Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
File:                     DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json)
Hash identifier:          pnXYvOYJmz49ZJ/leUjuHumIEgtJrqFUOwYytsCDCfQ=
Subject key identifier:   47:9F:63:CE:59:71:8F:B3:D9:D2:88:F6:80:0D:27:F4:2B:EE:AC:E1
Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86
Certificate issuer:       /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
Certificate serial:       26E3D9CACF20559D4ED9A72375428A0E3B6E8A40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
Manifest number:          015B
Signing time:             Thu 30 Jan 2025 22:11:26 +0000
Manifest this update:     Thu 30 Jan 2025 22:06:26 +0000
Manifest next update:     Mon 03 Feb 2025 02:20:26 +0000
Files and hashes:         1: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=)
                          2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=)
                          3: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: ukX0VEETCoF5pKbiyBGl60vx719RIxOszM7yW+xBrOg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e3:d9:ca:cf:20:55:9d:4e:d9:a7:23:75:42:8a:0e:3b:6e:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
        Validity
            Not Before: Jan 30 22:06:26 2025 GMT
            Not After : Feb  3 02:20:26 2025 GMT
        Subject: CN=479F63CE59718FB3D9D288F6800D27F42BEEACE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:64:2d:46:9e:3a:8b:49:80:eb:58:49:94:
                    61:62:66:f7:ac:a5:25:37:93:8c:cc:5b:24:b8:1c:
                    74:b5:32:bf:ef:52:0b:d0:9d:8d:c7:dc:23:66:0d:
                    bb:eb:c7:8f:86:e2:40:b6:7b:34:ce:1b:90:06:14:
                    f0:97:1b:7f:ed:9b:49:8b:dd:b2:ac:6c:07:32:4f:
                    7a:b5:16:5e:98:9b:e8:0c:58:c7:30:2e:ac:a5:30:
                    bc:f5:df:90:80:b8:eb:30:3c:43:40:be:a0:2b:d0:
                    15:af:d6:8e:c2:f7:d4:8d:3d:05:5c:c2:f6:2d:27:
                    bb:b5:b9:21:9d:3c:95:25:ba:71:55:ee:b6:de:51:
                    6e:6b:de:87:61:c4:a1:26:ac:ad:65:d3:cd:4f:57:
                    21:f6:d7:38:90:c0:ee:10:71:97:78:59:2a:18:ee:
                    1f:b1:02:62:60:c6:31:d4:2e:80:05:c1:b9:ca:d2:
                    44:54:dd:93:5f:c2:db:63:5c:6c:ff:5d:47:39:c1:
                    08:c2:ea:29:54:6e:c2:57:b5:52:95:2d:2f:70:f3:
                    c7:5e:05:78:72:d3:2c:8a:7a:53:26:8d:ad:68:70:
                    f4:1c:02:b3:cb:b9:b7:47:42:bc:01:a3:10:1e:08:
                    ff:87:46:00:9f:07:16:eb:de:13:fb:5d:62:17:b7:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:63:CE:59:71:8F:B3:D9:D2:88:F6:80:0D:27:F4:2B:EE:AC:E1
            X509v3 Authority Key Identifier:
                keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:dc:c0:b5:99:a7:d0:c1:ec:47:02:0b:52:da:f3:b0:55:
         97:45:03:7c:22:b8:6a:c9:bb:38:29:29:22:31:1d:d5:a9:bd:
         e1:b4:28:1b:36:0f:f1:ad:f2:85:2d:88:b8:a7:29:a7:db:29:
         00:67:ca:82:5e:49:0b:07:0c:c1:68:de:b5:70:75:e3:c1:45:
         a8:ae:07:29:bd:2d:00:b3:61:44:92:4e:65:10:44:3b:2a:20:
         65:a7:c0:0b:ac:d9:0c:c3:bf:58:73:81:97:86:2e:1f:97:26:
         68:8f:7c:e8:39:09:9c:70:92:33:53:b0:02:30:9f:9c:d2:c4:
         05:18:f2:73:10:9d:19:42:86:bd:6e:43:38:29:c9:39:66:18:
         f0:57:5e:f2:a0:6c:df:0c:2a:5b:16:16:03:f7:21:0a:7f:da:
         a1:66:56:e7:0e:04:07:aa:b3:84:ff:87:aa:90:25:30:9d:36:
         26:d5:b9:0b:fb:62:f0:6f:20:16:c3:f6:da:54:75:aa:2e:2a:
         d7:6e:c1:23:fb:6c:39:23:ea:52:c6:89:7d:33:9e:b6:0a:2d:
         86:30:3a:f0:40:c2:19:3e:88:e7:b4:a9:20:5e:5f:d2:6b:fb:
         d0:e1:9a:23:bc:f1:37:94:57:45:d1:1a:b2:dc:0b:b1:df:76:
         70:e0:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:32 2025 by rpki-client