Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
File:                     17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json)
Hash identifier:          khn0QuNzTmgI59oONSaT11vhNOraKVsBuhIkRoW1uXM=
Subject key identifier:   D6:17:BA:9F:C6:A5:9C:7B:B9:BE:33:4E:1C:05:E9:72:87:05:38:CC
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       7A015B0CFB4D1F0F0F09ABF43F640B705C823E66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
Manifest number:          0157
Signing time:             Fri 31 Jan 2025 06:31:14 +0000
Manifest this update:     Fri 31 Jan 2025 06:26:14 +0000
Manifest next update:     Mon 03 Feb 2025 11:12:14 +0000
Files and hashes:         1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=)
                          2: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: nE9FdJSFTs/bFxooOlNS9j7e86z7Htly3+tehzt3JWw=)
                          3: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:5b:0c:fb:4d:1f:0f:0f:09:ab:f4:3f:64:0b:70:5c:82:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Jan 31 06:26:14 2025 GMT
            Not After : Feb  3 11:12:14 2025 GMT
        Subject: CN=D617BA9FC6A59C7BB9BE334E1C05E972870538CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:5f:e7:57:fa:28:e3:41:ec:c0:af:9f:3b:
                    37:48:48:16:70:3e:97:ca:36:13:7e:67:51:ce:71:
                    1e:43:ee:eb:57:ab:50:30:75:d8:74:fe:3d:45:87:
                    1f:29:c9:fb:0d:93:d0:18:77:20:94:12:1b:f9:4f:
                    82:68:71:60:db:d1:f8:4a:78:41:c7:be:30:a2:bb:
                    6a:b1:93:b7:8d:e4:ff:51:d1:97:b3:17:50:95:65:
                    20:e9:81:04:4d:91:6c:86:33:f1:cb:0d:88:17:8a:
                    24:35:58:57:5f:51:a4:ba:82:5f:2b:be:c9:8f:ba:
                    fe:70:3e:f0:b2:d3:19:8f:e8:88:14:f3:f7:ec:b8:
                    da:5b:c8:7c:69:0c:bc:81:96:08:ff:26:0f:c7:2b:
                    b4:c8:4b:e8:9d:b0:fc:ca:af:f7:88:23:39:3b:b4:
                    ac:16:47:ab:df:d0:06:d1:2b:42:63:ae:53:88:53:
                    d7:4c:bc:61:ee:a1:65:e2:3a:97:ba:f9:6d:91:b1:
                    61:c7:40:1c:d7:64:95:b3:4a:f1:13:40:8e:39:b3:
                    c0:6c:77:ad:7f:af:2a:ae:4e:b2:b3:45:bd:1a:8d:
                    cc:a4:d4:6a:a8:81:c3:42:96:ff:5e:38:df:fe:d8:
                    05:67:19:c4:9d:d5:98:71:0e:0f:7c:6c:a4:04:2c:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:BA:9F:C6:A5:9C:7B:B9:BE:33:4E:1C:05:E9:72:87:05:38:CC
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:04:9f:ea:04:85:59:1c:0e:1a:df:75:23:27:db:68:a1:8e:
         a6:5f:47:60:41:81:c3:0c:a0:46:73:c4:94:30:ea:5f:2c:ae:
         a4:94:b8:07:90:85:8b:ca:b6:6e:be:5c:74:93:14:85:bf:ac:
         45:b3:2b:f3:42:16:94:67:14:c2:9e:dd:87:a4:2a:ec:26:f9:
         bc:a9:ec:30:bf:6c:88:50:09:0a:5b:99:6f:7e:9d:e4:d6:9e:
         9d:8d:2b:0f:0a:03:a6:7b:a9:d6:4f:7e:bc:49:f9:ac:44:9e:
         3a:ff:88:6c:60:e9:e4:2e:83:98:05:13:32:31:42:76:3a:cb:
         99:86:6c:ab:d5:93:67:1d:fa:60:58:e8:c8:2b:75:0b:e9:ca:
         1e:1d:02:64:e9:a5:5b:18:09:42:36:e3:43:37:44:27:5e:c0:
         38:5d:16:96:1d:10:42:6e:1f:f6:f1:02:91:88:05:7a:7c:4b:
         5e:96:80:f5:22:c7:b0:1e:93:62:5d:fa:11:9e:a9:f4:ba:99:
         94:93:f7:56:38:87:14:e3:37:6b:d7:92:6e:8a:02:d2:82:18:
         5c:00:ba:c2:cc:fc:39:c3:5a:b7:48:e0:e8:19:06:3c:3c:19:
         2e:fa:10:f8:d8:fc:1c:57:27:b7:d0:e2:0a:93:18:c5:6a:ad:
         0d:5f:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:12 2025 by rpki-client