Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft
File:                     4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json)
Hash identifier:          FqH1koJtkF6+Fle4/nza9O0a+4TXiQ4OjnhxFolwI8k=
Subject key identifier:   2E:CE:FB:75:E1:C0:68:F3:9F:1C:32:F6:62:B6:87:80:D2:FA:6A:F0
Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50
Certificate issuer:       /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50
Certificate serial:       3D69903A06F9F0E701B0223CB6B945FD9CA79379
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 14:50:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:45:46 +0000
Manifest next update:     Mon 03 Feb 2025 15:32:46 +0000
Files and hashes:         1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: BdhWk/nQhCVMal2vWsADE34SFxshXFqKjSqOvlUtFAU=)
                          2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:90:3a:06:f9:f0:e7:01:b0:22:3c:b6:b9:45:fd:9c:a7:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50
        Validity
            Not Before: Jan 31 14:45:46 2025 GMT
            Not After : Feb  3 15:32:46 2025 GMT
        Subject: CN=2ECEFB75E1C068F39F1C32F662B68780D2FA6AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:40:79:64:21:4e:1b:3a:ca:d1:f1:33:e0:
                    3c:39:83:52:9e:48:f3:4f:fa:77:27:f2:3e:89:3f:
                    34:07:9b:1e:6e:b5:80:52:c0:c5:39:d5:56:6a:ee:
                    c1:77:54:26:60:6d:a4:f9:83:1b:0a:08:f0:04:08:
                    65:22:70:b2:6f:b8:71:c1:1a:32:f0:42:b9:da:a9:
                    3f:ce:f4:0e:ae:c9:0e:b2:82:39:03:75:8c:b6:44:
                    4c:db:7e:24:b4:a8:4d:bb:b1:1f:0f:a4:48:7e:d3:
                    22:19:71:fe:87:07:a3:7b:53:d7:4d:3c:c5:b6:ea:
                    c2:90:c2:71:ea:79:56:82:e9:38:17:5a:49:01:88:
                    8a:97:b5:f7:5e:05:ed:15:08:65:53:a0:b2:55:53:
                    d0:80:30:af:b3:47:20:08:57:cb:76:c0:32:a1:df:
                    f3:86:cf:f1:38:0e:cb:db:26:e6:b9:ae:93:5d:02:
                    37:78:21:3c:80:f0:b8:31:cc:ef:ee:95:cf:23:66:
                    b1:02:bd:dc:d6:57:af:ab:c6:fd:d4:c3:8f:f2:03:
                    db:4c:80:8b:d1:a2:fd:78:ea:f4:58:a1:bd:d5:a7:
                    ee:79:7e:1d:90:ca:9e:b6:fc:85:f0:27:fe:17:00:
                    94:13:10:ad:55:72:84:a8:ce:07:27:d6:e3:2d:e7:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:FB:75:E1:C0:68:F3:9F:1C:32:F6:62:B6:87:80:D2:FA:6A:F0
            X509v3 Authority Key Identifier:
                keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:86:4b:3a:a0:66:6a:06:16:c3:9f:ed:5e:d6:20:1e:2c:
         0a:a1:25:51:76:45:41:b7:d1:31:16:e9:78:18:90:6c:23:5c:
         ee:3f:d3:18:a4:bf:3d:fc:dc:b2:ad:d5:ed:ba:c3:bc:69:cf:
         82:2c:33:0a:b9:d8:9b:05:4a:a7:71:ac:62:ba:33:09:ce:19:
         f9:b9:3a:60:ab:54:05:50:cc:15:e7:da:66:3e:3c:f4:f6:34:
         7e:1b:09:16:cf:87:a9:44:cb:fd:4d:43:db:aa:18:c6:89:62:
         2a:d7:65:bc:44:51:22:ff:c2:e3:68:fc:ac:fe:3f:10:cd:73:
         3b:76:c1:58:51:cd:52:04:60:1a:e0:3b:e7:61:d3:a8:02:d7:
         5f:62:4f:4d:19:4a:5b:df:35:46:9a:c3:4c:83:d7:50:04:fe:
         d9:a0:a9:91:28:7f:36:d9:3a:8d:8e:8c:32:39:b3:58:9d:fb:
         88:52:62:bd:9b:74:a4:cc:28:e8:5c:97:aa:6f:61:a1:0b:c0:
         8f:67:68:01:88:ce:98:01:8a:07:f8:a7:09:0b:c9:5f:92:7e:
         ee:2c:a9:9d:5f:d0:52:1b:a5:29:10:95:b5:78:d6:2c:70:24:
         ca:ee:e9:b0:a8:09:d0:a4:11:7d:ee:f8:e5:4f:ee:de:96:fb:
         66:cd:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:57 2025 by rpki-client