Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
File:                     818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json)
Hash identifier:          zhjNppQzBVPvv7a+TzzF1dHnwuRzslpx8iaJq4I7mpA=
Subject key identifier:   2C:5C:65:DD:BC:E0:9B:E2:FD:AD:37:EF:1A:C7:18:75:8F:A4:5D:F7
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       04168A724E80EB9DC4407C29FDED7C765C38FB5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
Manifest number:          04A1
Signing time:             Wed 29 Jan 2025 19:12:23 +0000
Manifest this update:     Wed 29 Jan 2025 19:07:23 +0000
Manifest next update:     Sat 01 Feb 2025 22:15:23 +0000
Files and hashes:         1: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: e9IH2pZ9uAA1LvF3x0PsRWxNU3xU/oUXz6yWuTN6x2Y=)
                          2: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3BR+2r0/90FmZ7pFdR9xLYyxejfEcnOHDPsLPNVN5JY=)
                          3: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: u64yXBIs0ModkICN72Kb3+oe1Z5jkUzC+/YwOwxAsWs=)
                          4: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: FlL58DoPU3fhZmB25RnznETwRsG3qy3bVA/OCDGHw+8=)
                          5: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: yG8djwmjU5wWL3w72DbpQnRcPYEEUhpkWqpJyWDMSjM=)
                          6: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: cLCHDmxGqUBaZk5T8o0MA3gsS3e3KdxYYyn30SIwSRc=)
                          7: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: y/bDPrK/vJcW1JxMX0uYyADWqFYEbR36UfmZG19GCSI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:16:8a:72:4e:80:eb:9d:c4:40:7c:29:fd:ed:7c:76:5c:38:fb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jan 29 19:07:23 2025 GMT
            Not After : Feb  1 22:15:23 2025 GMT
        Subject: CN=2C5C65DDBCE09BE2FDAD37EF1AC718758FA45DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:27:81:5f:33:96:73:64:b3:9e:8f:22:c1:
                    1d:4e:bb:25:27:34:81:75:80:df:8a:ea:65:fe:f9:
                    97:aa:5d:0e:35:2c:c2:1a:91:5d:d4:16:e6:29:3c:
                    2b:e3:10:5e:f3:b5:2c:a3:5b:14:96:76:47:ab:84:
                    49:67:ff:70:14:00:ef:bb:6e:86:53:12:37:77:24:
                    14:a2:2e:2e:93:65:28:44:a8:a7:6c:3b:e7:9c:b0:
                    c7:8b:ab:a0:0d:7a:25:ec:96:14:0e:2b:67:6c:22:
                    d1:dd:29:42:a9:9f:79:61:99:42:95:73:47:f9:4e:
                    43:01:cb:be:43:79:5f:40:41:b8:8f:37:9d:77:fe:
                    f2:ad:40:a7:f2:3c:fa:b4:83:f6:a5:8a:34:af:aa:
                    aa:0a:3c:a8:c1:52:e4:a6:01:7d:b3:39:09:b3:d0:
                    cf:91:4b:8b:39:35:d5:44:e5:99:6f:40:99:a7:e7:
                    1f:d0:5e:55:df:6d:f4:0f:8d:48:a3:cc:db:e5:54:
                    51:98:0d:16:db:63:00:e6:94:1b:ab:fe:6e:97:56:
                    05:dc:a2:55:d3:72:f7:a2:8b:9d:b1:52:91:54:7a:
                    67:78:10:90:7a:a0:b8:d4:f1:5e:3e:d5:08:10:34:
                    9a:35:03:ca:20:9e:93:5d:a1:b4:30:d3:0f:68:4b:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5C:65:DD:BC:E0:9B:E2:FD:AD:37:EF:1A:C7:18:75:8F:A4:5D:F7
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:91:be:1c:25:a0:d1:25:2e:1d:e3:1f:1e:47:56:2a:a5:ad:
         cd:39:27:6e:f8:c8:24:5a:19:81:79:5e:93:fa:8d:52:89:59:
         37:38:7b:b4:ce:b0:c8:da:a0:6d:1d:b3:10:58:07:dc:44:07:
         a7:39:4c:e3:93:60:56:68:bb:62:be:e1:b2:db:9e:fd:17:41:
         23:2a:fe:3d:d4:b3:45:8c:e5:4d:68:11:60:f0:1c:4e:b4:e6:
         02:04:e3:30:2b:1f:4f:40:d1:d8:5d:f1:45:9a:6b:00:7e:14:
         b8:09:7a:0a:cf:cb:22:5e:fe:1e:b3:82:52:46:48:48:0b:e3:
         fd:d6:9b:2a:e4:28:75:7e:77:86:aa:6e:66:41:e7:5e:90:6c:
         ba:32:28:76:6e:f5:0b:87:99:b5:e3:7c:a2:db:14:4c:0c:8f:
         c2:55:69:39:59:4c:e5:5e:2b:1a:54:e5:97:e0:23:fd:88:70:
         84:28:13:79:34:28:12:54:c0:51:03:a3:21:f9:72:8c:46:d2:
         b2:ba:fa:2e:f0:80:5c:01:ca:40:b2:ce:31:25:21:b7:8c:89:
         ad:b7:24:0f:ae:18:b9:01:8d:dc:6c:91:ec:47:7f:9a:58:ba:
         bd:1a:34:d2:1e:b2:b8:8b:44:93:95:df:cb:86:bc:8a:fe:fe:
         10:89:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:58 2025 by rpki-client