Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft
File:                     85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json)
Hash identifier:          7BPAonMAB1MBRfha1fQXXrlJM5wRWO95zx0ElHT3qr0=
Subject key identifier:   41:40:37:DD:93:FC:1F:92:EE:D4:C0:F3:00:9D:B8:AF:AC:07:76:5C
Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3
Certificate issuer:       /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
Certificate serial:       79406C53213F3F0599C83B5DF68DCAF6DB98210B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft
Manifest number:          023A
Signing time:             Thu 30 Jan 2025 23:21:34 +0000
Manifest this update:     Thu 30 Jan 2025 23:16:34 +0000
Manifest next update:     Mon 03 Feb 2025 07:16:34 +0000
Files and hashes:         1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=)
                          2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: PGsKI6Fzbv4ZC7nhybp6++oL0pUbAYORLeAo22ihSr4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:40:6c:53:21:3f:3f:05:99:c8:3b:5d:f6:8d:ca:f6:db:98:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
        Validity
            Not Before: Jan 30 23:16:34 2025 GMT
            Not After : Feb  3 07:16:34 2025 GMT
        Subject: CN=414037DD93FC1F92EED4C0F3009DB8AFAC07765C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:7f:c9:35:ea:00:85:ad:78:67:37:28:8a:
                    65:95:86:dc:0b:ee:45:30:e5:12:90:21:48:69:de:
                    73:5f:ec:a4:78:45:26:d5:e3:1b:06:94:f0:79:66:
                    25:64:88:bb:e4:69:b0:3a:24:53:95:2b:a0:87:4d:
                    16:33:15:eb:13:6f:f9:c9:dc:ba:43:6a:91:86:13:
                    6e:a7:40:8f:c4:3e:ac:24:f8:82:3b:61:d2:b2:fb:
                    80:29:65:e5:d6:80:9f:1f:d7:24:5c:b1:aa:bd:65:
                    43:f4:b1:ba:bd:4f:04:26:73:a0:4a:e8:6e:6a:cf:
                    aa:24:7c:b0:76:41:bd:87:23:31:8c:8f:ce:d9:da:
                    53:15:79:9e:aa:7e:67:f4:a2:92:0d:32:b9:22:f3:
                    e7:20:3c:20:98:e1:98:1a:1c:4f:4d:5c:7c:11:15:
                    6b:2a:81:16:7a:71:f6:7f:b3:7b:be:cf:5b:39:0d:
                    cf:39:30:0c:b2:dc:60:a2:57:8f:f1:28:f8:40:44:
                    4b:cb:2b:2a:e6:55:d3:38:38:be:e4:16:22:d3:24:
                    24:58:b4:d1:18:92:e1:a8:79:de:1b:89:cb:95:4b:
                    ca:b1:76:61:6a:f0:07:c8:e2:4a:0e:d6:c7:65:2b:
                    57:36:55:a7:b1:24:31:df:8c:2c:0e:59:12:51:eb:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:37:DD:93:FC:1F:92:EE:D4:C0:F3:00:9D:B8:AF:AC:07:76:5C
            X509v3 Authority Key Identifier:
                keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:e0:62:80:30:1b:24:90:13:fb:18:4c:dc:ba:f3:ae:29:
         68:c0:f1:be:31:d7:99:ce:e3:17:0c:eb:ee:9a:21:58:56:1c:
         99:6f:07:49:4a:5d:3a:b7:ad:51:6c:24:f6:be:d2:36:70:92:
         b0:21:c9:55:22:ed:91:36:28:fb:bd:eb:75:f7:fd:04:6a:45:
         d0:42:da:65:6a:05:63:0c:d8:aa:ae:44:a0:ee:2a:25:57:36:
         9d:31:f4:e2:86:f1:37:f9:e6:ce:e1:0b:b1:7c:95:46:4d:6a:
         3f:f5:9c:6b:e7:c8:c5:d1:54:0a:44:c9:21:79:99:e4:8f:2b:
         b7:b5:19:47:10:ca:75:ce:7b:6f:6f:95:bf:7a:e0:7e:db:92:
         25:9a:bb:4b:07:32:00:c4:1a:2e:90:84:b2:11:cf:b1:b7:f7:
         dd:84:9a:ad:8b:66:30:e4:3a:a6:5b:bc:60:03:6f:a0:9e:1e:
         47:d3:fa:e9:95:d0:88:0c:65:da:49:49:53:4b:6a:53:81:7a:
         5a:41:c8:4f:04:b2:a0:0e:d7:ec:f6:61:0d:19:0b:fc:9b:31:
         a3:ed:0a:28:10:0d:b2:b5:be:5e:1e:04:be:c6:ef:7f:27:8b:
         e0:86:9a:f5:99:a7:ca:1e:af:55:39:a1:05:1a:0e:e7:50:b1:
         4a:3d:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:46 2025 by rpki-client