Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
File:                     E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json)
Hash identifier:          wZHZDY+POrkBRA2O4mS6jkNLPd+MbLluC2rQkTSwtKc=
Subject key identifier:   39:3D:4F:D3:0C:C5:62:0D:1E:C6:94:39:82:37:64:30:19:79:8A:5D
Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
Certificate issuer:       /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Certificate serial:       6E9F709DC273DB332535208FDDB23C3814316557
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
Manifest number:          1B
Signing time:             Thu 30 Jan 2025 08:00:51 +0000
Manifest this update:     Thu 30 Jan 2025 07:55:51 +0000
Manifest next update:     Sun 02 Feb 2025 16:16:51 +0000
Files and hashes:         1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: mzSug1l0UyQqjzZpgjEX35RlGJM4KR1CyNtWljmKNig=)
                          2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: 4fYMDhNgrNIZqkjhtJ963SmEKS19mRy8ZlZYdvTh4Vc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9f:70:9d:c2:73:db:33:25:35:20:8f:dd:b2:3c:38:14:31:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
        Validity
            Not Before: Jan 30 07:55:51 2025 GMT
            Not After : Feb  2 16:16:51 2025 GMT
        Subject: CN=393D4FD30CC5620D1EC694398237643019798A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:62:b1:ca:3f:12:4b:59:e8:a6:78:0e:e8:7e:
                    b9:24:4e:ce:f6:3d:53:c6:8d:34:0e:2b:d8:c7:fd:
                    4b:4e:1d:65:4c:43:bd:bf:75:b8:62:63:df:b6:03:
                    1a:a2:31:d5:19:ba:7a:79:e3:00:cc:1b:62:02:fa:
                    75:f7:d5:38:26:53:96:6b:a2:f8:3a:d4:b6:bd:26:
                    1e:c1:12:1d:72:83:28:82:92:94:75:3d:33:e7:1e:
                    b4:4a:a3:ae:90:7e:1c:5c:b9:0f:e6:ea:af:13:1d:
                    66:aa:91:43:f7:3a:eb:8b:77:fe:29:5a:af:da:f2:
                    24:57:10:6b:7d:17:ad:2c:81:e9:df:2c:bf:b3:9e:
                    00:63:10:d1:f3:9d:b7:ac:3a:1a:4d:c5:1b:0d:e5:
                    3e:f1:19:8a:c9:e9:28:4a:5a:31:65:93:26:ce:83:
                    bf:b7:19:44:eb:8b:8d:70:fc:72:db:ac:bf:ad:a7:
                    b8:08:11:9b:da:5c:ae:b0:08:cf:34:2d:14:9a:aa:
                    ad:2b:cf:47:f0:a2:ac:11:46:09:62:ca:30:74:de:
                    75:fd:6a:a9:ce:09:9e:38:32:71:bf:05:63:bd:10:
                    06:f0:fd:52:13:2c:5a:67:4d:d9:34:29:1d:87:b2:
                    b2:d9:42:a9:3c:3e:35:26:b0:5c:2c:90:37:d3:95:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:4F:D3:0C:C5:62:0D:1E:C6:94:39:82:37:64:30:19:79:8A:5D
            X509v3 Authority Key Identifier:
                keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:e7:88:01:20:77:ec:18:c7:c3:4d:83:71:01:26:3c:67:
         07:af:5d:41:45:04:ba:20:16:85:47:ac:da:d0:53:9c:34:5f:
         a3:11:d6:c0:2f:94:8e:15:fc:27:ca:b6:21:dd:11:15:38:50:
         f1:f3:e3:b8:64:63:45:c4:63:69:6b:32:59:80:7a:0b:f7:c8:
         aa:05:06:b5:b7:66:46:0b:72:c1:b3:0d:fd:be:42:00:ec:7f:
         10:86:99:d9:26:e3:e5:60:ff:1a:60:10:db:2e:f4:64:4e:c7:
         83:55:5f:1e:c1:30:c8:89:c6:66:fb:4d:34:62:94:5a:61:ec:
         a3:8c:0d:89:37:be:65:6b:fb:3c:93:9b:5b:2d:3d:a4:f1:94:
         01:7f:ad:77:bb:1d:65:bd:cc:09:7b:8b:0c:2c:37:82:9e:86:
         c6:21:0a:01:ce:73:1f:b8:6a:78:b6:87:4d:cf:b7:45:83:93:
         df:60:66:2d:fb:df:82:1d:e6:e4:08:68:67:1e:97:18:e3:65:
         58:8f:59:40:e8:6f:cf:ee:fe:c4:bf:37:fa:7a:47:e5:51:c6:
         51:cb:7a:02:c3:03:2b:f7:68:99:1a:cf:38:a7:7c:94:59:91:
         fa:53:56:c3:e2:69:0d:79:19:02:9a:f4:cc:bc:44:1f:ee:2f:
         dd:9a:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:08 2025 by rpki-client