Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
File:                     0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json)
Hash identifier:          zwBgdlCzGdTFJNu/4kI08zVr1W0cSGxrezO2GBkuZY4=
Subject key identifier:   5D:B8:0E:A6:D5:7C:F7:BE:3C:9D:9F:11:76:73:73:85:EB:04:8D:74
Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
Certificate issuer:       /CN=0433DC81885AA9736198E4B13311013B6539B05D
Certificate serial:       7280CBB8147C98F4A17E90A40CD70C902DEEC707
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
Manifest number:          0123
Signing time:             Thu 30 Jan 2025 14:11:30 +0000
Manifest this update:     Thu 30 Jan 2025 14:06:30 +0000
Manifest next update:     Sun 02 Feb 2025 14:34:30 +0000
Files and hashes:         1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: ln4Ofi4VkpxhIBCKYceqIG3INrnNW1q33kOikEH5kEw=)
                          2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: MIrr8H4GR6KTBTBoYtAbkzm4yZfhj7WMuIloFJQDI9E=)
                          3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: sHRpXQBkqiQy3VgKS/DABK6h/8on6Q9yO+BTiTZ83c8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:80:cb:b8:14:7c:98:f4:a1:7e:90:a4:0c:d7:0c:90:2d:ee:c7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D
        Validity
            Not Before: Jan 30 14:06:30 2025 GMT
            Not After : Feb  2 14:34:30 2025 GMT
        Subject: CN=5DB80EA6D57CF7BE3C9D9F1176737385EB048D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:32:20:36:0a:56:ea:47:6e:8a:d4:52:71:ad:
                    fa:b5:97:93:03:53:07:47:1e:ba:1b:fc:ae:40:b0:
                    82:b8:96:dd:38:bf:33:48:54:47:d0:4c:ed:b0:5c:
                    62:4b:53:d3:68:01:fb:27:48:fa:08:2e:3f:dd:ff:
                    70:32:a8:e8:77:39:e7:63:eb:52:9b:02:05:74:d5:
                    b4:98:60:7d:03:10:d1:10:3d:4c:5a:a5:17:0e:dd:
                    4f:fa:a0:4e:31:83:c0:ab:68:02:1f:e6:b7:a1:38:
                    44:54:66:73:08:07:77:2a:e2:3c:41:33:de:1e:4c:
                    10:87:eb:78:cb:ac:18:ca:7a:42:bf:6e:bb:25:2c:
                    f5:04:85:cd:62:9a:8f:f5:0d:f9:09:ae:ee:97:1c:
                    08:40:2d:cf:44:ac:2a:61:6e:51:90:af:8b:fe:87:
                    9d:fc:eb:39:d8:39:ee:d7:0e:71:1e:d9:bf:ab:21:
                    9c:fa:04:e1:1d:e6:39:74:8e:07:3c:2a:e8:0c:60:
                    8d:ba:b5:92:c4:a8:ce:bf:44:85:8b:ac:4f:30:75:
                    6c:7d:6d:41:8e:c7:61:c2:bb:76:9a:36:de:1a:19:
                    d7:f7:ef:39:7d:cd:58:05:cb:94:97:1d:22:84:c8:
                    71:45:cf:c6:2a:83:58:24:34:2d:7d:d0:44:3d:b5:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B8:0E:A6:D5:7C:F7:BE:3C:9D:9F:11:76:73:73:85:EB:04:8D:74
            X509v3 Authority Key Identifier:
                keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:dd:b4:99:d2:c6:86:81:d5:41:07:bf:0c:69:1a:1f:f4:
         cd:55:f0:50:57:bb:8c:fd:aa:31:8d:77:79:ae:6b:16:3b:e7:
         62:e1:4d:48:cd:d3:7c:b2:62:fa:96:c2:2b:06:40:4e:76:e0:
         97:c8:71:73:8b:1b:80:3a:e8:e4:3a:fe:4e:d8:45:60:eb:0e:
         ac:19:4f:7e:8d:89:ef:e8:3f:81:2e:37:1c:0e:b4:6b:80:ce:
         75:34:a1:5e:0c:0e:5f:bb:91:27:4e:99:b3:7a:e0:71:e5:16:
         d5:87:19:23:f8:70:c2:b7:e4:eb:fd:fd:4f:39:e7:ac:77:76:
         d8:22:53:83:99:6f:c5:5d:fc:bc:2b:86:33:23:00:b9:cd:13:
         25:76:13:02:d2:5d:40:e5:2b:76:c8:41:a4:e8:29:e9:04:63:
         62:25:e0:bf:6c:0d:df:b2:57:8d:b3:0d:b1:db:02:4f:4d:25:
         ee:9e:81:19:d0:71:03:dc:cf:2f:88:e9:7d:be:0f:8d:b4:57:
         ad:d8:77:e0:cc:5f:1e:85:02:fd:1b:95:f7:31:99:ba:eb:50:
         ff:4e:b3:cf:99:aa:8d:77:61:c7:7e:2d:2b:ca:4f:f1:6d:34:
         fb:27:09:36:37:20:b0:f1:21:e5:8a:2e:20:ca:38:dc:a0:00:
         d1:77:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:20 2025 by rpki-client