Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft
File:                     C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json)
Hash identifier:          7CE/Pl/diMmQ6JtUcmjC6wmmx6O/WUoaeQafWIBtw3M=
Subject key identifier:   1B:12:E5:06:04:42:9D:30:71:3C:EF:ED:76:F1:11:AF:0D:F9:3C:84
Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B
Certificate issuer:       /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
Certificate serial:       4F2C1C44FD12F1A92B8C84E89B627BF354CDF30F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft
Manifest number:          04A2
Signing time:             Fri 31 Jan 2025 03:01:57 +0000
Manifest this update:     Fri 31 Jan 2025 02:56:57 +0000
Manifest next update:     Mon 03 Feb 2025 03:13:57 +0000
Files and hashes:         1: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: ox63n/r0ca1g94hL2ke4FP7or6if8bsZ2pxn72Px8Rw=)
                          2: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: TzDlH/8T37XWi95eFodHjGljwWomYVsEUxMEatIqMzY=)
                          3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: Q4AjejyzAPd/ncgkm+rk+HuwBec70FAvTry5cmeq/hA=)
                          4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: fijXi7JXNmOqyGzs7/506DijuSQ1n1hxqAmgpzA5UJM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2c:1c:44:fd:12:f1:a9:2b:8c:84:e8:9b:62:7b:f3:54:cd:f3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
        Validity
            Not Before: Jan 31 02:56:57 2025 GMT
            Not After : Feb  3 03:13:57 2025 GMT
        Subject: CN=1B12E50604429D30713CEFED76F111AF0DF93C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:83:df:66:b6:1c:f7:54:96:90:58:4c:a3:
                    f8:42:b4:b2:f4:69:8b:88:e6:d9:3d:90:44:12:0a:
                    97:e7:f1:23:c9:9f:42:91:7a:ac:ff:59:ac:b0:b5:
                    49:43:24:e5:a4:64:64:6d:db:13:55:b5:36:59:85:
                    f8:52:d0:5e:c7:79:32:bc:b1:61:1f:45:17:b9:c0:
                    55:5f:8c:d5:34:10:31:b0:1e:3a:e7:4d:21:9e:e7:
                    89:9b:29:95:f4:d9:4b:5a:fd:03:06:5b:a2:fc:d6:
                    66:b5:b8:3a:dd:49:9c:bc:67:cf:ab:fa:84:de:b2:
                    cd:47:cc:94:40:a5:98:f1:25:5d:f4:c8:38:f9:3d:
                    64:88:f9:e7:e1:6d:6c:66:2d:e6:65:d1:9a:ad:4d:
                    5b:b6:eb:29:76:46:13:23:04:18:86:5f:ed:1e:04:
                    20:e7:e3:33:e9:12:ec:43:c0:81:88:43:8c:b8:0b:
                    9c:76:20:ee:f7:4a:ed:2d:b6:c8:5a:83:4e:37:7f:
                    25:3e:47:17:97:a5:02:2e:4a:a8:91:60:5b:47:8f:
                    43:15:95:1c:24:87:17:4f:8e:fb:36:3b:8c:82:c8:
                    07:54:4f:46:7b:f8:7b:9a:c5:60:30:c9:62:d6:a0:
                    5e:a5:32:59:4b:58:85:76:77:2c:51:51:e0:93:9e:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:12:E5:06:04:42:9D:30:71:3C:EF:ED:76:F1:11:AF:0D:F9:3C:84
            X509v3 Authority Key Identifier:
                keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:fa:27:f1:e7:4a:89:2b:6b:a7:ff:cf:07:b1:0e:9b:13:
         7b:8d:77:53:42:4b:eb:f8:53:d5:ad:49:8d:cd:92:3c:e3:59:
         18:18:21:74:d7:0a:2e:7a:a2:fc:51:fb:63:42:3c:60:9e:17:
         11:25:8c:7c:e8:70:26:7b:18:5a:a6:5d:56:db:e0:b7:8f:dd:
         1d:83:9e:48:56:4c:5c:a9:d5:16:f1:17:68:b7:3d:7a:4f:dc:
         14:b6:13:a7:51:79:24:10:1f:34:90:fe:84:18:ce:a2:cb:2f:
         d7:86:66:7d:ee:a5:36:f7:14:fe:be:05:0c:5c:4c:74:7a:0d:
         9c:bc:16:19:94:08:92:bc:b7:ba:6c:51:b4:51:d6:e8:88:bf:
         df:72:e4:5f:6f:36:c0:c9:f2:91:89:c0:9f:6a:d0:00:40:ed:
         03:75:74:a3:f2:a8:09:ba:bc:ca:20:4c:8b:aa:a0:73:ee:03:
         4c:cb:3f:3b:06:d8:30:0f:9e:27:53:b6:cc:1d:d1:73:d5:25:
         3d:a5:54:c4:2f:ba:fe:b1:7d:9a:90:2b:77:1f:83:cf:27:2e:
         fe:38:4a:e4:d8:39:9e:06:1a:ce:20:36:fa:03:b5:a2:3f:1d:
         6d:6d:f0:39:fb:b1:c2:4a:52:4c:98:f4:f1:fe:88:c0:36:3b:
         42:a5:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:33 2025 by rpki-client