Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          5OtEuHgltD62biHyFmIydn4qJStGJufEknHsJJMQmS0=
Subject key identifier:   3F:2C:65:CA:83:72:A6:0D:29:8E:4D:6C:AE:0F:7F:7D:4D:EA:8A:9F
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       7656099F8E97F20A875FFA681DEE9C3CD243039C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          010B
Signing time:             Fri 31 Jan 2025 06:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 05:56:07 +0000
Manifest next update:     Mon 03 Feb 2025 16:10:07 +0000
Files and hashes:         1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: aEvX3qM0dpIhOnki9KSB1ntUOI+sF6cmb0sxuTzc8VE=)
                          2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: CbR2n14f0BdezbCrZVegI1ytQ96WujvvlBCUEwkHZ8Y=)
                          3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: maOhda1MNY0QpFWA0UDVPj0pjSzgY2RsEHzTi6cxg1s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:56:09:9f:8e:97:f2:0a:87:5f:fa:68:1d:ee:9c:3c:d2:43:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: Jan 31 05:56:07 2025 GMT
            Not After : Feb  3 16:10:07 2025 GMT
        Subject: CN=3F2C65CA8372A60D298E4D6CAE0F7F7D4DEA8A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:23:c9:56:80:f8:84:e3:35:de:01:a4:22:
                    d1:a1:03:ce:ce:82:2a:b5:9a:0d:77:3d:c1:73:d4:
                    b1:72:40:7f:56:86:35:78:13:6a:33:b3:90:b3:cc:
                    1f:fd:f7:28:32:cf:18:00:ba:e7:cc:d7:f2:24:47:
                    9d:63:43:3b:c0:2a:44:d2:6e:99:b4:56:52:4a:c0:
                    0f:5e:a3:43:5d:ac:f3:f6:f0:44:4a:7c:ce:57:74:
                    9d:39:9f:5d:1b:d0:4d:80:d3:25:d0:20:3d:cb:ea:
                    db:3a:7c:61:5f:e7:34:ab:b5:68:57:42:ea:b0:20:
                    86:b3:1d:52:e7:44:0b:bd:20:74:7e:36:46:cb:bc:
                    f8:f6:40:43:7d:b1:26:b1:aa:d3:d6:c9:09:fc:ac:
                    47:49:7f:78:11:df:5f:03:ea:a6:bf:74:79:6a:c7:
                    a8:ce:c6:b8:08:b0:a2:df:c4:e0:5f:aa:d1:a7:6c:
                    d7:3f:41:02:b8:0a:76:ee:5a:3b:33:80:b1:0d:3a:
                    7e:6b:4c:b8:2f:00:e2:88:28:8e:0f:9e:28:b4:01:
                    63:7e:66:cd:f9:ba:1c:c8:52:d5:c7:82:b8:40:33:
                    48:b1:1a:2c:ca:f7:96:ca:ae:21:9f:56:c0:27:2e:
                    ca:33:19:50:a1:c4:4c:84:62:91:a2:fb:70:93:3a:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:65:CA:83:72:A6:0D:29:8E:4D:6C:AE:0F:7F:7D:4D:EA:8A:9F
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:61:b3:ee:33:6c:87:db:86:ec:ea:1b:45:95:1c:ee:6b:3e:
         aa:78:57:95:81:a5:7e:d7:93:c5:6f:58:00:7d:27:7e:24:e7:
         65:f7:47:a6:ea:b3:09:44:b8:3d:1b:41:2d:a6:54:66:3f:71:
         46:83:89:10:00:e2:15:c5:78:e7:39:54:4f:5a:6a:98:b7:0b:
         73:68:8e:31:61:e4:65:6a:05:dc:0e:57:8d:2e:73:3d:29:fd:
         da:81:6f:c0:70:a5:85:9b:4b:f6:07:65:b6:b8:fc:43:8d:bd:
         8c:92:6b:3a:09:d1:ee:ee:45:21:e8:e6:c2:8f:d9:01:85:95:
         8f:da:cc:2b:49:62:41:7a:d4:fb:0e:58:d7:fc:08:54:0b:32:
         0d:1b:0f:2c:8f:95:4f:87:3a:04:18:7c:d6:fc:ca:c0:5b:d2:
         2e:99:3b:b8:6d:b2:c5:bd:55:c7:a1:9b:03:43:89:53:31:f9:
         c5:f6:d5:fc:99:e1:3b:85:a1:97:e4:bb:41:bf:2e:40:7e:32:
         b5:fd:d1:94:11:65:17:03:8d:d8:63:fe:5d:36:df:0d:92:96:
         08:89:e0:bf:25:a5:98:11:f1:87:56:ef:eb:41:bf:c0:a1:7b:
         bb:5f:b4:7f:f1:ed:ae:64:bd:5d:d7:73:35:10:49:9e:58:a5:
         f0:c2:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:01 2025 by rpki-client