D0CBB30554BE99E11C41C050B8BE3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:89:d7:35:2b:1d:a1:e9:50:e4:a0:10:aa:
                    8c:4b:2d:37:fe:46:6c:e1:2e:c0:60:8b:8d:7e:17:
                    02:5d:13:db:b9:d7:86:25:b8:d7:d7:e1:95:b3:71:
                    68:87:dc:d5:41:34:29:5b:80:75:5f:7b:a9:22:30:
                    cc:a9:1f:c2:b6:4c:2a:20:ad:99:5f:b1:eb:2e:37:
                    a3:75:38:c6:9f:dd:ed:f6:1b:d4:22:34:41:ac:06:
                    8a:80:36:9d:31:3a:c5:c0:7f:2c:c6:67:f5:81:46:
                    a4:ec:29:5d:9d:37:43:b0:07:1c:9c:d1:c7:9b:67:
                    df:12:a2:ec:6e:de:59:38:11:37:b1:3b:0b:47:73:
                    a9:99:2b:72:cf:57:3a:18:29:c0:fe:8f:70:eb:a9:
                    a2:84:24:a7:56:f9:48:04:af:ce:7a:fb:45:20:44:
                    a0:dd:9c:d4:a4:eb:eb:e1:bb:2b:95:50:ef:ec:0d:
                    dc:d2:64:63:4d:a3:ff:ef:de:38:4d:9e:31:f3:1f:
                    93:ea:19:b0:f3:95:0f:78:57:1d:d5:4e:44:9b:ed:
                    77:ce:7a:cc:78:04:44:5e:6a:e8:01:1c:28:b9:a7:
                    db:0f:0e:43:c5:48:20:0f:b0:1b:18:dc:23:53:f4:
                    33:2a:b6:08:5f:3e:03:1d:3a:5d:77:3f:e7:5e:bc:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:99:89:91:3D:0C:BB:30:55:4B:E9:9E:11:C4:1C:05:0B:8B:E3:ED
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:93:fe:0f:30:38:d0:91:c4:86:f6:3d:a2:3b:fe:90:b2:
         1d:37:02:65:27:1b:38:c1:6b:b1:ea:3e:3f:c5:09:9b:95:0d:
         5d:b4:fc:df:9c:d7:75:64:a5:fb:d1:cf:f0:23:b8:4a:b5:6a:
         6c:c0:44:9c:5c:66:24:f3:76:cd:e9:f7:95:51:e7:d1:0f:1d:
         76:5e:b7:26:b7:ed:7e:5c:2c:d8:62:79:fa:0d:61:cf:27:4b:
         30:dd:25:23:68:2a:24:ed:32:e6:b3:9d:83:9f:0d:18:79:e1:
         82:34:ff:e3:6a:94:5c:48:ca:d9:84:f2:f9:a6:9b:85:bc:08:
         f2:09:0b:f5:cd:50:53:26:85:e2:5f:71:e7:9c:31:da:bb:2d:
         02:55:73:69:b1:af:80:27:25:34:ca:c3:7b:75:ea:87:c8:8f:
         9e:cc:90:46:1b:68:85:24:b8:62:03:a9:46:30:39:39:d9:4d:
         50:e7:8a:cf:5b:55:27:cf:98:bd:70:2e:66:b2:2a:8a:56:1e:
         43:19:fb:02:cc:2e:83:25:a3:a8:5b:36:9d:eb:e0:e4:80:6e:
         7d:24:c5:1b:39:21:af:0d:69:dc:ed:ea:59:5e:be:b6:1e:43:
         1b:33:98:9f:96:07:be:72:1f:ee:74:23:c7:9d:11:90:a8:88:
         59:02:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:18 2025 by rpki-client