Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft
File:                     129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json)
Hash identifier:          NeNYF92WhCcFLASfDmI4U0F3PtGW9tWc3ZRz/r0rnUk=
Subject key identifier:   AD:0E:76:58:78:9C:43:EF:E3:77:B6:15:23:F3:43:36:CD:BE:7F:97
Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
Certificate issuer:       /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Certificate serial:       105FF1732AFBC999CDF9CC5C8C9078123C9EFBD3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft
Manifest number:          04AF
Signing time:             Thu 30 Jan 2025 01:00:34 +0000
Manifest this update:     Thu 30 Jan 2025 00:55:34 +0000
Manifest next update:     Sun 02 Feb 2025 01:13:34 +0000
Files and hashes:         1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: Yjlkkc0qEXfgrDlzvTciB2VHeHjekmf/H9byxQIVCPg=)
                          2: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: Q5hKhtGoLqH/WGA4dKvFh1XtZeFtJRsaN6l6aR4Y2SE=)
                          3: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: 6PZ9AuCCelWL7xkgwqQYp7n5rkYf6qrJ0gviPmFHZso=)
                          4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: Bb/OkwwJmJHe8/z9Qp5PTG+7pV0l1ZMHq6rEYToHVas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5f:f1:73:2a:fb:c9:99:cd:f9:cc:5c:8c:90:78:12:3c:9e:fb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
        Validity
            Not Before: Jan 30 00:55:34 2025 GMT
            Not After : Feb  2 01:13:34 2025 GMT
        Subject: CN=AD0E7658789C43EFE377B61523F34336CDBE7F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:0b:6f:58:f8:71:e2:7f:2d:f1:a1:af:e3:
                    c0:1c:92:73:26:e3:8f:89:a0:61:e8:87:07:51:0c:
                    26:bb:70:a7:65:f5:5b:85:8c:91:72:e8:c9:61:e2:
                    7b:c2:0b:72:69:1c:8f:11:7f:cd:eb:33:16:b8:6a:
                    b9:e1:33:75:5f:a9:2b:47:43:14:0c:1b:3c:e7:16:
                    88:1c:f3:1e:5f:9e:77:25:a0:eb:4a:2c:e9:38:eb:
                    ba:fb:73:c3:cb:50:5a:bc:0e:23:8b:4b:42:35:fd:
                    dd:c9:a3:74:b5:6b:02:b8:a0:49:cf:85:52:7b:68:
                    65:3e:4f:92:a5:92:bf:ae:c5:d7:cb:8b:d9:8b:bf:
                    8b:2f:2c:a8:39:1c:35:b4:9a:14:a0:20:39:33:9f:
                    23:f2:2a:96:38:4e:6d:ef:54:1c:2a:d9:d1:a8:aa:
                    5b:f6:87:b3:bf:64:2e:f4:6f:54:e8:b2:c5:d2:2a:
                    78:dd:a0:07:97:b3:de:c3:cf:f2:84:6b:a8:c4:38:
                    ea:51:50:9c:fb:88:71:10:e3:c2:c1:27:af:0c:99:
                    0c:a6:78:77:94:42:2b:86:95:c5:4e:43:47:9f:0f:
                    a7:07:d9:85:16:40:f5:f0:b4:78:30:b7:77:61:1c:
                    91:2f:ae:2b:32:73:72:80:5b:0f:9d:20:18:19:e3:
                    aa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:76:58:78:9C:43:EF:E3:77:B6:15:23:F3:43:36:CD:BE:7F:97
            X509v3 Authority Key Identifier:
                keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:09:6b:04:a9:2b:fc:95:50:26:8a:72:8a:ed:18:8d:fd:
         d0:bd:16:f0:c2:d7:0b:8b:f7:e4:b1:ac:17:cc:8b:bc:e9:b0:
         59:5f:57:bf:72:77:a6:38:fe:1f:3e:2c:10:59:6a:3e:2b:94:
         8b:68:42:ae:f3:bd:e1:ba:fc:a3:c5:2c:69:09:62:91:37:5e:
         69:25:8c:d0:f0:4c:9f:2d:1b:cd:be:42:24:ff:24:d5:94:e6:
         c5:8a:42:de:b9:47:47:a7:e5:40:86:73:4c:d4:a5:82:25:24:
         7d:d5:13:91:7f:2a:b4:96:42:d4:85:a5:e8:46:be:f2:f1:62:
         fa:5c:57:9e:eb:77:e2:4d:56:b9:fd:1f:2c:93:35:c3:e8:63:
         ea:1b:fd:8c:2f:b1:a4:2f:91:66:4d:4e:d8:e9:21:5f:bd:46:
         ed:48:fd:94:04:9e:55:fe:c7:8c:a3:34:9d:ef:8c:6c:9e:6d:
         29:13:e4:40:d5:ce:f7:79:c3:89:4e:a5:ad:64:04:4c:b3:ea:
         23:aa:4d:0a:28:70:b3:b0:2c:c1:38:8b:b3:23:bd:6b:a9:e4:
         f9:36:d3:1a:7a:ab:0d:b1:68:7f:04:9d:2a:58:8f:48:4f:f1:
         62:ac:3c:22:54:d7:f8:c9:9c:5f:30:8a:e2:32:fa:5b:77:20:
         a4:94:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:15 2025 by rpki-client