Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
File:                     9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json)
Hash identifier:          JNwxPeSE5RzWGoNoQPUuOtr7yjE+XjzSzQsREwA/cR8=
Subject key identifier:   C4:8D:D3:53:97:D7:65:B5:23:7E:FA:B9:46:DE:62:C2:8C:1C:63:37
Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47
Certificate issuer:       /CN=9705995FB5C87DC40E50B1256B8809A101D17047
Certificate serial:       0B268A271D1A8665BFB7FFE7D5651E6700951441
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
Manifest number:          0134
Signing time:             Thu 30 Jan 2025 06:01:33 +0000
Manifest this update:     Thu 30 Jan 2025 05:56:33 +0000
Manifest next update:     Sun 02 Feb 2025 15:10:33 +0000
Files and hashes:         1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: WAdZ979QhAVX6c236Sar85sXhuhfrrV9Is8LrrGUK4Q=)
                          2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:8a:27:1d:1a:86:65:bf:b7:ff:e7:d5:65:1e:67:00:95:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047
        Validity
            Not Before: Jan 30 05:56:33 2025 GMT
            Not After : Feb  2 15:10:33 2025 GMT
        Subject: CN=C48DD35397D765B5237EFAB946DE62C28C1C6337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:6b:7a:d7:cb:d9:4b:56:55:1b:bc:c2:6a:
                    2c:8a:5f:49:bc:c9:f5:f4:79:f9:8c:7d:06:3e:48:
                    6c:28:04:b0:6a:d9:db:9b:ad:bd:97:94:33:70:7e:
                    66:d3:b3:ee:86:88:fd:2b:99:37:f0:c0:d9:50:e8:
                    1e:b8:5e:42:4e:3e:a4:1d:68:d1:63:f9:95:8d:92:
                    5c:aa:24:7f:30:c9:11:fa:aa:6c:3c:2f:ba:8c:71:
                    72:26:7d:7d:42:9f:5a:6a:a5:12:57:ca:4c:4d:6d:
                    5a:97:ee:18:58:d4:ea:7e:ee:84:4b:a7:ab:71:35:
                    07:be:04:90:da:db:7c:a2:a7:0f:ea:67:1b:1e:34:
                    28:88:56:4a:8c:e5:cb:a0:6c:48:67:24:1c:78:87:
                    38:be:68:c5:d9:ee:34:83:a4:72:b5:38:a7:27:3a:
                    3b:fd:ec:c0:fe:b3:ba:29:01:ad:eb:8e:86:eb:f3:
                    dc:a4:8e:b1:05:13:18:d6:3c:fa:d7:ea:97:d4:1f:
                    05:f6:f2:31:f7:f3:01:99:e0:14:4f:12:11:d2:35:
                    c2:2b:94:02:34:8b:89:fb:40:41:81:ac:e1:ea:e4:
                    4f:3a:56:fd:f5:e5:13:d9:e9:db:1e:5e:45:83:cc:
                    08:5e:a6:d9:68:a2:67:0c:0b:df:d2:b9:2b:91:79:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:D3:53:97:D7:65:B5:23:7E:FA:B9:46:DE:62:C2:8C:1C:63:37
            X509v3 Authority Key Identifier:
                keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:f2:1c:cc:38:61:97:c4:24:25:01:76:9d:fa:99:7e:2b:
         46:a0:cf:63:5c:a8:fd:3a:00:53:bc:5f:c8:c4:64:fc:7f:a1:
         5a:a3:7c:b4:8a:84:54:64:60:09:cf:1a:82:e1:ee:25:52:b7:
         dc:ee:d9:2b:58:ce:7f:46:41:32:6a:14:3b:16:1a:4d:19:6b:
         31:47:a6:f0:d4:a3:23:6b:b3:ee:36:01:5c:48:81:f8:b5:9a:
         e7:14:64:11:c5:8e:b0:d0:43:c4:4c:83:ed:fb:4d:c0:03:f9:
         82:88:d2:99:6d:1c:7b:4b:35:ed:b1:7a:2b:1d:72:cc:cf:3b:
         d0:b7:80:9c:56:a1:e1:f4:72:8b:9b:a7:a8:3d:25:8a:50:18:
         69:5a:73:2d:20:40:a8:e3:9d:cc:20:03:f6:94:0f:85:82:40:
         59:52:3b:67:a4:91:5f:78:b9:6c:ed:f3:2e:7e:02:7d:e8:53:
         17:94:3c:c2:80:d6:c9:3f:b7:f1:b5:3d:30:a4:05:20:99:5d:
         6c:4c:6b:2d:b5:30:86:48:88:e9:df:85:d8:02:ac:02:ed:a3:
         a7:54:d8:42:f1:14:43:0e:20:49:61:3a:3b:eb:5f:5a:bc:aa:
         1c:b3:0c:59:ca:43:11:90:b7:fc:d8:71:19:69:c9:16:6e:e7:
         fd:22:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:30 2025 by rpki-client