Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft
File:                     86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json)
Hash identifier:          2UVGgujw9kCXxdblLE4aeAFrroYEynAdBkeN4W446oU=
Subject key identifier:   0B:FE:DE:97:A2:05:91:25:83:0D:C9:6B:AA:CF:03:D4:00:0D:22:27
Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E
Certificate issuer:       /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
Certificate serial:       013916A519CDFF88AEA1F899E7F6E90B1D03BFD7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft
Manifest number:          01CB
Signing time:             Thu 30 Jan 2025 12:01:48 +0000
Manifest this update:     Thu 30 Jan 2025 11:56:48 +0000
Manifest next update:     Sun 02 Feb 2025 15:41:48 +0000
Files and hashes:         1: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: zAcA0BmrAGpI2x1qPJ/5zl3N7iUAkyEYd57j0/HZ4ok=)
                          2: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: hIMnQPggRl/A4s6mlKVqz6cYpD+s0WdNhVv+CTnK11g=)
                          3: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: naKMmRrjxvitBRxe63RhO8mpBrAb8M/mt896kG50tE8=)
                          4: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: mYfH315eP068ERJYYE5247VW3yxdOs2HUR3r6PYDS0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:39:16:a5:19:cd:ff:88:ae:a1:f8:99:e7:f6:e9:0b:1d:03:bf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
        Validity
            Not Before: Jan 30 11:56:48 2025 GMT
            Not After : Feb  2 15:41:48 2025 GMT
        Subject: CN=0BFEDE97A2059125830DC96BAACF03D4000D2227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:51:33:c3:f2:2f:0b:7d:3f:ef:d2:cb:fa:
                    6a:95:6c:7f:cb:9d:be:18:a2:65:9f:a3:db:13:e0:
                    a7:56:25:ee:49:7a:f2:bb:7f:c3:8b:c0:ca:f6:16:
                    06:a0:20:84:bc:cf:a0:32:4a:49:b8:c0:33:00:22:
                    8d:24:23:82:79:05:cc:7d:9b:21:84:7a:76:f9:8f:
                    3f:4c:93:a9:2d:d0:57:5f:ab:27:ac:fa:c0:d7:4f:
                    b3:4b:a2:6e:90:6e:eb:7c:51:15:8c:f3:3c:99:ff:
                    a6:f7:96:06:4a:97:0b:4e:b4:e9:c1:f4:49:17:80:
                    19:92:29:fa:7f:e1:00:bd:a4:6c:01:e4:2d:fc:d8:
                    72:cc:49:c3:c1:99:10:7e:48:0c:8d:e0:05:2b:db:
                    f6:6d:28:74:82:57:f3:d1:87:f4:07:7a:41:5c:8d:
                    50:97:77:6d:04:fe:80:32:0f:19:a7:5d:ca:f5:d1:
                    54:77:2f:09:a7:e6:f9:cc:a5:d2:04:09:15:b8:03:
                    bf:bb:65:97:b8:b7:3b:49:95:62:47:83:cc:3c:49:
                    8e:d8:de:ed:9a:78:e7:54:40:71:1c:2b:53:32:cb:
                    66:2d:eb:09:17:19:98:b2:5b:78:5c:89:a9:33:cb:
                    cf:01:f9:70:99:01:02:6a:b5:42:ea:c5:a9:63:3a:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:DE:97:A2:05:91:25:83:0D:C9:6B:AA:CF:03:D4:00:0D:22:27
            X509v3 Authority Key Identifier:
                keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:98:79:f8:4e:ee:db:3a:ba:9c:6a:e0:c2:23:85:6b:d4:37:
         0d:0d:e2:9b:e0:6b:da:2d:79:b2:59:d6:fa:17:94:a9:bb:b1:
         ff:cd:c5:3e:7c:5e:40:93:76:aa:0a:b8:1a:95:29:31:a7:7b:
         92:f1:c0:b7:9f:06:9c:c3:d3:e3:2f:12:00:28:3e:ef:1c:b4:
         b7:97:55:19:4f:3e:d2:5e:7c:a4:37:b1:71:0e:b2:e5:84:0e:
         30:98:cd:54:e0:04:96:38:b1:05:01:83:08:61:29:1a:ba:d2:
         3c:a1:d2:2e:2c:ca:b2:5f:48:49:2f:3e:4e:db:4d:8e:19:d1:
         43:76:04:76:6e:8c:68:f9:0a:64:95:17:c7:5e:e6:0b:a5:64:
         2e:b9:83:fb:97:66:e3:e0:90:33:7d:5c:eb:79:e5:e6:da:eb:
         e4:95:64:8f:4d:26:9f:40:8b:bf:55:5a:f6:5b:28:21:a4:01:
         0f:63:ea:44:1e:75:2f:58:72:5c:34:58:be:5c:77:51:bf:1e:
         18:0f:8b:f9:12:8e:32:92:e5:ef:84:ab:8a:41:03:c1:d8:9f:
         51:06:3a:98:4e:0c:a9:b5:6b:fa:41:4e:a2:b9:79:8d:9e:b5:
         7e:a4:62:40:0c:23:38:75:44:18:42:98:98:fb:f7:9d:ed:12:
         9f:10:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:19 2025 by rpki-client