Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
File:                     977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json)
Hash identifier:          5Ns6IFw+o1qnWgqY5H5SrbS5au0ksH0EcVOOm3Grp8g=
Subject key identifier:   94:C2:B0:46:74:FF:74:5D:0B:47:BC:96:01:7C:4D:BE:AF:4B:E0:9E
Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA
Certificate issuer:       /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
Certificate serial:       112C04D6B936D84D45369115CB0FEC62C19B6A67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
Manifest number:          04A3
Signing time:             Fri 31 Jan 2025 03:01:06 +0000
Manifest this update:     Fri 31 Jan 2025 02:56:06 +0000
Manifest next update:     Mon 03 Feb 2025 05:55:06 +0000
Files and hashes:         1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: 6vpG1FwswZyXqrOMn8CrPtMvpqJGHzx+Yb/i8Uh1oPM=)
                          2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: ZS7uIBp+Ij+4W5tQQ7NpQHLCLVZSo32Mfvwl+oVBbvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2c:04:d6:b9:36:d8:4d:45:36:91:15:cb:0f:ec:62:c1:9b:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
        Validity
            Not Before: Jan 31 02:56:06 2025 GMT
            Not After : Feb  3 05:55:06 2025 GMT
        Subject: CN=94C2B04674FF745D0B47BC96017C4DBEAF4BE09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:7a:3b:dd:c6:8b:e0:af:10:e4:79:57:f8:
                    4a:9b:a8:9b:0d:4e:28:99:9e:d0:f1:8c:84:f8:2b:
                    01:11:d1:64:93:f4:25:45:c4:1a:7c:58:65:e2:cd:
                    18:2f:c3:db:d7:f1:82:38:f1:6c:a9:a6:f3:79:12:
                    74:07:4a:99:7f:ee:a2:6e:21:37:3f:67:7a:cd:62:
                    f0:67:31:3d:e2:b6:fa:45:8b:19:a5:36:75:6e:6d:
                    be:13:2c:f5:7c:e4:ce:50:2e:88:41:cd:c0:75:77:
                    e0:a9:55:d3:9b:cf:47:3c:1a:43:55:54:48:bd:4f:
                    b7:59:7a:ce:d6:d3:0b:fe:0a:40:ad:b1:59:f9:73:
                    9b:63:b0:cb:39:55:4d:df:10:36:b1:31:97:fa:7e:
                    c5:a5:e5:ae:f4:1e:e2:f8:a3:3b:9d:5c:fa:38:06:
                    06:42:90:94:b2:4e:8f:b6:77:a3:63:10:b1:f7:c8:
                    7d:d8:92:b6:1b:4d:eb:19:83:68:a2:71:dc:e3:83:
                    16:ac:f9:43:83:e3:38:a9:03:a9:bc:28:00:c5:59:
                    ec:f3:ab:15:d8:06:70:da:1a:3c:d9:61:06:25:f6:
                    6a:bc:c2:62:04:4b:4b:8f:b8:e9:20:20:d8:45:e1:
                    39:97:37:a3:03:75:46:a4:39:1b:2f:33:e5:26:28:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:B0:46:74:FF:74:5D:0B:47:BC:96:01:7C:4D:BE:AF:4B:E0:9E
            X509v3 Authority Key Identifier:
                keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:00:a6:fe:51:2f:0e:84:f3:d6:5a:df:c7:7c:f9:0f:fa:
         2a:fc:84:46:a6:b6:66:2f:6f:4b:a0:6a:3e:94:da:23:7a:cc:
         f0:b0:fa:2b:70:3e:98:3a:d6:ca:07:a9:75:3b:3a:fb:de:dc:
         32:7f:96:8b:28:f3:df:6d:b1:20:3d:61:27:af:93:16:21:24:
         f3:f0:60:13:3f:66:ec:08:77:f3:66:50:98:36:0a:94:c5:18:
         91:e2:c9:86:dd:e9:ef:8a:0e:2d:45:15:bf:eb:c1:cd:42:46:
         53:f2:8b:26:a7:31:0c:b0:95:ca:f8:41:47:c8:38:5d:58:73:
         64:6d:b4:63:00:13:31:6c:d4:39:87:a7:1a:e9:16:f0:b6:15:
         33:49:00:c3:e1:d5:54:2e:ed:53:5e:d8:6c:67:c1:18:dc:93:
         28:37:e4:9c:b8:c7:da:da:a6:69:eb:1e:b5:d6:16:84:61:33:
         d9:61:e1:c8:fe:3b:29:83:91:ee:bd:af:26:02:43:df:89:5e:
         af:46:47:d0:2d:91:5e:bc:88:45:13:77:38:71:32:67:05:ad:
         1e:8d:3b:3a:9a:dc:77:f9:e9:71:c2:50:88:b1:cb:12:a3:a5:
         24:b1:dd:6e:07:fa:0b:ed:57:5c:8c:2f:05:0e:2e:b0:f6:b2:
         62:32:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:08 2025 by rpki-client