Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft
File:                     7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json)
Hash identifier:          cuzsPRaGEoCsr8wBQP71VLl4bWJy2I1tDo0HekJw6pI=
Subject key identifier:   A3:11:CC:B7:11:FF:BE:DB:CA:A4:0A:69:83:D4:93:CD:C3:8F:38:B5
Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4
Certificate issuer:       /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4
Certificate serial:       4F8F8ECB19AC7408432946D8F1CD5514FC8ADAC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft
Manifest number:          01CA
Signing time:             Wed 29 Jan 2025 11:41:38 +0000
Manifest this update:     Wed 29 Jan 2025 11:36:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:54:38 +0000
Files and hashes:         1: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: 2/BO5q4FxJ0TtWaXRvmAYcsGvqXuzC7OVHrzQY+oShQ=)
                          2: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 8BgGQFKQndoiET6mUnD+3KzPxt+C7HWtTI69H8u0uKU=)
                          3: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: QqxLlg6AIt3Z6hs25/44Fix6O8JKPcog58K60T/OD40=)
                          4: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: wc8vaORuO6YGru+QYIoMg5FerWzrR5B/rJOP4jftbB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8f:8e:cb:19:ac:74:08:43:29:46:d8:f1:cd:55:14:fc:8a:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4
        Validity
            Not Before: Jan 29 11:36:38 2025 GMT
            Not After : Feb  1 18:54:38 2025 GMT
        Subject: CN=A311CCB711FFBEDBCAA40A6983D493CDC38F38B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:37:ff:a2:db:fa:f7:16:6c:1e:aa:ea:66:
                    f2:3b:58:ae:ef:9b:ee:17:2d:8b:af:d6:bd:14:d7:
                    a4:c1:d3:fa:8d:60:f8:64:18:6b:7f:d2:6c:f3:a1:
                    1b:3e:fd:76:ed:dc:7a:3e:36:3d:2b:d1:10:11:d1:
                    25:1c:6a:98:cd:18:8c:d1:3a:7b:84:ea:54:e0:fb:
                    98:b0:a6:6c:6d:77:e4:60:f9:a6:d2:ae:16:55:da:
                    f3:6b:a2:b4:9b:5f:de:b9:8e:29:62:c2:d4:4b:15:
                    b3:9e:4e:02:cc:7f:a3:ac:e0:e4:d4:17:a1:20:da:
                    fb:36:e6:34:19:0e:d7:2a:a6:dc:1d:10:2a:c8:57:
                    4d:d0:3a:fd:67:b9:a3:de:59:3f:e5:86:98:11:4d:
                    2e:f5:43:56:00:28:8d:5f:09:90:b0:47:9e:f3:1d:
                    d1:1f:ad:8a:53:cc:2e:f2:37:27:71:20:2d:0f:70:
                    6f:9c:2d:46:a2:09:52:57:cc:a8:82:3a:71:12:e1:
                    31:a1:71:ed:33:f7:de:c4:3f:5e:fb:c4:75:0b:2e:
                    36:18:1c:65:1c:ea:5f:6a:97:4c:89:63:a6:f9:4e:
                    e1:bb:22:3c:c3:49:52:42:85:c8:48:fb:bb:18:5f:
                    ca:ac:92:d5:f6:51:61:79:a6:32:ff:ea:b0:f7:73:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:11:CC:B7:11:FF:BE:DB:CA:A4:0A:69:83:D4:93:CD:C3:8F:38:B5
            X509v3 Authority Key Identifier:
                keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:70:90:e9:47:11:90:86:94:2e:c2:84:e2:95:78:c4:6e:
         06:48:9e:06:dc:3a:7c:e7:9c:6e:99:6a:b0:bd:c1:5b:28:87:
         47:97:02:7d:8f:95:5e:e0:32:01:d1:71:9f:88:e8:87:03:fd:
         f0:7c:a4:eb:cf:01:56:34:c5:a1:94:9d:e8:54:05:19:ba:7e:
         85:19:e1:f8:af:fa:98:b1:ed:57:ee:a3:e6:f0:11:9e:8f:30:
         cf:e8:48:90:41:59:a8:34:8c:ea:e2:61:21:33:5c:0d:af:a5:
         2e:76:42:e8:31:8d:9d:de:87:30:94:c3:b1:08:c0:e9:22:48:
         39:a9:c9:0d:b4:ff:65:54:1f:b5:cd:78:e5:17:8f:c6:d2:eb:
         ae:ea:c9:ac:ae:90:e9:79:40:7e:dc:77:b2:8c:92:b3:63:f7:
         74:9c:5a:db:22:78:a1:10:34:0b:e0:7f:9b:c6:e3:81:91:63:
         d6:dd:62:b1:f7:60:17:a3:56:64:27:82:81:c9:36:7f:e8:5c:
         fc:1c:96:e1:03:f8:dc:0b:b9:53:cf:b3:b1:69:d2:5d:5f:66:
         51:f2:18:ec:ed:1e:cf:3e:67:aa:6a:36:d3:1b:d5:15:4b:73:
         6a:99:65:23:02:a0:63:c8:f9:4c:93:8c:87:1c:7d:09:03:6d:
         23:58:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:27:27 2025 by rpki-client