Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
File:                     A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json)
Hash identifier:          34KJyKZ5jF6zt9F4B5NHZl55r053fU/GNON5XB1YTVc=
Subject key identifier:   67:03:32:E0:CD:BE:6D:0F:D9:00:AD:65:B8:98:8A:AA:20:1C:9A:DC
Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC
Certificate issuer:       /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
Certificate serial:       5668EA368BC330A626B91BFA466E7A654F19B679
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
Manifest number:          0105
Signing time:             Thu 30 Jan 2025 22:10:48 +0000
Manifest this update:     Thu 30 Jan 2025 22:05:48 +0000
Manifest next update:     Mon 03 Feb 2025 07:31:48 +0000
Files and hashes:         1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7cXszIEC7Z7nD1ldnqKl+8siMGel8w55J7g/+p+W100=)
                          2: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: XFsIo6zuwz17xqiKOSEFnvK2Jc1wZXg/6Dw1KB4MNIs=)
                          3: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 5eQlD68HaKHERHfII59DwwAA8bgfmp1d8Ez+zw7QzCU=)
                          4: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: lJFf2RUIFfgHsvUQ5r4NZXLo7fgmTbX06/mC7Iozpgk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:ea:36:8b:c3:30:a6:26:b9:1b:fa:46:6e:7a:65:4f:19:b6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
        Validity
            Not Before: Jan 30 22:05:48 2025 GMT
            Not After : Feb  3 07:31:48 2025 GMT
        Subject: CN=670332E0CDBE6D0FD900AD65B8988AAA201C9ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:bb:cd:73:c9:83:d1:67:50:8d:20:e0:94:
                    c6:71:7e:35:ba:b6:5e:72:28:cf:f9:86:ae:cc:06:
                    67:5e:f4:f4:e6:21:ef:25:43:35:e8:fc:41:bf:13:
                    bb:ef:c6:47:05:44:51:4f:c3:be:f8:b9:b9:ba:46:
                    06:43:90:9e:07:0b:c3:fd:ba:8e:f4:fc:fc:3c:62:
                    be:71:e9:45:12:07:c2:a2:5e:b9:b0:6e:d0:a1:08:
                    5d:99:9e:c8:f9:8c:dc:76:83:53:99:11:7d:60:f4:
                    b3:fe:02:99:c9:3f:d6:71:3c:82:b5:77:05:77:65:
                    8f:d5:9c:df:bc:64:27:e3:70:ab:bd:a1:8c:55:73:
                    26:4e:8e:9e:f8:5e:e0:6d:49:7b:1b:5c:25:17:a8:
                    1d:13:e8:6b:22:e2:43:87:98:22:bd:73:af:fa:cb:
                    a0:41:86:cd:79:40:9d:cb:3f:3a:6f:ca:cf:86:b4:
                    2c:e6:de:8f:eb:04:09:87:b7:32:05:13:d1:c4:af:
                    8f:74:3f:ca:0e:5c:09:f6:c5:89:db:3b:92:67:07:
                    37:01:be:15:9b:8e:30:d7:0d:36:b1:b4:b5:50:8c:
                    e2:13:e5:d4:75:d1:5a:8a:ee:54:81:a5:08:05:eb:
                    d6:fd:88:3f:ba:50:0d:85:95:d2:9b:fc:49:db:4a:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:32:E0:CD:BE:6D:0F:D9:00:AD:65:B8:98:8A:AA:20:1C:9A:DC
            X509v3 Authority Key Identifier:
                keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:50:2c:63:47:d4:63:35:26:c1:10:96:bc:d4:b8:e5:71:1b:
         14:cd:77:6b:23:17:f2:ae:1f:65:0a:99:f3:f1:72:fb:6e:04:
         20:bd:6f:3f:8d:87:d5:01:d6:ff:69:56:a1:f5:64:f6:c2:3a:
         cf:d0:21:b7:4c:e1:5b:7c:b9:d8:82:99:16:6f:2f:3c:2b:25:
         8f:a9:5d:cf:14:6c:33:52:a1:59:13:ed:5d:c2:8d:cb:78:63:
         10:7d:56:1d:86:ef:9b:ba:66:21:a7:24:0f:0a:5d:73:a3:30:
         1a:bf:5d:f9:e1:ff:40:53:57:fa:7f:86:59:ae:08:f8:64:e4:
         69:4e:21:bf:4b:59:4e:a4:1f:f8:ec:52:3d:52:4a:89:97:d9:
         4a:83:24:26:f9:c8:29:4e:a8:93:52:07:93:6b:49:09:34:5d:
         eb:13:d3:d6:9d:1f:7a:d2:c3:b9:84:28:b0:01:23:f0:57:38:
         43:9f:9e:b4:49:d2:a9:be:f1:23:f2:2d:48:c9:12:0d:3f:f7:
         2a:2c:13:2b:e7:67:cb:d9:ac:03:3f:b7:d9:1f:d0:75:fb:14:
         e8:80:48:38:7e:55:47:d7:4e:77:fc:b5:48:1d:1c:e5:27:cb:
         8e:04:b7:c0:d9:d2:58:b9:33:66:65:22:bd:92:4d:73:cf:36:
         89:72:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:45 2025 by rpki-client