Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft
File:                     2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json)
Hash identifier:          ukzzs9yLP1STyMjHan85YU+aEjvbEiD5eor/wRK2Ya8=
Subject key identifier:   98:AB:DD:1D:93:02:4F:44:CE:33:BA:56:7E:EA:01:B8:5A:6B:D4:B3
Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E
Certificate issuer:       /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E
Certificate serial:       0B0B64ECBD9322A42563AAD64A1BB6023AF29E08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft
Manifest number:          28
Signing time:             Thu 30 Jan 2025 15:31:50 +0000
Manifest this update:     Thu 30 Jan 2025 15:26:50 +0000
Manifest next update:     Sun 02 Feb 2025 20:31:50 +0000
Files and hashes:         1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=)
                          2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: bkRbB0P0pu0BedVEmSienuaE00RCzMqV3FxaTXoheDc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:64:ec:bd:93:22:a4:25:63:aa:d6:4a:1b:b6:02:3a:f2:9e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E
        Validity
            Not Before: Jan 30 15:26:50 2025 GMT
            Not After : Feb  2 20:31:50 2025 GMT
        Subject: CN=98ABDD1D93024F44CE33BA567EEA01B85A6BD4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:02:17:d3:68:f6:a8:a4:2f:c8:15:26:ef:
                    e0:1e:bc:9d:6e:2b:f4:05:f2:9c:e4:28:c8:8e:47:
                    23:f8:2f:1f:29:ae:38:73:0c:19:d3:08:a0:b7:08:
                    9b:5d:94:db:92:3a:7e:9d:54:bc:7d:62:fd:f3:e7:
                    56:ce:1a:e1:13:12:b8:cd:b6:b5:d3:10:9c:98:fc:
                    01:a4:e3:24:1d:c5:01:0b:d4:fe:7d:47:6a:c1:26:
                    e7:98:bd:bf:f5:fe:f1:33:ef:31:bd:38:f4:bc:9a:
                    ef:60:9e:02:be:55:d4:44:47:89:96:6f:81:53:b0:
                    ef:5f:12:84:14:81:78:48:90:7b:0c:3f:e6:e0:c9:
                    21:31:11:9b:70:91:a2:ce:c2:c8:35:0e:17:35:84:
                    ec:bc:ee:11:39:ec:ed:f5:fb:5a:ba:bd:ad:a8:1c:
                    98:4d:f1:ee:52:45:6a:03:20:d4:d1:b9:ed:55:6c:
                    31:b5:b8:2d:1e:05:14:a2:28:65:93:ce:ba:c2:bc:
                    fd:47:e8:e2:bd:2b:9b:0c:2c:d3:f7:16:2d:53:01:
                    21:fc:f8:af:82:fe:d2:0c:47:a4:3e:94:94:a4:06:
                    23:eb:cd:52:59:49:e0:2f:02:0a:55:b6:f9:38:73:
                    57:53:77:6d:e4:5a:15:24:c0:d8:16:2c:41:58:11:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AB:DD:1D:93:02:4F:44:CE:33:BA:56:7E:EA:01:B8:5A:6B:D4:B3
            X509v3 Authority Key Identifier:
                keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:65:5c:81:80:9e:00:83:22:55:c4:90:89:a9:65:5d:cf:
         4c:7e:96:f3:44:90:68:fa:f3:5d:c8:54:e5:56:48:3d:04:8c:
         e6:cb:e8:7b:ad:74:4d:a1:90:9d:d3:4c:4b:1d:5d:52:4d:0c:
         77:d9:f2:7a:7b:9b:81:1d:54:4b:70:15:9e:51:d2:75:e0:18:
         d3:a7:8a:b1:81:e6:ed:a1:39:42:43:a5:51:92:a2:f0:5a:f1:
         71:c5:98:31:e1:5b:15:62:78:b5:cd:b4:83:ce:3f:43:5d:2a:
         44:25:83:62:e6:86:7a:59:a3:0e:cf:62:81:d6:3f:c5:bd:44:
         be:75:e3:bf:a9:e4:39:d9:4d:cd:5c:eb:81:8b:b6:4e:f0:a9:
         81:2b:4a:43:0c:39:e9:31:53:77:a9:52:00:a9:4a:f3:ed:69:
         ca:57:60:71:3a:cb:b2:5a:e6:6b:8d:ea:40:61:c3:2c:4f:b5:
         a5:31:02:e2:93:df:ca:5a:0c:fa:7d:6e:5f:59:20:d2:47:28:
         88:61:cb:1a:0c:ec:0d:b1:72:e7:00:c7:e8:af:36:96:1f:42:
         43:00:12:d9:89:79:ca:b2:fd:c9:85:aa:37:b1:6c:aa:80:41:
         41:e2:de:85:58:1d:d7:c9:c8:dc:55:12:27:3b:f1:15:1d:f7:
         bd:2b:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:01 2025 by rpki-client