Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
File:                     9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json)
Hash identifier:          NdUkDLl0aYEgY9VZzLDHOoxmrofMTSkmb6GVg1gZ77U=
Subject key identifier:   7F:AC:D2:67:BF:94:DE:38:19:E4:CD:43:AF:73:CA:2C:DF:B5:B0:6B
Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A
Certificate issuer:       /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
Certificate serial:       72DBD67879DB53BD798B69E604E4B65263B4F186
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
Manifest number:          0308
Signing time:             Fri 31 Jan 2025 10:41:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:36:37 +0000
Manifest next update:     Mon 03 Feb 2025 11:01:37 +0000
Files and hashes:         1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: mqXY8BFZ+JLNLmvYn+igyMicJ23nXAOT37Wg8TkTP0U=)
                          2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: 1oBi52XFtqvCZ2a4BZr5dEnnF9q5LEbCYvbvAxUbvWY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:d6:78:79:db:53:bd:79:8b:69:e6:04:e4:b6:52:63:b4:f1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
        Validity
            Not Before: Jan 31 10:36:37 2025 GMT
            Not After : Feb  3 11:01:37 2025 GMT
        Subject: CN=7FACD267BF94DE3819E4CD43AF73CA2CDFB5B06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:17:5c:0c:a6:ee:8e:f2:3c:3d:12:df:55:
                    e0:d0:13:49:49:86:4c:e6:c7:4d:15:75:22:10:d8:
                    2f:c3:b1:6b:46:e9:17:58:ea:2d:70:88:0c:6d:8a:
                    f6:e6:5e:ec:d6:3b:69:f8:8c:d7:a9:34:ec:e7:fd:
                    b4:2f:e9:c3:1b:8e:8e:46:e8:c2:4b:9c:c1:c0:ce:
                    fb:2a:c6:00:69:b7:45:15:86:53:7f:16:9c:64:05:
                    0f:d9:9b:b8:03:d5:db:61:17:2c:6b:58:01:0b:9f:
                    05:3d:ad:d4:28:42:2a:c1:59:f1:31:ae:1f:ac:80:
                    7d:28:9e:f5:e4:16:92:8d:95:65:32:70:f3:9b:7c:
                    c8:7d:b9:37:9a:ac:e4:e0:b5:dd:29:e2:08:dc:fa:
                    31:ad:3c:39:70:1f:2b:18:4d:52:6a:c6:93:72:e4:
                    7d:f1:d2:d6:76:0c:46:7a:f0:35:22:59:d9:d4:40:
                    cb:72:8b:c8:f6:58:04:ba:ec:3b:ca:8a:b6:78:ca:
                    d6:2e:ec:9c:af:42:7a:58:a2:33:2a:c1:f6:91:9a:
                    4d:38:c3:d2:67:a6:21:ec:09:b0:5c:b7:0e:00:7e:
                    29:6d:3e:9b:bb:d8:d9:d6:a0:32:3d:d2:27:48:4c:
                    a4:b7:e7:50:1a:86:b9:ad:30:86:39:c6:74:5d:58:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AC:D2:67:BF:94:DE:38:19:E4:CD:43:AF:73:CA:2C:DF:B5:B0:6B
            X509v3 Authority Key Identifier:
                keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:41:27:92:21:d2:b6:34:19:34:16:47:76:44:ec:5c:9a:75:
         87:29:a8:78:fa:a3:c2:4a:3e:0e:3d:59:68:47:5e:8b:e6:01:
         0d:a9:64:b4:d9:55:dd:aa:33:43:9b:7e:a3:ef:72:4b:7c:c8:
         60:02:ef:90:9d:49:bb:45:c8:22:07:8f:7f:8c:76:6c:8d:b4:
         51:72:6e:2a:d4:1c:5f:a7:b3:84:b2:a5:60:b9:ea:ba:d3:e2:
         a4:8a:5d:d3:4e:ed:bb:d9:ac:2f:db:05:44:6b:da:89:7e:12:
         58:98:3a:51:5c:5d:ca:53:61:58:b8:a3:41:42:11:23:21:a7:
         d5:b8:a9:ed:49:0c:c1:a2:90:27:d3:1a:6e:1f:64:8b:fa:a3:
         a4:ca:b1:23:26:58:29:7b:27:0c:f1:5f:3e:24:bc:89:20:81:
         7a:5c:08:4e:28:75:70:23:d6:a1:be:e3:c7:02:b4:5e:63:26:
         d3:7a:65:40:e9:21:05:76:ec:5a:bd:f5:00:1a:bd:4a:3d:50:
         d1:e4:e5:7e:ca:3b:a9:36:36:83:76:3b:5d:6b:0f:e5:a0:27:
         21:d1:00:ca:d9:25:d4:6a:b6:16:52:8b:bf:d4:bf:f1:05:76:
         37:2b:f4:da:29:7f:a2:cd:af:66:2f:38:53:54:da:b6:b6:be:
         2d:3f:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:50 2025 by rpki-client