Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
File:                     1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json)
Hash identifier:          gFnfZlnqXx4Kuqo4RnBcqG5eAOiXQloMJnibXtlF4Ps=
Subject key identifier:   0D:8D:81:3E:08:F2:18:41:20:21:59:04:DC:10:63:E7:DA:16:2A:02
Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
Certificate issuer:       /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Certificate serial:       14D0531477C5E6B6407710C35FB1C386AD21808C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
Manifest number:          0313
Signing time:             Fri 31 Jan 2025 18:41:40 +0000
Manifest this update:     Fri 31 Jan 2025 18:36:40 +0000
Manifest next update:     Tue 04 Feb 2025 04:54:40 +0000
Files and hashes:         1: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: tAC47GZWAk57N7JUQK/yK+bfJXVME8gsmEtBrgW13QQ=)
                          2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: ON3X+KsJ083Gn9+i7oob3PTtM7pBqDu7Vy0LQFUIat0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:53:14:77:c5:e6:b6:40:77:10:c3:5f:b1:c3:86:ad:21:80:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
        Validity
            Not Before: Jan 31 18:36:40 2025 GMT
            Not After : Feb  4 04:54:40 2025 GMT
        Subject: CN=0D8D813E08F2184120215904DC1063E7DA162A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:a1:5a:87:9a:c9:6c:b4:67:92:c0:c2:9f:
                    ae:62:08:d5:ca:59:96:17:ff:b2:e6:b4:a5:67:9d:
                    ef:e8:a9:98:91:67:ad:6c:9a:c8:39:bf:3c:60:55:
                    16:18:f1:47:22:24:29:b5:71:94:de:6e:99:2b:dc:
                    ee:e9:4f:9e:86:71:31:fe:e2:2a:9d:d8:70:e2:ca:
                    d9:13:da:f6:cd:cf:a2:88:e2:71:f2:23:03:ce:25:
                    c7:d9:a0:39:a5:82:75:25:e3:01:91:3d:3e:a2:f4:
                    bb:51:c4:7e:2b:c8:9b:f4:15:17:f1:74:98:b7:bf:
                    c5:40:3f:2f:49:48:85:a3:8d:7b:95:98:f7:06:9b:
                    11:0e:17:4c:07:93:e9:d6:d7:3b:20:39:45:66:aa:
                    e7:6a:ed:84:3c:92:4d:5f:08:42:56:28:bb:3c:5b:
                    3e:f6:45:ae:9a:67:3c:82:d4:4e:ba:a2:67:ed:43:
                    b3:c5:fd:67:f6:41:c4:db:b0:c4:55:d7:8f:06:f6:
                    1c:ca:e3:b4:32:c0:f5:35:ca:79:8f:69:7e:82:b4:
                    1b:d8:ec:af:b3:01:e4:3d:dc:d8:7a:6f:f3:74:50:
                    d3:d2:ab:5f:9f:1d:c9:54:c2:40:1e:d1:25:e5:51:
                    6d:17:8b:83:4a:71:8a:dd:2a:4b:5f:63:4e:47:87:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:81:3E:08:F2:18:41:20:21:59:04:DC:10:63:E7:DA:16:2A:02
            X509v3 Authority Key Identifier:
                keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:9e:d3:1c:12:91:77:23:4f:33:84:a5:bc:24:01:9d:b3:
         ab:9d:2d:91:7a:90:8c:76:8c:f3:5b:3a:be:00:e7:56:1f:ce:
         f0:76:47:52:37:b7:0d:f2:fb:3d:18:8d:8e:f2:66:fe:be:ca:
         99:78:1a:1f:88:bb:8b:c4:25:c4:48:63:0b:e7:64:f0:a7:be:
         7a:5a:a7:4e:8e:79:d0:d0:7d:15:c0:81:9f:95:07:5e:9e:75:
         75:13:55:a0:76:04:fa:6c:98:57:8c:8f:48:d9:9d:ef:f2:3f:
         ca:8e:08:bc:98:17:72:fd:b2:7d:1b:04:7b:8d:c7:85:74:75:
         1c:d2:4b:2a:2f:01:ff:64:45:e3:f6:9a:b9:3c:e8:22:c3:02:
         60:ae:e7:be:83:57:a2:58:de:97:80:96:69:ff:60:aa:2b:1f:
         4f:0c:b2:bb:39:6e:1f:84:04:86:6d:fb:c1:f7:5d:60:44:56:
         de:00:02:5c:f1:0e:c7:b0:db:76:e8:2d:5a:24:2b:1d:f5:a0:
         81:41:d0:d5:49:e7:15:eb:00:01:3f:58:c1:65:ca:17:59:f5:
         60:ac:e7:e9:7d:c8:0d:08:74:f1:44:f7:a9:d2:6d:9a:a4:b4:
         31:a0:11:5d:dd:d2:ca:5f:2e:51:a1:f0:c4:b7:7f:5e:bd:2b:
         fb:8f:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:11 2025 by rpki-client