Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
File:                     B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json)
Hash identifier:          1y3LZhzh7kzPsOLZtQeHPNqkCrdCaAlniwTaGhIRG6Q=
Subject key identifier:   F9:08:0F:3B:BB:33:9B:01:7E:49:B2:53:E5:5F:7C:4E:A7:2A:17:FE
Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Certificate issuer:       /CN=B392381083372148D0977D0066CFF38FD5A32CDB
Certificate serial:       485C5F455B48DB037FDB1F7FDEF3BB47BE3B2FAE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
Manifest number:          01CF
Signing time:             Fri 31 Jan 2025 16:01:52 +0000
Manifest this update:     Fri 31 Jan 2025 15:56:52 +0000
Manifest next update:     Mon 03 Feb 2025 18:06:52 +0000
Files and hashes:         1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: 2UGNVRtkXVCUtQqsKe3zhD5GUB+So6WovbXP+eTRTSQ=)
                          2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:5f:45:5b:48:db:03:7f:db:1f:7f:de:f3:bb:47:be:3b:2f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB
        Validity
            Not Before: Jan 31 15:56:52 2025 GMT
            Not After : Feb  3 18:06:52 2025 GMT
        Subject: CN=F9080F3BBB339B017E49B253E55F7C4EA72A17FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:53:83:54:8b:85:1a:64:fb:1a:46:24:38:
                    5f:33:a3:a9:a0:0e:b2:e8:00:f7:65:3e:68:0a:fc:
                    f2:a8:3d:af:fe:77:e2:40:7b:fe:d3:4e:80:2f:8d:
                    ac:96:ae:a4:f3:4f:dd:33:11:b4:ef:52:b0:ee:33:
                    a0:16:66:0a:0e:dd:d8:7d:24:9a:4c:dc:20:39:00:
                    d7:f6:df:72:81:b1:38:62:d6:25:13:7c:52:12:e7:
                    6d:cf:9c:be:6a:79:50:f2:6e:4d:63:6d:07:54:0d:
                    e9:b5:af:77:a5:ea:53:38:12:28:9e:7e:dd:62:78:
                    8e:0a:ce:04:15:44:00:9a:03:6c:43:b7:bf:8c:71:
                    21:66:b6:0d:c1:48:1c:df:3a:f3:a1:36:93:29:fd:
                    e5:74:20:72:b1:58:c1:54:93:fc:1d:3f:40:47:84:
                    7f:de:6d:f8:34:31:69:fe:2a:8a:d3:09:74:22:8d:
                    38:39:bf:43:88:dc:e8:da:28:12:aa:31:3a:60:29:
                    9d:ab:ee:69:4f:77:9e:a1:bc:d4:e8:a4:2f:59:94:
                    2b:46:c2:8f:3d:37:90:5c:45:06:2c:a2:c3:03:6f:
                    90:76:8e:b3:53:d4:66:05:1b:6a:0e:2c:5b:2a:7f:
                    e9:d1:df:20:bd:ec:13:68:bf:a1:f3:0b:75:84:b0:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:08:0F:3B:BB:33:9B:01:7E:49:B2:53:E5:5F:7C:4E:A7:2A:17:FE
            X509v3 Authority Key Identifier:
                keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6d:9b:13:c4:47:93:54:8e:df:4f:81:e1:10:b1:6d:fd:1e:
         60:5b:f7:f3:f2:8e:55:63:27:ae:37:da:86:3c:51:40:ed:ed:
         48:93:75:8c:31:01:f5:53:67:49:67:b5:91:bd:82:8c:5e:93:
         df:fb:3f:f5:e5:a7:1c:12:9a:5f:4f:0b:13:f6:ad:6b:48:4d:
         21:ff:57:e3:08:15:ad:2a:19:a5:f9:91:d9:7f:bf:96:ee:67:
         24:18:c6:fe:21:93:55:a3:dc:c0:d8:15:65:6e:13:75:1e:20:
         69:6d:96:10:23:9a:4a:9c:d5:33:07:dc:90:63:d1:54:08:0b:
         e3:95:e8:3d:80:73:27:8c:fc:0c:e6:56:3c:85:e7:ea:9b:da:
         7e:41:c9:74:a5:5e:6c:5f:4d:d6:08:d8:33:4e:80:d7:12:22:
         a3:52:2c:da:61:63:45:20:78:6c:20:ff:3d:35:61:3b:7e:3d:
         c3:b5:22:9a:59:69:bc:9d:55:26:fc:2c:dd:89:b7:4b:7d:6f:
         91:08:d5:e1:1b:4f:e5:59:a5:31:8e:7f:2e:b1:94:18:7f:9f:
         d4:ed:bf:ba:a3:34:32:f6:d6:ec:33:56:e0:94:4c:10:35:3d:
         31:84:1e:6b:63:89:40:bf:f4:8e:59:b7:03:0d:a7:71:b4:55:
         2c:4c:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:27 2025 by rpki-client