Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
File:                     90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json)
Hash identifier:          weptysxkoO9cR7bNb/c+nBCARQZLSbotYaa6LT30c60=
Subject key identifier:   FF:ED:CC:01:89:CC:A3:47:DD:79:5C:75:BC:43:83:D3:7C:61:36:43
Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97
Certificate issuer:       /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
Certificate serial:       1738E3AD203E49CA43973678EB3946EB08731542
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
Manifest number:          04A5
Signing time:             Fri 31 Jan 2025 06:41:15 +0000
Manifest this update:     Fri 31 Jan 2025 06:36:15 +0000
Manifest next update:     Mon 03 Feb 2025 12:32:15 +0000
Files and hashes:         1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: qKBxJQhEROj+tmltquHo4gzsw0bCZkzO6jHlwiU1v4Q=)
                          2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: 6Z6gxTWfD3ARKqfG9o8QF6TpfuXdMJbjFHfFmTtyniQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:38:e3:ad:20:3e:49:ca:43:97:36:78:eb:39:46:eb:08:73:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
        Validity
            Not Before: Jan 31 06:36:15 2025 GMT
            Not After : Feb  3 12:32:15 2025 GMT
        Subject: CN=FFEDCC0189CCA347DD795C75BC4383D37C613643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:8c:90:72:15:04:29:a9:c8:1d:b5:29:65:
                    53:4f:8e:78:51:fa:20:fa:8f:48:1a:b7:a9:84:e0:
                    c9:ea:f1:5d:67:6c:88:87:bb:9f:8c:46:b1:3e:ca:
                    65:f5:65:68:93:32:b9:84:41:04:aa:bd:02:f6:0c:
                    ab:04:bb:ad:d2:be:27:c1:e6:bf:55:21:04:83:fe:
                    fd:94:6f:15:99:da:7b:87:70:61:47:91:98:ef:62:
                    b3:db:c5:f2:b1:61:4e:22:1a:53:98:e0:51:f4:3b:
                    79:44:19:6e:ff:3d:85:98:5a:f7:41:d1:29:5c:0c:
                    0e:15:f6:b7:6f:e8:38:43:90:bd:23:b9:83:55:65:
                    c9:6f:1d:5f:de:ac:b1:60:93:32:32:09:e2:aa:1f:
                    03:66:fc:96:2f:df:19:a7:b2:5e:13:92:64:ef:c2:
                    97:80:9d:31:4d:32:98:98:e7:da:bf:29:3a:58:50:
                    24:cb:5b:05:ef:95:1e:0d:06:83:37:94:4f:29:8c:
                    1c:ba:9d:b2:e6:c1:60:b1:49:2e:53:db:98:14:cc:
                    0d:c7:3a:29:5e:b3:8e:c2:fb:de:46:6c:be:de:5c:
                    70:ec:36:bd:be:f2:9d:56:54:63:55:20:08:6b:f3:
                    51:b3:f4:4b:8f:f8:6c:34:1d:c2:be:af:ba:73:e0:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:ED:CC:01:89:CC:A3:47:DD:79:5C:75:BC:43:83:D3:7C:61:36:43
            X509v3 Authority Key Identifier:
                keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:40:9b:00:3a:8e:0a:c1:48:06:57:79:27:8b:b9:61:1f:
         0a:07:3b:ac:9e:52:0a:4f:20:c7:57:df:25:81:38:3d:23:cd:
         78:c3:38:06:f8:44:56:be:e1:12:e7:c0:71:f3:db:81:46:a6:
         63:ac:2c:d5:77:87:ee:cf:9e:90:b7:36:f5:24:98:86:09:6c:
         51:38:e2:c6:eb:39:91:2d:46:64:df:12:d2:df:9f:0d:ad:14:
         b3:62:c5:48:ab:3f:78:fa:33:45:02:61:89:9e:a3:f3:72:cf:
         5a:15:99:79:ef:71:cc:cf:47:08:5a:99:c2:e5:cd:c7:0d:f8:
         7a:ed:40:75:c4:a5:9b:92:83:3d:1e:ac:27:79:7d:8c:81:c5:
         46:03:8f:77:b6:1d:6e:ba:7a:1b:a3:13:97:0f:d5:18:d6:4c:
         ec:50:dc:c5:d2:fa:6f:d0:3e:bb:28:d4:cb:ef:d0:96:4a:cc:
         4d:81:81:ad:82:a8:6c:b5:8d:fb:88:23:7f:d1:d0:fb:7a:46:
         f6:f1:7f:48:03:17:99:8d:07:4f:81:21:ad:73:ba:10:a1:6e:
         f3:ea:f2:b0:88:de:e9:19:d2:52:76:e1:2c:e1:df:6c:75:7a:
         22:91:a4:9c:fc:3e:1c:c9:8d:00:45:fd:0e:f1:c9:b2:76:68:
         b4:92:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:31 2025 by rpki-client