Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
File:                     69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json)
Hash identifier:          dv3mXVANkW8OzzNNsAwiTnC0H257++n94GtjV/JA0II=
Subject key identifier:   19:1F:C2:99:66:52:4A:2A:EA:2B:AD:66:89:69:4E:BE:24:B8:F5:D8
Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7
Certificate issuer:       /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
Certificate serial:       087BA7C81BC65E2F0F9BF251B973A44C57559799
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
Manifest number:          018B
Signing time:             Fri 31 Jan 2025 08:31:40 +0000
Manifest this update:     Fri 31 Jan 2025 08:26:40 +0000
Manifest next update:     Mon 03 Feb 2025 14:00:40 +0000
Files and hashes:         1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=)
                          2: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=)
                          3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=)
                          4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: WTIPuN+dT8Np7FCmW61h9RL0k38iE9QlZgL5svsK8Rg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7b:a7:c8:1b:c6:5e:2f:0f:9b:f2:51:b9:73:a4:4c:57:55:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
        Validity
            Not Before: Jan 31 08:26:40 2025 GMT
            Not After : Feb  3 14:00:40 2025 GMT
        Subject: CN=191FC29966524A2AEA2BAD6689694EBE24B8F5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:bf:21:0e:80:85:6a:f8:2c:fb:0a:7d:4a:
                    85:e6:46:f9:ca:72:a7:0b:86:95:c1:14:6f:c7:3d:
                    18:b0:1f:c0:cb:13:4d:84:07:4c:13:e1:c3:59:1f:
                    f6:e5:42:32:fc:50:5f:3f:fd:41:6d:81:cb:e0:14:
                    e4:65:35:fc:4f:73:41:15:aa:9a:02:19:58:96:71:
                    43:36:ee:94:5e:b1:fe:3c:7c:c0:af:3e:ca:4d:92:
                    19:1e:17:55:fd:8d:49:65:6c:24:d6:6b:ed:80:59:
                    bd:25:90:84:76:c4:1d:43:b7:3c:26:3e:20:19:6d:
                    60:c3:9f:58:4f:6e:d5:e5:1a:5a:dd:0a:58:2e:4c:
                    19:55:a0:70:aa:2d:37:b0:8d:a2:7d:20:04:36:c8:
                    b7:b0:e2:b6:b7:b6:82:de:c0:d1:24:60:b2:b7:3a:
                    37:ec:8d:f1:79:b1:7b:8a:c2:0b:95:fd:ef:30:a8:
                    f0:0e:ee:0f:cf:1d:16:0e:60:af:aa:11:82:c1:e8:
                    fb:3e:88:e3:a0:40:3c:2e:6c:fd:fe:29:68:8e:d7:
                    8b:2d:27:9e:30:c1:16:3e:cd:a2:b7:66:0e:e1:68:
                    89:8f:d3:be:ae:2a:b0:4a:49:71:aa:e6:99:d3:9c:
                    e5:46:37:74:f9:0e:7d:8d:8e:54:18:29:ed:e0:02:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1F:C2:99:66:52:4A:2A:EA:2B:AD:66:89:69:4E:BE:24:B8:F5:D8
            X509v3 Authority Key Identifier:
                keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:dd:de:c5:0d:21:49:b5:a5:03:55:0c:4a:23:61:47:ba:
         c2:1f:42:9e:2a:09:2d:f5:b1:d0:44:8c:d7:db:09:63:78:03:
         b8:82:c9:bd:94:5c:87:db:3e:37:04:8b:11:fa:38:75:24:47:
         64:62:12:0d:ce:76:8d:5a:bc:26:e8:b8:04:1e:57:39:a1:9b:
         18:27:b6:71:47:65:82:7a:15:6e:30:5d:2d:78:ac:a3:6f:a0:
         f8:c8:0f:61:9f:8a:80:9a:96:91:5f:62:97:2f:13:e7:1f:3e:
         85:29:8d:8c:ba:8b:78:b7:60:a6:a0:3c:e4:bb:c0:cd:df:c1:
         ba:bb:91:5f:0c:f7:f3:41:57:e2:b9:ac:39:71:56:4c:8d:e7:
         4c:72:0b:8d:59:1e:0d:f4:d7:a5:94:f4:89:bb:3c:3c:ec:0e:
         e9:e4:e7:d0:1a:2f:a0:0c:bf:ff:b9:03:72:62:e0:67:3f:c6:
         71:b9:55:fe:a9:2f:fc:87:2e:8b:2d:cd:25:5f:6e:70:17:a7:
         ec:a2:9f:cd:84:57:a3:ba:cd:74:a0:2e:08:04:54:e5:6b:d5:
         b4:88:7d:96:58:d6:15:b8:fe:d8:64:08:1c:0c:4f:25:fe:53:
         62:7e:34:92:13:31:82:03:0f:4b:bb:75:70:81:78:ec:d9:0c:
         aa:80:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:57 2025 by rpki-client