Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft
File:                     AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json)
Hash identifier:          3IXetvdI3qqA1Zrhltmj9LVw2O7HdMr8H8r4A2/OySY=
Subject key identifier:   F5:D2:44:90:B2:EC:BB:3D:0A:F8:03:B8:4D:E6:09:78:30:BA:0E:C0
Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF
Certificate issuer:       /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF
Certificate serial:       46E7B1088B12674B3473A967BC441A954995DDD3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft
Manifest number:          3B
Signing time:             Fri 31 Jan 2025 00:11:26 +0000
Manifest this update:     Fri 31 Jan 2025 00:06:26 +0000
Manifest next update:     Mon 03 Feb 2025 02:58:26 +0000
Files and hashes:         1: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=)
                          2: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: Fpot74rj5wzgN7N8iPmzvlJHdJsADPVxJlsaJ6fdCh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e7:b1:08:8b:12:67:4b:34:73:a9:67:bc:44:1a:95:49:95:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF
        Validity
            Not Before: Jan 31 00:06:26 2025 GMT
            Not After : Feb  3 02:58:26 2025 GMT
        Subject: CN=F5D24490B2ECBB3D0AF803B84DE6097830BA0EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:b3:28:2c:36:5d:2d:93:38:24:b4:77:11:
                    0c:e6:60:38:c1:c1:82:75:51:40:5b:30:4c:5f:d3:
                    35:23:00:ae:34:49:da:8b:a5:64:7a:cf:c2:c3:3f:
                    da:7b:6c:8a:01:76:d2:c7:09:ac:bb:77:6a:41:7b:
                    f1:71:02:6b:58:40:86:26:6e:db:f7:8e:8c:6d:7e:
                    11:b7:6f:1b:4d:58:08:e4:c8:de:6c:50:87:82:e9:
                    d0:61:dd:4a:fe:2e:d9:f1:d9:36:ca:85:61:a2:b7:
                    ec:15:65:a6:59:dd:17:1d:1b:07:64:a9:f2:95:e6:
                    a8:48:87:05:30:0a:32:78:2a:40:da:59:84:74:5d:
                    6e:e7:a6:19:1b:20:3c:68:e0:e6:8f:8c:2d:89:00:
                    cc:75:c1:a8:63:0d:b7:11:dd:40:91:88:90:c7:b7:
                    bb:a9:fb:ae:ab:03:3f:4d:33:c7:08:04:85:f3:52:
                    5a:cf:a4:c7:86:2e:04:0f:ad:2e:25:a9:ee:6a:9b:
                    8f:d0:16:6d:0d:9a:25:9a:15:8c:64:7e:38:77:2c:
                    02:f4:02:99:72:f6:17:0a:d1:61:c2:79:36:3f:65:
                    ca:94:23:2a:8f:16:c3:75:f4:12:8e:d8:d0:bb:10:
                    37:fd:bd:c5:fc:db:cf:6d:3d:83:df:bf:54:5e:c9:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:44:90:B2:EC:BB:3D:0A:F8:03:B8:4D:E6:09:78:30:BA:0E:C0
            X509v3 Authority Key Identifier:
                keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:80:58:ed:7e:c1:ad:c9:26:f9:0c:82:6f:80:36:4b:a9:fd:
         5e:e3:e9:23:dd:7e:65:e9:62:cb:9d:65:fd:bb:08:62:ef:d8:
         a7:83:a7:24:3b:13:84:c5:e8:ad:99:c8:04:e5:54:cf:7a:31:
         bf:ce:7e:72:4a:6d:de:d4:e1:80:66:f0:8c:9b:4f:fe:6b:7d:
         8e:53:ed:36:76:ac:6c:81:bd:8f:01:93:dd:65:e5:94:d9:f2:
         c7:ca:95:34:93:65:c1:c3:34:81:e4:2b:36:b9:81:db:90:fa:
         cf:e6:00:41:1e:fb:7c:82:f9:69:3c:f8:de:fb:74:fc:12:db:
         ff:ce:f0:c5:02:75:77:a4:10:15:04:08:e4:98:bf:06:d9:6d:
         32:09:a0:7d:4b:ac:88:70:59:e3:77:d4:cd:8a:f2:25:8d:0b:
         2f:1c:83:5c:21:a7:e1:1d:81:ee:7b:b7:c5:b0:a2:70:f6:82:
         c1:6d:ef:b0:0a:ee:01:54:62:6b:1c:37:05:3b:31:9e:2a:60:
         04:79:ed:e4:6c:63:1e:f1:fa:a2:31:22:d9:2c:c1:83:50:70:
         61:97:21:15:76:19:d0:cf:87:40:ca:09:75:74:e1:1a:79:93:
         c0:51:46:ac:3e:1a:ac:f3:e4:a1:e5:5c:6a:52:84:1c:b4:e0:
         ce:2c:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:11 2025 by rpki-client