Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft
File:                     399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json)
Hash identifier:          Lu6pjw2WXKADnoQi7ofMOxTa8K976fo9XhvP7o4yiIo=
Subject key identifier:   67:F0:7F:1E:A6:62:F7:87:53:D1:94:11:3F:07:E1:BB:87:DC:7C:8C
Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30
Certificate issuer:       /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
Certificate serial:       33644FAC263118825A027645BB876FCFB9C84C74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 14:10:49 +0000
Manifest this update:     Fri 31 Jan 2025 14:05:49 +0000
Manifest next update:     Mon 03 Feb 2025 15:49:49 +0000
Files and hashes:         1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: /vuj/h7kUZTjO1XHx69jnMNmoF3w0RvV89UjxypFeHI=)
                          2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: ns+3re2xjf2DCHP0O34XWP3LLYLuHBfKDvdHrJkc5xc=)
                          3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: Rn8OqBzW/xYegKWYDPy3dtpB90PTZV6hGwTCLk/r37I=)
                          4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: mJLB2tKLnYbB9zMLRYUfW0oiNzOSUGzCunMjTLsdgdw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:4f:ac:26:31:18:82:5a:02:76:45:bb:87:6f:cf:b9:c8:4c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
        Validity
            Not Before: Jan 31 14:05:49 2025 GMT
            Not After : Feb  3 15:49:49 2025 GMT
        Subject: CN=67F07F1EA662F78753D194113F07E1BB87DC7C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:55:b4:d4:34:62:70:16:f2:1f:8e:ac:07:
                    3f:46:b4:11:77:2b:84:4f:48:49:33:7d:1e:26:e3:
                    66:49:90:21:6e:ab:a7:ff:d2:cd:53:12:d4:27:19:
                    d3:9a:3a:15:8b:fd:b8:48:c0:38:a2:7e:7b:a5:f6:
                    ce:87:a0:b8:28:13:53:d7:a4:eb:d1:fb:95:38:11:
                    a0:26:b1:dd:bd:ab:1f:1d:03:ca:32:4b:47:fb:47:
                    d6:e1:06:0a:fe:90:00:2c:0c:c4:02:46:30:18:61:
                    ae:c2:04:84:80:6c:69:6f:5d:3b:89:14:e6:cb:8c:
                    74:ff:ea:52:0b:05:e6:ab:0a:69:c6:3a:c1:ff:5b:
                    51:88:fd:b4:36:19:1b:ec:52:78:3d:f3:0d:69:10:
                    c3:d7:d2:1f:90:fc:25:75:e9:29:6c:d1:6a:b4:ba:
                    ca:3e:54:f2:97:e6:ff:e3:b4:b3:bc:48:ce:4f:67:
                    7c:11:19:df:49:00:33:e6:ab:0c:9f:5d:69:89:a7:
                    f7:17:f1:2d:db:a2:a2:61:35:ec:33:94:08:ca:d8:
                    17:5f:23:d3:2b:e3:7c:68:04:11:26:70:a1:1e:89:
                    f5:2b:6f:2c:08:ef:be:87:49:a8:8b:55:ae:e4:6f:
                    a0:b9:84:5a:73:a7:46:97:80:5d:41:6d:d1:d9:94:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:7F:1E:A6:62:F7:87:53:D1:94:11:3F:07:E1:BB:87:DC:7C:8C
            X509v3 Authority Key Identifier:
                keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:6f:23:76:87:ef:ab:89:6a:b9:94:cd:25:62:e6:bb:78:
         79:39:07:ca:87:dd:2f:1f:d9:33:74:ac:23:db:da:b3:c7:4d:
         05:04:55:a6:df:a8:e3:55:b0:a3:41:ad:00:bd:45:9d:6e:b2:
         be:fe:1c:fc:a5:a7:f2:38:b5:c2:c5:a5:f7:d0:64:73:e8:52:
         41:2b:b8:45:a2:2e:ad:e0:df:ee:8f:9a:ef:9d:79:b7:5c:c9:
         86:01:f0:39:5f:01:b5:67:c0:d3:88:c7:f4:63:76:e7:16:61:
         da:87:38:92:4a:17:a0:5d:4a:a4:74:c1:44:91:98:f0:1f:36:
         9b:54:7b:87:f2:57:06:c7:9c:c9:b0:38:68:64:79:5b:fe:39:
         b4:46:d3:fa:e6:0f:af:2d:05:dc:3a:47:a2:fe:04:cb:75:ad:
         07:2b:5d:08:65:dd:34:88:b9:e2:be:ff:89:45:b9:25:07:3a:
         52:c9:7b:c9:4c:30:d2:07:7b:8c:f3:0b:d7:ec:df:60:22:4a:
         0c:b2:5e:f8:18:ea:93:34:59:46:d0:27:61:6c:f6:c0:1d:7a:
         3d:7e:77:23:be:db:c2:c8:0f:89:47:20:31:d4:0d:3c:77:35:
         fb:4b:08:23:a8:a2:0f:a9:3c:7b:71:8a:66:91:06:27:28:61:
         c3:0c:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:28 2025 by rpki-client