Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
File:                     843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json)
Hash identifier:          yka/8dpSxgWEu2Y1cBs4s39/5DTqYV6sIh85lH0Ba4c=
Subject key identifier:   B3:D3:44:64:A0:C3:9E:B5:C5:30:D4:74:67:FA:BC:D3:B2:C7:8B:8C
Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70
Certificate issuer:       /CN=843FDF32A52D11795BBFB0918ABF926E0A210870
Certificate serial:       0D2D78CCA9A8A5ABB606E9256B8702AD8249F4F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
Manifest number:          9E
Signing time:             Thu 30 Jan 2025 15:02:05 +0000
Manifest this update:     Thu 30 Jan 2025 14:57:05 +0000
Manifest next update:     Sun 02 Feb 2025 19:08:05 +0000
Files and hashes:         1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=)
                          2: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: V8qjoeg6pYhC25+9C/nmK6K4UHUvWHeBB37U781GuNo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:78:cc:a9:a8:a5:ab:b6:06:e9:25:6b:87:02:ad:82:49:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870
        Validity
            Not Before: Jan 30 14:57:05 2025 GMT
            Not After : Feb  2 19:08:05 2025 GMT
        Subject: CN=B3D34464A0C39EB5C530D47467FABCD3B2C78B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:c8:e3:f3:50:37:c3:eb:bf:74:1c:79:9c:
                    38:1f:f7:77:3c:8e:0d:66:39:64:8d:85:40:3d:ae:
                    1c:56:fb:27:e5:6f:8f:14:10:48:2d:82:39:05:4d:
                    a5:b9:5a:5a:18:b7:88:1a:28:a2:29:28:27:eb:a7:
                    46:b7:2c:57:33:61:35:2b:94:51:50:db:9f:84:04:
                    5f:73:cd:bf:4b:d2:37:aa:b4:2b:06:fc:50:5c:e3:
                    68:42:85:0b:f4:57:48:3e:3e:c9:d6:fe:f7:72:4f:
                    86:5e:99:f7:9f:ac:86:8b:91:3b:e6:ce:d4:a7:85:
                    fe:cc:b4:20:61:0a:b1:a7:f2:76:de:ef:7b:e7:61:
                    07:2c:12:8b:7e:42:a9:a6:65:8d:43:1e:fc:09:07:
                    da:8f:a2:a3:97:1b:be:28:45:d2:cc:b6:af:c3:e8:
                    8f:41:98:56:21:dc:7d:8d:45:5e:d3:00:39:82:33:
                    ea:5c:b1:cb:be:ab:a6:03:19:70:05:dd:f4:f6:45:
                    d8:87:12:56:38:4c:49:68:1e:d8:3d:29:b0:d2:19:
                    b4:f6:35:b8:32:11:a5:0d:63:24:80:94:a2:10:e5:
                    52:80:36:3c:16:9c:ee:41:cb:49:92:4f:c8:9b:1f:
                    1a:91:69:75:21:d0:98:20:7d:ae:6b:9e:9a:ef:fd:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:44:64:A0:C3:9E:B5:C5:30:D4:74:67:FA:BC:D3:B2:C7:8B:8C
            X509v3 Authority Key Identifier:
                keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:b1:02:b6:6d:48:76:d6:8e:b8:d1:4b:06:8e:07:1e:d9:
         db:32:13:24:0c:76:a6:73:cd:d0:4f:0d:8c:51:8f:23:f5:68:
         96:72:51:c8:0f:77:2b:f4:e4:bc:74:0b:a5:53:bf:c0:9f:3e:
         4e:dd:30:c6:7c:2c:f0:2d:c2:56:02:51:73:52:d5:4e:df:55:
         a6:b7:63:d2:66:a3:42:7a:19:f5:1f:d5:81:84:d7:0e:5e:b2:
         a7:f2:70:d5:40:af:09:da:1b:36:82:9c:94:25:2c:45:65:c5:
         6a:b8:80:c8:a4:8b:c2:d7:83:c7:39:ac:4b:79:6d:fb:8f:53:
         71:b6:66:c2:f1:ce:22:3a:4f:60:38:c7:09:8a:ce:16:4f:51:
         ad:6f:63:3f:d9:ee:86:3a:72:0a:b8:b1:d7:2e:3a:fe:72:df:
         67:a8:b3:3f:7d:6f:ea:dc:1f:fc:c1:83:b2:0b:b6:6e:c6:ab:
         7d:e1:00:a2:ca:83:e5:5a:85:dc:a6:66:cc:b5:0d:1c:0a:bd:
         8b:4f:96:24:31:16:26:3b:02:cf:a1:e8:7b:e4:17:25:7f:a1:
         00:41:79:ae:95:87:30:02:14:65:93:da:5b:89:d8:72:31:40:
         fd:d9:dd:70:78:5d:c9:fa:e0:dc:a1:b8:56:67:43:95:6e:bd:
         c6:0a:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:05 2025 by rpki-client