Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/AA3D7F503C99C0AB630D54C528383C3402D6AF21.mft
File:                     AA3D7F503C99C0AB630D54C528383C3402D6AF21.mft (raw, json)
Hash identifier:          iV0v0emBoHwNza+kVYrRPVpK9KURtnpzj/F3tc6bFjA=
Subject key identifier:   F1:5D:BB:84:BD:FD:6B:53:61:75:F1:56:6F:84:0F:6C:6B:AA:1B:5F
Authority key identifier: AA:3D:7F:50:3C:99:C0:AB:63:0D:54:C5:28:38:3C:34:02:D6:AF:21
Certificate issuer:       /CN=AA3D7F503C99C0AB630D54C528383C3402D6AF21
Certificate serial:       4EB93B31890B897F87462AB268E67FB0916E84F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA3D7F503C99C0AB630D54C528383C3402D6AF21.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/AA3D7F503C99C0AB630D54C528383C3402D6AF21.mft
Manifest number:          4E
Signing time:             Fri 31 Jan 2025 10:11:38 +0000
Manifest this update:     Fri 31 Jan 2025 10:06:38 +0000
Manifest next update:     Mon 03 Feb 2025 10:51:38 +0000
Files and hashes:         1: AA3D7F503C99C0AB630D54C528383C3402D6AF21.crl (hash: qmXoSYsJ88SQMghSaZN+QRY05Pd4/EnzzZ8MJtDMfOY=)
                          2: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: cxXcs5+F77Lg7/Ojwbw2WUqjYrzsnoyA2M5AF3WeU8k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b9:3b:31:89:0b:89:7f:87:46:2a:b2:68:e6:7f:b0:91:6e:84:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3D7F503C99C0AB630D54C528383C3402D6AF21
        Validity
            Not Before: Jan 31 10:06:38 2025 GMT
            Not After : Feb  3 10:51:38 2025 GMT
        Subject: CN=F15DBB84BDFD6B536175F1566F840F6C6BAA1B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:90:ea:94:a3:de:3b:66:3e:20:69:90:88:cc:
                    52:1d:1c:9b:1b:c8:69:47:f7:b3:97:65:83:93:47:
                    9a:dc:cb:e3:af:f7:ff:68:5a:5d:91:44:16:0a:57:
                    22:8d:5c:59:fc:67:20:c2:51:df:25:e7:ec:7a:44:
                    bc:6b:8e:c5:84:a2:d1:18:6e:a6:98:06:e7:79:55:
                    35:6d:f5:b9:40:88:90:d9:73:05:79:ba:02:b9:7c:
                    bf:e3:8a:ae:1e:75:2a:f5:64:c3:f5:bb:e9:f7:68:
                    f9:d5:92:2b:df:4a:10:85:4f:41:db:27:50:14:35:
                    e8:75:67:e3:be:34:8e:47:0d:06:86:15:cc:ca:87:
                    15:b1:a8:49:98:2d:22:21:3a:55:6f:8c:83:94:2e:
                    01:a3:92:0f:3f:77:d7:76:db:53:1b:58:11:c6:c6:
                    36:8b:22:8b:28:bc:84:b2:4a:e2:cf:2d:28:95:67:
                    2c:f2:0f:5f:31:c7:90:c2:bb:93:f3:7b:6a:48:a0:
                    ce:3d:61:c9:c5:a8:13:23:f1:dd:7b:d2:97:b2:84:
                    03:88:36:56:3d:ba:bf:0b:02:bd:42:a6:8b:fa:e4:
                    f2:fd:00:e7:92:0a:b4:9d:e2:ae:dc:12:6e:7a:3c:
                    84:c0:3b:44:e8:bb:52:a1:7d:01:70:9f:44:7e:63:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:BB:84:BD:FD:6B:53:61:75:F1:56:6F:84:0F:6C:6B:AA:1B:5F
            X509v3 Authority Key Identifier:
                keyid:AA:3D:7F:50:3C:99:C0:AB:63:0D:54:C5:28:38:3C:34:02:D6:AF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/AA3D7F503C99C0AB630D54C528383C3402D6AF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA3D7F503C99C0AB630D54C528383C3402D6AF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/AA3D7F503C99C0AB630D54C528383C3402D6AF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:e1:01:c1:02:9d:4e:69:6b:b6:80:28:d5:d8:8c:51:a6:
         56:ef:8e:db:79:40:e0:e5:3b:27:f2:a1:79:9d:2d:41:73:b8:
         f9:ef:9e:59:09:5d:db:3f:46:d9:82:64:a3:6e:b0:83:38:cf:
         97:df:a9:a1:20:8d:ef:02:a6:0f:73:41:8e:3f:d7:e0:7d:d8:
         1c:33:95:96:ad:bb:f9:e9:59:c0:6a:7f:46:1e:a7:29:c7:8f:
         72:ce:ac:b2:69:b5:ba:4c:09:c1:98:35:4d:3d:96:6d:3d:27:
         8a:3d:b6:bd:8e:61:64:fe:97:8d:45:af:cf:1a:6e:7c:af:f3:
         dd:94:b2:a9:07:83:b3:6a:ae:24:ca:3c:54:07:13:b6:19:a6:
         98:61:04:c2:e7:35:5d:35:f9:5d:1f:e5:b4:de:41:12:13:d7:
         8a:73:79:2c:49:5f:0c:bd:e4:2a:16:36:d5:6e:34:cf:07:7b:
         a4:86:b1:b8:42:c5:00:80:e0:2b:fd:f9:be:9d:95:91:56:56:
         34:0c:7a:f5:e9:18:d5:a4:76:d0:2e:2d:3c:87:07:fd:23:ad:
         f1:0f:ad:47:1b:f7:65:eb:f9:19:e8:3a:a6:b4:62:66:9f:56:
         76:50:d1:d8:f6:95:4b:37:c4:dc:f1:fb:d9:84:ea:aa:6e:d3:
         db:67:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:31 2025 by rpki-client