Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft
File:                     407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json)
Hash identifier:          JTMKf1L3EDovFtSOcRsBiwEA4YQ1OX6lU/tih3S5N/g=
Subject key identifier:   24:4C:A7:C0:11:CF:11:99:01:B6:BD:8B:BE:7F:85:DC:64:47:96:E7
Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
Certificate issuer:       /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Certificate serial:       0A66C7E9104282838B17A59A7D14EAC8F752DADD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft
Manifest number:          52
Signing time:             Thu 30 Jan 2025 23:12:15 +0000
Manifest this update:     Thu 30 Jan 2025 23:07:15 +0000
Manifest next update:     Mon 03 Feb 2025 03:27:15 +0000
Files and hashes:         1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: haTibr3tt22zSchSW2+rcU9iqZLSDGd/xcHfzqqfZOo=)
                          2: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo=)
                          3: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: 1WiuBimsjX8JH4hlvStF/RZstZLOhaJb5qe0DUeoGeQ=)
                          4: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:66:c7:e9:10:42:82:83:8b:17:a5:9a:7d:14:ea:c8:f7:52:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
        Validity
            Not Before: Jan 30 23:07:15 2025 GMT
            Not After : Feb  3 03:27:15 2025 GMT
        Subject: CN=244CA7C011CF119901B6BD8BBE7F85DC644796E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:29:81:5a:6d:89:b9:81:c4:a8:78:2e:4d:
                    75:28:9c:c7:a8:90:67:5c:4f:5d:30:f6:8c:9d:0a:
                    2a:08:f7:ab:a2:08:5c:83:99:7b:9b:bf:08:95:82:
                    65:64:5f:6a:08:f5:a4:72:b0:bd:7e:fb:5a:0a:9f:
                    44:56:ae:d5:8e:31:1c:69:54:e1:b0:6e:cd:aa:08:
                    a7:58:2f:0c:66:0c:ef:e2:17:a9:f4:ce:68:8e:55:
                    41:ce:3f:9c:77:94:62:ca:fe:a2:5a:8f:29:0c:c8:
                    da:85:d4:b0:9b:73:67:0a:bf:93:aa:98:fe:b8:43:
                    e8:9b:b5:22:d1:94:0e:e2:d6:5e:eb:75:97:62:25:
                    05:07:a0:c0:19:41:9d:a4:fd:77:1a:2a:08:86:6b:
                    48:25:80:3f:8a:08:2b:b4:5f:ec:e9:04:22:fc:ec:
                    f5:bd:e7:19:f6:c3:e4:d4:3c:20:d9:86:f1:94:2f:
                    1d:0d:8e:80:7d:7a:07:58:3e:76:54:46:28:8d:18:
                    1d:48:cd:9a:fb:66:a5:5e:ca:18:02:7d:6e:89:f8:
                    21:e7:68:d9:a4:e4:9e:4d:c0:ca:1c:e0:5e:c5:08:
                    d5:e2:e7:06:e5:df:be:9a:57:88:85:68:ff:f2:45:
                    58:dd:68:75:a0:cc:78:17:e0:c6:3e:37:8b:0c:07:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:A7:C0:11:CF:11:99:01:B6:BD:8B:BE:7F:85:DC:64:47:96:E7
            X509v3 Authority Key Identifier:
                keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:cd:99:ec:15:ec:e2:0f:66:bb:fc:e4:ff:38:1f:a7:38:
         22:ad:09:7f:ad:97:70:ea:d5:af:64:37:26:f7:45:52:ac:91:
         c8:ab:64:67:22:94:7e:81:61:91:31:ca:86:0b:77:73:aa:1a:
         8e:d9:77:71:45:78:7d:2a:12:e6:69:7c:a1:92:c9:63:90:98:
         45:e0:09:7f:b5:0a:1a:e5:a5:45:83:9f:df:86:1c:96:f1:50:
         bd:1d:da:b0:c2:b8:8c:df:76:61:39:aa:01:87:59:10:64:52:
         eb:1f:34:88:68:c2:87:61:d1:e0:c6:23:5c:e6:64:25:b3:2b:
         e6:5d:a3:a1:85:31:84:2e:37:50:4b:da:42:d5:99:c5:e6:7e:
         62:69:ee:b3:e8:36:03:ca:2f:c1:f5:ea:71:04:51:ce:70:03:
         04:7b:d0:1e:78:4c:6a:47:cf:55:78:38:15:b7:15:ec:be:9a:
         08:97:34:98:58:e7:9c:c6:4d:3c:92:32:e0:1a:06:ed:c4:dd:
         03:86:da:94:a5:8b:21:11:59:ab:ef:b7:bb:1e:44:dd:16:bd:
         c3:e4:8c:84:89:c8:50:a5:dd:f5:3b:e4:c6:60:4a:03:8f:31:
         b2:86:38:30:f2:00:d2:02:f2:67:94:6d:ee:7a:8f:11:33:31:
         49:6a:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:07 2025 by rpki-client