Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
File:                     D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json)
Hash identifier:          s+T5BjNaOv/f8u1EdhgJj4HNAI71GOqaIDCSBxeevzU=
Subject key identifier:   AD:9B:84:D7:03:3E:8D:F5:56:C7:7F:8A:54:68:2A:85:B3:C5:D1:F8
Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62
Certificate issuer:       /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
Certificate serial:       2CE41D4E3E5F85401A49A4C04299EAF870CF1E24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
Manifest number:          98
Signing time:             Thu 30 Jan 2025 15:52:13 +0000
Manifest this update:     Thu 30 Jan 2025 15:47:13 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:13 +0000
Files and hashes:         1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=)
                          2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: GG/hbZRGc9UJUmJ4JPSVb3zIEJkR6wnzE1PjhgqAZRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e4:1d:4e:3e:5f:85:40:1a:49:a4:c0:42:99:ea:f8:70:cf:1e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
        Validity
            Not Before: Jan 30 15:47:13 2025 GMT
            Not After : Feb  2 23:00:13 2025 GMT
        Subject: CN=AD9B84D7033E8DF556C77F8A54682A85B3C5D1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:cf:84:1e:3c:d8:a2:2e:b6:d7:46:99:b7:
                    05:bc:a1:ed:bd:28:82:4d:7d:ab:3f:4f:b5:50:ec:
                    92:66:54:57:6d:3a:aa:2a:52:82:e6:da:e0:9c:cb:
                    c9:ff:49:3d:53:91:d9:ae:92:28:24:ff:25:06:0a:
                    17:b9:a9:54:4e:d4:de:f6:33:9f:ee:ec:dd:f3:ef:
                    b4:42:d8:59:28:5f:76:e6:9b:6d:95:53:b3:21:4e:
                    38:ba:57:d4:82:70:43:2c:55:48:d5:51:e9:43:49:
                    ca:d9:3e:61:43:f4:82:51:f6:cd:41:ad:cd:47:7a:
                    37:4a:ca:f4:19:f5:8a:b4:4a:1c:1c:04:9c:11:3e:
                    ae:f7:f3:98:ff:3e:2f:e1:03:da:0d:49:da:dd:7b:
                    5d:9a:8b:40:fd:4e:91:f2:2f:d3:e0:ac:01:fc:38:
                    56:40:65:4a:4a:c3:b3:0f:df:56:9e:b2:69:6d:0e:
                    79:5f:4e:fc:74:55:2b:a1:c3:13:5f:97:c6:ba:82:
                    3b:31:eb:fa:99:1d:71:68:32:46:0d:13:9b:80:55:
                    a0:15:02:af:c8:e3:36:e4:7c:f0:7e:92:70:8f:d8:
                    2f:eb:ea:9c:6c:c5:03:b7:b7:a4:22:c0:2b:75:cb:
                    77:c2:8c:0e:08:54:b3:84:7e:4d:f7:39:95:eb:03:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:84:D7:03:3E:8D:F5:56:C7:7F:8A:54:68:2A:85:B3:C5:D1:F8
            X509v3 Authority Key Identifier:
                keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:e0:08:f5:83:49:29:9e:25:ea:80:4b:d8:08:e9:e9:54:
         8d:92:57:67:59:a9:66:6d:5b:04:f2:a0:e3:96:65:c9:33:6e:
         f2:fc:ee:80:1e:f1:7a:bc:d4:2d:9b:b3:c5:57:51:d6:0e:55:
         e4:b5:4d:39:77:57:e0:0b:01:cb:3c:04:19:af:b5:4c:d9:49:
         73:6f:3a:36:18:42:be:98:c4:2f:b9:41:15:94:93:6e:e8:e3:
         72:41:a2:e8:1e:f0:f7:48:41:57:61:0b:d3:e7:1c:b1:dd:0e:
         e6:58:45:85:68:51:a3:ea:17:40:b8:61:a8:2c:25:d6:c6:43:
         e3:7a:7c:82:a8:fe:6e:12:49:db:f1:e0:d6:1f:a4:d2:04:f6:
         0f:1e:14:1a:e4:18:3b:53:98:c9:ee:fc:11:c1:c1:03:51:ec:
         3f:41:e6:f6:0a:c5:fd:40:c1:d2:a7:34:06:8d:28:95:73:3f:
         1b:41:5d:41:cd:86:a2:aa:69:12:a2:72:f5:00:6e:29:4e:9e:
         bf:7c:e1:d4:78:aa:78:db:8a:9e:78:1c:16:13:de:cd:f6:4a:
         38:1b:da:e1:ee:df:2a:ad:2a:99:77:c5:22:68:fd:4f:0e:4d:
         73:bf:ec:d9:2a:c4:d7:60:64:49:7e:1b:6e:bc:3d:c1:1d:7c:
         b3:be:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:40 2025 by rpki-client