Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File:                     3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier:          vp6H8vtshtJczN8EUU6nEn55+cZhdX8OO58TXZzCIfM=
Subject key identifier:   32:B8:90:43:D8:61:95:C8:6E:86:9E:D5:9C:13:46:33:0D:AE:0B:AB
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       0BE0F309EDD9FED4F2CC0A5865FE795DA923D1B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number:          0151
Signing time:             Thu 30 Jan 2025 10:00:39 +0000
Manifest this update:     Thu 30 Jan 2025 09:55:39 +0000
Manifest next update:     Sun 02 Feb 2025 16:52:39 +0000
Files and hashes:         1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: y+EjdmS51ktDt2/g7GXWD2QHjuiZkT27HLDGYMWV1g4=)
                          2: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=)
                          3: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: cGlzD+8u2sP/KKFkwmgtNaxWSWxn9NIfJjiiQzsI8Wo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:f3:09:ed:d9:fe:d4:f2:cc:0a:58:65:fe:79:5d:a9:23:d1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: Jan 30 09:55:39 2025 GMT
            Not After : Feb  2 16:52:39 2025 GMT
        Subject: CN=32B89043D86195C86E869ED59C1346330DAE0BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:af:7b:45:db:4b:2d:bc:f8:8a:a5:32:9d:
                    b4:e0:77:4e:e3:44:f2:6e:59:00:f3:4d:76:b1:47:
                    2d:2b:e8:a6:70:10:d8:bf:79:2a:d2:84:b3:2c:f8:
                    53:cb:68:bf:b9:5d:29:da:6b:e7:76:0c:90:08:a3:
                    de:29:50:40:14:82:46:74:8f:7c:8e:92:fb:20:96:
                    e4:59:cb:fc:d4:79:c9:4e:ed:ec:16:98:71:53:a2:
                    e8:f0:95:cf:fe:5b:75:4d:a4:ce:64:08:76:7d:72:
                    47:1b:f4:1e:f3:22:04:98:cd:9d:86:3e:ef:c9:c8:
                    8b:c1:2e:48:15:89:12:85:0f:4c:88:1c:1f:e9:11:
                    05:59:2c:c9:47:be:bd:75:34:5e:54:2e:c2:95:8d:
                    13:3b:3d:ba:3e:be:33:2a:fa:75:c4:5d:8c:91:9d:
                    79:08:7a:e6:b0:3d:73:2e:fb:92:e7:ee:db:c0:0c:
                    4f:03:52:1e:ad:9d:83:c0:77:02:b2:67:4a:ae:78:
                    f6:6b:5f:4c:5b:84:d8:82:a6:d8:37:2d:1c:2e:36:
                    ba:ec:77:ff:4f:d7:0d:43:11:96:f2:a6:a8:64:2f:
                    78:b8:75:24:9a:93:a2:4b:cc:3e:e3:67:ab:02:00:
                    f4:81:89:c6:7c:d2:54:5d:a8:dc:ac:2a:00:a2:4c:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:90:43:D8:61:95:C8:6E:86:9E:D5:9C:13:46:33:0D:AE:0B:AB
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:80:09:0a:76:b2:66:9f:11:fd:fd:6f:4e:59:74:07:43:
         de:01:24:7e:e0:1d:d0:1c:29:5f:0d:c9:e6:e4:5d:63:91:e5:
         c5:1f:33:e1:40:96:35:37:1a:cd:10:b7:a1:5c:ed:c7:9f:cd:
         a5:73:78:58:9d:66:02:c2:2b:93:1e:76:58:44:13:46:6b:3a:
         73:f8:f8:6a:91:b6:23:d7:eb:2f:9d:4e:ba:c5:f5:c5:73:4d:
         64:5b:f9:9f:d4:09:e2:1b:4c:b3:7f:78:f5:5c:d6:0a:3a:cc:
         8c:e0:91:12:c0:81:67:23:d8:8c:33:16:1b:a2:39:b2:58:8c:
         45:00:d7:d9:ec:5c:93:b3:e2:03:42:a2:fb:be:08:61:c0:cb:
         ca:64:1e:cb:53:ec:2b:a4:a6:a9:a5:60:56:27:45:00:08:6a:
         60:d5:41:5a:00:36:4f:df:df:e9:00:32:77:cc:05:67:b1:fa:
         69:a8:b0:04:00:9f:17:84:fd:ec:ca:07:7e:74:11:a1:19:35:
         44:54:32:bb:69:b5:17:a0:cd:7b:c2:ba:35:14:a5:8e:38:52:
         7b:92:c5:a2:30:38:cc:ed:de:f7:75:85:26:e2:a4:c6:b8:ec:
         fe:42:2b:52:2c:da:0e:29:33:39:7d:64:be:7d:55:37:22:98:
         3c:92:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:58 2025 by rpki-client