Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
File:                     D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json)
Hash identifier:          3to/wTW5AWF6m2z2aT2umNoKEViamhq6d5grdRkyQvg=
Subject key identifier:   9B:97:61:FA:4E:F9:39:49:C0:40:B3:A1:72:39:48:D8:F4:1B:0E:BC
Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C
Certificate issuer:       /CN=D296B71263A794DB76A99329A0A6CD91F03F997C
Certificate serial:       10A5D3F133627C2D939FB494496FAA9BBBCFD3C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
Manifest number:          04A3
Signing time:             Fri 31 Jan 2025 15:50:03 +0000
Manifest this update:     Fri 31 Jan 2025 15:45:03 +0000
Manifest next update:     Mon 03 Feb 2025 23:56:03 +0000
Files and hashes:         1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: hsPXQKay+qedGG/jMzXptueav18vcMllJ1dIk7iOf1k=)
                          2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: 7fLXYrAyTqLx88j8yd+DS2ViJFJUmjWuhMA9BFfN8wk=)
                          3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: eP9HYV3PuOgWsaNidklL7fFxAiMdSf/LVzna0rIUQhA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a5:d3:f1:33:62:7c:2d:93:9f:b4:94:49:6f:aa:9b:bb:cf:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C
        Validity
            Not Before: Jan 31 15:45:03 2025 GMT
            Not After : Feb  3 23:56:03 2025 GMT
        Subject: CN=9B9761FA4EF93949C040B3A1723948D8F41B0EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:c2:9d:07:c3:74:1a:9b:5f:49:ec:3b:3d:
                    b4:58:a6:10:6e:68:1b:ea:0e:24:29:b3:8d:8e:cc:
                    e2:63:f9:62:90:b3:56:06:e2:5e:4f:ba:32:61:85:
                    2e:59:a6:9f:ab:00:e5:27:3e:94:93:3d:a7:69:ee:
                    23:e7:7e:62:61:c1:2a:de:84:16:2f:17:be:16:b2:
                    fb:11:1f:47:c4:70:7f:54:97:d6:ab:b6:c3:a9:69:
                    e0:a5:4b:74:0b:a8:e9:90:74:04:f6:ec:d8:1c:4f:
                    75:44:53:6b:c3:5f:dd:5c:b9:7f:83:89:91:06:7b:
                    e3:a5:ee:cc:9c:67:34:82:cc:b6:46:36:0a:6c:75:
                    d2:a0:42:03:ff:ac:69:62:67:8d:dc:f3:f1:92:ad:
                    ab:50:5c:b6:c8:ae:65:60:f0:c8:77:6f:0a:c9:4d:
                    b4:be:e0:55:d2:dd:39:5c:f7:9d:dc:eb:0a:6b:34:
                    13:3d:0a:e3:6c:93:20:6a:22:da:ff:61:a5:2a:f7:
                    7a:19:06:37:84:e4:85:e7:36:1d:43:d0:54:72:e0:
                    50:cd:de:45:fe:24:5c:6b:0c:29:76:fd:4e:fb:80:
                    2c:8d:fe:f2:72:2b:9c:38:8e:59:db:5b:8d:d2:b7:
                    f1:04:1c:a6:b5:12:5d:46:44:f0:ad:04:1c:3b:98:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:61:FA:4E:F9:39:49:C0:40:B3:A1:72:39:48:D8:F4:1B:0E:BC
            X509v3 Authority Key Identifier:
                keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:22:3b:67:cd:b1:53:b3:f4:3c:19:1c:7d:0f:9d:3f:77:a5:
         d6:c7:d3:4a:21:c8:b1:48:88:c9:02:36:83:58:88:b7:a0:f2:
         14:4b:71:4f:8f:8b:8d:5f:50:3a:09:95:93:52:73:bd:d5:82:
         95:49:f1:98:6e:b4:3c:14:90:03:45:da:e9:80:61:bc:49:15:
         a9:73:91:d8:6c:16:9c:ff:a1:c5:da:09:3f:6c:87:a7:c8:fb:
         fc:09:b9:02:9c:2e:a5:b8:84:3e:d6:8a:14:26:93:39:0a:3a:
         aa:03:25:0d:14:d7:d7:04:89:cf:05:f4:94:ba:d3:37:8b:c7:
         56:f1:d6:c7:30:62:33:6c:bc:57:77:24:75:79:4d:f2:0e:e0:
         bb:0d:c2:f0:07:34:c7:c3:e3:eb:3b:29:14:58:37:5d:b8:83:
         a4:45:ee:c9:6b:c4:cd:79:8d:04:6a:86:08:7f:00:25:7c:5f:
         77:2d:0b:54:e9:ff:10:9d:17:c2:f7:7f:f0:68:d5:05:61:da:
         86:36:16:1f:ed:64:50:6e:6b:64:0b:46:28:f5:f1:8d:bf:92:
         eb:ce:74:f6:e1:f6:9a:d4:46:d6:85:ad:5d:61:5f:56:bd:78:
         31:36:17:69:45:79:27:fd:ca:98:73:f7:62:56:3b:87:b6:2f:
         61:22:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:12:36 2025 by rpki-client