Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
File:                     2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json)
Hash identifier:          k3o+SzjhOay3gXOHqTlRulHO/faT6823lqIaIXp74u8=
Subject key identifier:   F2:4B:8D:B3:51:9F:DC:6B:24:92:4A:C8:0C:06:21:37:8D:31:5A:D7
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       7FD169AC4481B118A9AC1CAD27C4D3EC7E77418F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
Manifest number:          0180
Signing time:             Wed 29 Jan 2025 23:22:07 +0000
Manifest this update:     Wed 29 Jan 2025 23:17:07 +0000
Manifest next update:     Sun 02 Feb 2025 06:10:07 +0000
Files and hashes:         1: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=)
                          2: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=)
                          3: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: dH6Am+PTaoZ9mZU+j37n06Fzbs6O7gGQMTpGJ3/lsQ0=)
                          4: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=)
                          5: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=)
                          6: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=)
                          7: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=)
                          8: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=)
                          9: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:69:ac:44:81:b1:18:a9:ac:1c:ad:27:c4:d3:ec:7e:77:41:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Jan 29 23:17:07 2025 GMT
            Not After : Feb  2 06:10:07 2025 GMT
        Subject: CN=F24B8DB3519FDC6B24924AC80C0621378D315AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:96:d1:be:75:99:72:3f:63:2d:c0:47:2e:
                    04:2d:d3:93:98:67:9f:91:a6:94:6a:0c:5c:8f:69:
                    e5:57:40:80:46:62:5a:3e:24:f7:ed:31:1a:e6:4e:
                    75:11:14:88:87:17:b6:74:3e:45:3a:44:0d:0b:be:
                    23:53:85:9f:16:21:26:76:8f:5c:17:7e:28:10:f7:
                    87:3d:ce:ad:d9:2a:41:41:8f:5f:4c:83:95:f5:c6:
                    e4:64:ed:03:f2:a3:f2:a8:d1:ed:02:7e:5f:8a:c4:
                    6a:44:1c:99:c8:85:9b:f2:b7:04:98:64:ff:fe:46:
                    a2:ab:b9:ed:1c:38:c8:35:ee:50:36:4f:1d:f8:b3:
                    15:63:b4:25:e4:3b:a8:a5:dc:e9:df:d1:02:8c:8c:
                    22:e5:53:e2:d8:d7:6b:c0:3c:fc:dc:af:34:43:7c:
                    52:19:fb:5f:25:78:22:35:d8:04:5e:c6:41:32:c8:
                    4b:e8:b1:e6:18:91:1f:1e:63:c7:21:33:b3:a9:d6:
                    76:f7:83:ed:b3:e9:8a:36:a1:76:0a:86:7d:18:2c:
                    16:35:a2:8e:23:bb:7c:c4:26:52:e1:48:28:61:2e:
                    b9:09:8e:72:e7:b5:25:1d:78:c6:91:78:39:e8:61:
                    b9:c8:89:11:89:fd:37:47:6d:71:cd:91:d7:dc:b6:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4B:8D:B3:51:9F:DC:6B:24:92:4A:C8:0C:06:21:37:8D:31:5A:D7
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:8e:90:ef:5c:96:a9:b0:2b:4e:a0:db:4a:02:09:4e:80:
         ea:29:ac:3e:56:f3:31:a8:e9:8d:1f:2a:d6:b9:58:37:b1:d9:
         97:83:34:44:c1:e3:8d:28:6c:8e:a0:d0:7d:98:8b:0b:92:37:
         10:06:23:4a:fa:35:7a:42:77:70:df:a3:2e:91:6f:07:e9:90:
         46:a6:6a:94:8e:4b:20:81:65:c1:87:56:ea:c4:bd:7f:2b:c4:
         94:f7:ea:9c:60:f2:83:ec:ff:44:a8:1f:f1:c2:8c:e1:69:6e:
         35:d3:fb:44:40:0f:ad:15:75:fb:f7:53:bf:b8:04:4b:f4:b7:
         cc:63:1c:e8:c8:1b:54:c2:ea:36:5a:6e:ce:42:94:51:f4:c0:
         cd:5e:f5:53:83:ba:c5:2a:dc:d9:bd:c2:3a:61:ef:a8:1c:88:
         9c:e1:cc:f1:69:25:97:f0:f8:ae:4c:70:6b:52:02:f0:94:9e:
         2e:a1:3d:5a:2a:54:58:58:65:aa:d0:65:eb:79:65:b8:b7:52:
         df:dd:eb:14:fd:45:82:15:fa:13:cb:6a:44:c7:06:96:76:f8:
         01:ca:10:fd:fa:b5:1d:be:04:5b:53:d5:e6:69:0c:bf:96:a1:
         35:64:97:a5:03:98:d0:7b:4b:ac:6d:7b:6e:c7:97:3c:5e:cd:
         3d:b2:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:37 2025 by rpki-client