Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
File:                     4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json)
Hash identifier:          br/axs5T8rkNt18gMstoByXmzTPR6q+i5lB7DQjLN2w=
Subject key identifier:   98:99:31:E7:0A:E1:11:07:8B:2C:C4:E5:0D:75:EB:E3:C8:59:22:53
Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
Certificate issuer:       /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Certificate serial:       6A8DC99BF4C79A1BA1FCC83D9D9BE692F9E57458
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
Manifest number:          041D
Signing time:             Thu 30 Jan 2025 03:52:14 +0000
Manifest this update:     Thu 30 Jan 2025 03:47:14 +0000
Manifest next update:     Sun 02 Feb 2025 07:27:14 +0000
Files and hashes:         1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=)
                          2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: SZZFCyrYmJTPaK5We74i3T5NKL0UfZIK0EW/tgKrt58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8d:c9:9b:f4:c7:9a:1b:a1:fc:c8:3d:9d:9b:e6:92:f9:e5:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
        Validity
            Not Before: Jan 30 03:47:14 2025 GMT
            Not After : Feb  2 07:27:14 2025 GMT
        Subject: CN=989931E70AE111078B2CC4E50D75EBE3C8592253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:76:f3:a7:72:f2:20:05:06:91:55:59:52:
                    4b:61:b3:24:39:01:86:76:1d:cb:ab:e4:d7:d7:8b:
                    e7:60:b5:e2:ce:4a:30:3d:d2:09:70:c8:23:dc:f8:
                    9a:b3:c0:a1:7d:b6:e4:9f:08:4e:ef:e2:47:15:ac:
                    97:9b:77:58:ae:39:24:ca:b0:29:4a:a2:1a:23:50:
                    62:aa:fb:bd:de:cb:1b:79:21:3a:07:27:a6:5c:85:
                    bd:7e:67:97:7b:ec:aa:04:ba:ff:a5:d8:86:cd:f1:
                    a2:6d:12:41:ac:96:49:c1:05:f0:a7:55:c6:11:3c:
                    8f:ee:39:88:4e:e4:a7:d9:6a:7d:97:ba:63:b9:dc:
                    f9:4c:eb:45:f4:91:62:a1:ee:a4:bc:46:a2:f4:d8:
                    28:bd:09:3a:06:17:1a:7e:5e:36:8a:b8:3b:98:94:
                    84:e7:6a:c9:dc:c2:9c:6c:a8:5a:a3:84:bf:90:3a:
                    08:2e:ad:0e:12:bd:ad:62:85:ad:96:55:8f:e7:a3:
                    2c:28:ce:01:ee:49:97:df:92:e6:43:fe:6d:23:db:
                    b1:81:25:fd:b7:cd:5d:64:4a:ba:ec:95:77:85:ad:
                    ce:b9:03:aa:18:46:94:cc:10:16:c4:f4:d4:5e:d1:
                    29:fb:6a:6d:e1:80:f0:24:9e:2e:03:db:00:b9:e4:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:99:31:E7:0A:E1:11:07:8B:2C:C4:E5:0D:75:EB:E3:C8:59:22:53
            X509v3 Authority Key Identifier:
                keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:9f:92:0d:4b:ed:11:53:fa:a9:bf:88:41:4f:d9:12:34:
         bc:87:92:e1:57:e3:a6:b9:0a:98:b6:50:07:71:47:4d:2b:71:
         53:20:3d:4f:38:90:9b:52:d8:dd:5d:85:50:d5:7a:b8:2b:94:
         99:e2:39:8d:fc:c0:f6:11:69:32:ab:ca:15:7d:c5:a8:96:97:
         b7:59:8c:03:78:eb:41:87:57:38:89:77:93:d8:a7:46:e9:bb:
         fe:96:69:9e:04:e7:dd:82:72:20:25:7b:ee:28:43:89:73:fb:
         87:d1:70:61:90:2e:21:12:2f:c2:b6:c2:7f:22:72:d1:20:69:
         41:81:cd:52:8b:61:5b:b1:c8:a0:c7:9f:35:a5:83:54:fc:df:
         1f:b8:29:e5:66:cb:95:f8:3d:85:e7:b6:6b:df:c8:0a:75:e5:
         eb:87:85:71:49:e7:6c:03:dc:d8:da:92:a2:a3:ee:e9:9e:73:
         bd:c9:5b:8b:57:d3:8d:bc:97:15:82:51:b8:f6:4d:e8:8c:32:
         12:0a:72:10:a2:04:e2:52:03:c9:ea:87:0d:25:14:a0:7d:a6:
         d0:2b:e2:27:3f:23:03:58:3d:73:f8:20:9f:e6:82:1c:44:c1:
         68:7e:a1:98:2b:8b:41:12:a2:cc:13:69:20:7b:e0:c7:d9:90:
         4a:d1:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:32 2025 by rpki-client