Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
File:                     8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json)
Hash identifier:          vlNotK4hPH/YeSkIThK/DhpvOoyxe1W6Ir8zm9K0y00=
Subject key identifier:   96:46:26:06:69:43:B8:53:BF:2C:52:5C:4A:9B:60:3B:A2:40:AB:43
Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
Certificate issuer:       /CN=8E5335B45EE371DC463E5C65783A244FD1846656
Certificate serial:       018C54B89172CEC0BAE64F3D7D12270752CE7284
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
Manifest number:          87
Signing time:             Thu 30 Jan 2025 08:41:27 +0000
Manifest this update:     Thu 30 Jan 2025 08:36:27 +0000
Manifest next update:     Sun 02 Feb 2025 14:21:27 +0000
Files and hashes:         1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Um+Wdv5s2TZ/CqC2WfjsTM2p/7pHGh2pvgc6xo7DZp4=)
                          2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: 8DzhAfoUd6BqQZJjITI4N+KKEuEM+0paz75QcWlMdbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:54:b8:91:72:ce:c0:ba:e6:4f:3d:7d:12:27:07:52:ce:72:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656
        Validity
            Not Before: Jan 30 08:36:27 2025 GMT
            Not After : Feb  2 14:21:27 2025 GMT
        Subject: CN=964626066943B853BF2C525C4A9B603BA240AB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:a8:35:ce:51:c2:a0:30:8e:22:92:04:e8:
                    97:37:3b:ff:84:de:2b:4a:45:21:d1:fe:b4:00:d6:
                    0a:b8:0b:bb:1d:4b:ec:bc:c8:fb:be:51:46:c5:34:
                    85:d0:a4:6c:3a:79:7b:e4:c1:9d:e4:a1:a0:ef:3e:
                    3c:fe:fa:d1:3b:21:1f:6e:7a:91:1f:cd:fc:45:b0:
                    99:fb:27:33:b0:32:5e:18:c6:d6:c5:6c:b6:11:ed:
                    c2:8a:eb:1d:ac:7d:5f:7c:7d:3b:9a:a8:72:98:0f:
                    fe:e4:6d:46:cb:43:7a:85:64:be:45:4d:2f:7d:f8:
                    b6:c5:c5:1f:77:03:1f:53:d5:7b:f3:ac:a5:c7:19:
                    ad:cd:38:d3:e3:6a:f1:a0:ab:8e:91:df:ea:d3:11:
                    18:a9:5c:22:0b:b4:9f:b6:c2:80:24:21:60:86:13:
                    73:95:61:fc:a9:ca:04:84:0b:07:7d:bf:92:d7:93:
                    39:0a:c9:16:ea:3d:4b:be:c4:df:c7:e9:1c:53:df:
                    5c:53:d0:8b:65:00:0f:49:d3:41:7a:4a:e2:9b:e5:
                    20:1d:b2:7c:75:d7:1c:3e:c6:20:6e:34:c4:98:e0:
                    8b:ef:99:2b:50:5b:3c:71:20:85:19:61:5d:6b:aa:
                    8e:20:eb:5c:4a:68:94:49:a6:99:de:6a:07:32:3f:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:26:06:69:43:B8:53:BF:2C:52:5C:4A:9B:60:3B:A2:40:AB:43
            X509v3 Authority Key Identifier:
                keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:1d:6b:a9:2e:41:e6:16:7d:87:ab:6f:48:4c:d8:50:40:0a:
         d4:71:f3:26:69:00:c9:f2:51:8f:1a:db:3f:c8:e7:e0:6c:88:
         21:e2:aa:26:b0:53:96:4d:05:0f:47:0c:5f:5c:7b:c0:c1:a9:
         25:63:f3:f5:3e:c6:87:64:9e:05:95:5a:13:ce:cd:d4:3d:3a:
         e7:30:e4:da:bd:ab:41:98:ed:d6:38:e4:12:10:2c:f0:cf:c0:
         ae:0e:03:56:d0:64:7d:ca:80:33:8f:b9:1c:cb:00:77:8c:66:
         8c:d6:de:fc:4d:2e:09:cb:1d:9c:b1:65:cb:bf:6b:9f:49:5d:
         22:90:a7:f9:10:08:b7:af:a0:3d:af:a8:1b:f2:00:aa:f1:b7:
         4a:60:c1:0f:70:47:39:f4:49:26:44:ef:0e:93:1b:6c:73:5e:
         9a:2b:a7:33:48:22:ed:e9:53:86:dc:ca:91:e0:ba:21:5d:1b:
         6f:fb:cd:e5:08:28:72:77:b4:36:fb:b2:f4:3a:26:4b:cc:2b:
         8c:e6:5e:51:e1:39:35:99:02:44:f3:9d:64:32:0c:5a:cb:ea:
         e9:a8:5f:f5:3f:eb:79:4c:a9:e0:f5:4e:c6:17:55:7e:69:95:
         dd:49:03:a9:73:b0:02:5f:22:d1:d6:d6:33:6d:bc:32:f8:26:
         ef:31:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:27:28 2025 by rpki-client