Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft
File:                     8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json)
Hash identifier:          r2+NEnXgmRyXYQbKeUoV7e70TeOoIryp3WOSJmOL9Nw=
Subject key identifier:   52:22:00:B0:69:08:28:DF:41:A0:47:6D:31:DA:0E:06:49:D6:3A:9A
Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F
Certificate issuer:       /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F
Certificate serial:       5D1C41389D132CCA9B596325E4514C211B30B23C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft
Manifest number:          3A
Signing time:             Fri 31 Jan 2025 13:50:51 +0000
Manifest this update:     Fri 31 Jan 2025 13:45:51 +0000
Manifest next update:     Mon 03 Feb 2025 21:43:51 +0000
Files and hashes:         1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: xXGIiOCi16aSIAdcWsYtb5dFw8ivzbyg2sk/tAptElM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1c:41:38:9d:13:2c:ca:9b:59:63:25:e4:51:4c:21:1b:30:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F
        Validity
            Not Before: Jan 31 13:45:51 2025 GMT
            Not After : Feb  3 21:43:51 2025 GMT
        Subject: CN=522200B0690828DF41A0476D31DA0E0649D63A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:59:7a:a8:38:fe:6d:20:88:a2:25:b0:7b:
                    68:6e:9e:3f:0a:95:7b:ef:dc:62:52:06:8b:cb:77:
                    f1:4e:16:8a:14:8f:2a:fd:32:8c:ab:fa:0a:a0:f1:
                    a6:36:93:b3:10:7d:d2:9a:61:c8:9d:cf:a0:80:b2:
                    41:36:c5:ec:c8:1d:11:9e:f3:f2:96:92:e0:22:6d:
                    6c:0b:a7:8a:41:41:0f:d2:77:52:32:a2:48:8f:fc:
                    b1:dd:93:8d:1d:1f:93:35:4a:11:fb:f2:5d:de:7f:
                    27:63:5a:02:70:5a:f9:9a:46:26:71:65:93:be:e8:
                    c6:c8:63:a7:1b:de:52:a9:9b:3a:e6:09:ee:24:f1:
                    7c:7e:a4:98:bd:de:f1:74:62:16:31:68:f3:25:23:
                    e9:94:2a:10:9c:d8:a2:2c:8a:10:b8:fd:a2:96:64:
                    55:3d:ee:7b:76:56:e8:b0:a6:c0:27:75:d6:38:b9:
                    c4:ee:9f:ef:9b:37:56:ac:c8:c0:7b:fc:2a:38:91:
                    71:60:83:65:62:1a:5d:ea:86:b0:04:77:89:30:24:
                    69:f8:dc:b3:58:92:39:d1:97:45:e6:a3:6a:a7:75:
                    39:d2:3d:08:2e:8a:b5:05:25:05:2f:53:ba:9d:cb:
                    d1:53:51:08:3f:ff:f3:bf:db:ec:53:9d:ed:24:a5:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:22:00:B0:69:08:28:DF:41:A0:47:6D:31:DA:0E:06:49:D6:3A:9A
            X509v3 Authority Key Identifier:
                keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2a:03:3a:8e:93:d6:41:e2:d6:b6:fa:a8:2f:5a:c7:d8:1f:
         8f:bf:da:6e:64:23:e1:ee:c1:c1:a2:e4:24:cc:a1:f8:85:05:
         5d:90:c5:be:30:89:78:d7:cb:a8:dd:e8:d9:06:58:69:64:4c:
         0d:2e:2a:8c:ab:2e:75:8d:52:37:4c:b8:35:f8:ee:29:3e:8c:
         10:80:23:43:97:52:94:06:37:39:59:d9:13:e3:6e:73:bd:32:
         97:c5:1d:d5:ae:8a:be:4a:2b:96:bf:52:8d:40:4d:e3:56:fc:
         f5:e2:26:49:17:6d:66:2a:51:d3:51:4b:d2:f3:6f:25:f6:6f:
         49:f9:31:45:16:1d:73:4e:62:05:5e:72:c8:cb:44:19:57:6e:
         80:8b:08:2d:3b:3e:31:d0:39:91:2a:f0:60:98:da:bd:91:68:
         ad:99:96:39:4a:4d:1f:87:24:0e:b4:1d:72:07:c4:43:d3:cd:
         34:43:49:e2:7c:57:7b:d6:0d:0d:bd:0e:55:a9:4e:67:c9:8d:
         f1:17:e5:95:6c:83:a8:46:3f:41:75:0c:e8:44:28:8c:8d:31:
         85:30:9d:88:45:64:17:f9:de:70:32:a2:d8:67:2c:d0:39:c7:
         09:0a:6b:43:9b:8b:0f:f4:c1:2d:66:3a:3c:75:b3:b9:9e:c7:
         22:d5:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:22 2025 by rpki-client