Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
File:                     DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json)
Hash identifier:          sKnF3sGjLQuZETYKha6s1sygj46E9Fn8pih/P1xngIo=
Subject key identifier:   AC:CA:00:A4:D2:CA:96:47:F2:0A:AA:F6:A3:42:32:31:4C:4F:E4:6A
Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
Certificate issuer:       /CN=DFE92467290F9E190072585C1045251D6F8B05A3
Certificate serial:       2B90BA869D66D4B83D8171EBF8EA0F390272479B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
Manifest number:          01CF
Signing time:             Fri 31 Jan 2025 14:22:16 +0000
Manifest this update:     Fri 31 Jan 2025 14:17:16 +0000
Manifest next update:     Mon 03 Feb 2025 22:22:16 +0000
Files and hashes:         1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=)
                          2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: OILMMQ5wlY5sDUBEmth56+pwtOiyUSdLeP2bd9sWFeM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:ba:86:9d:66:d4:b8:3d:81:71:eb:f8:ea:0f:39:02:72:47:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3
        Validity
            Not Before: Jan 31 14:17:16 2025 GMT
            Not After : Feb  3 22:22:16 2025 GMT
        Subject: CN=ACCA00A4D2CA9647F20AAAF6A34232314C4FE46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:03:77:02:a3:f9:d6:ef:2b:f2:6c:76:1b:
                    ea:9f:0d:bb:91:9d:1b:64:aa:1d:9e:4b:2a:00:de:
                    5e:8d:4c:a8:0a:9e:57:52:aa:16:60:e8:79:18:2b:
                    81:06:a4:f2:0c:fb:41:dd:aa:9d:63:99:e9:d6:ca:
                    da:35:f9:f0:5a:88:37:38:29:f3:44:97:69:74:d2:
                    35:1b:2e:4b:69:3f:31:c5:9d:86:08:7f:d2:22:d4:
                    73:56:5c:9b:06:2f:b0:ee:b0:e2:cd:67:ae:99:71:
                    58:80:84:73:e4:fa:2b:fd:ec:36:08:2e:c9:11:fa:
                    02:ec:d0:10:f3:a7:05:36:32:48:f2:1e:54:ce:ad:
                    be:2e:db:b7:db:51:2f:03:60:e9:3b:50:10:45:38:
                    dd:f7:8f:97:33:56:3a:ee:61:f5:1e:c6:cf:87:06:
                    ae:92:db:f2:4c:2b:20:73:86:68:13:c7:f8:ff:80:
                    14:92:a1:0f:d8:e5:58:3a:df:ba:aa:e7:65:6c:66:
                    5a:9e:f1:71:90:f0:bc:bb:60:bf:5f:5e:27:8e:6d:
                    ad:c5:4c:b9:33:5d:f1:44:a1:6e:9c:47:b7:89:e6:
                    4e:63:78:d8:3e:6e:36:00:f7:e4:60:72:7b:ac:71:
                    5f:88:c9:d7:f5:29:f3:b2:79:05:b3:10:86:01:29:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:00:A4:D2:CA:96:47:F2:0A:AA:F6:A3:42:32:31:4C:4F:E4:6A
            X509v3 Authority Key Identifier:
                keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:0d:5c:70:a1:ca:42:f2:9a:2e:ce:c1:1a:6c:6e:82:60:
         e6:ff:02:b9:65:5f:8a:bf:da:3a:76:3b:1d:47:f5:55:72:94:
         54:1e:cd:ff:46:92:41:1c:48:dc:7b:e2:a7:be:da:2f:bb:68:
         05:30:e7:55:b1:c1:da:e6:24:f2:1b:ff:ff:bf:5d:0d:16:8e:
         a4:cb:17:91:a4:89:20:4c:dc:0c:d1:d2:fa:53:bd:fa:d7:00:
         a6:e3:d2:20:43:e2:7e:e4:c3:78:26:4e:47:59:20:76:0e:cd:
         62:b4:a3:2c:a8:51:8f:bc:7a:6e:a2:ba:cc:fa:cb:83:c8:f1:
         fa:54:f7:39:27:f4:82:59:17:1f:b8:d2:70:ba:8f:ce:63:b7:
         2c:56:4f:0e:19:75:5f:73:60:73:02:6c:ce:a8:f2:40:e4:de:
         7c:ec:6a:e3:6a:9e:eb:5d:2a:61:6c:45:77:f5:5b:1c:6c:4c:
         91:cd:71:e6:53:c2:d2:f7:5a:b8:b5:34:6d:d0:30:e3:ab:09:
         44:25:4e:58:9f:d9:dd:d0:1a:6e:30:5e:53:dc:77:1f:c0:62:
         c8:70:71:f3:65:84:19:b8:9c:22:36:d5:a3:46:97:b9:f3:41:
         70:b0:24:2c:67:80:d1:77:47:4e:02:97:cf:3b:f6:be:20:37:
         64:e4:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:29 2025 by rpki-client