Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
File:                     8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json)
Hash identifier:          mXj7cKZDsf+GWazkWSFRXc6FQT9JckqETbB1GcdWkZE=
Subject key identifier:   AE:DC:E7:6B:D4:3D:A0:A7:7E:78:59:84:A8:AE:C8:9E:E3:27:C6:F6
Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8
Certificate issuer:       /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
Certificate serial:       51A0E59638E694D0AA07255647290CF89D76C327
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
Manifest number:          04A4
Signing time:             Wed 29 Jan 2025 22:50:34 +0000
Manifest this update:     Wed 29 Jan 2025 22:45:34 +0000
Manifest next update:     Sun 02 Feb 2025 10:40:34 +0000
Files and hashes:         1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: Kw6Usn9FPCQUTq3aNzIi149Nm6pyfuxOcoMkAS6ghSE=)
                          2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: Thu8byq7+jvrb6Bj7cJPqAPpvryap1JxOTP+Ej+gXl4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:e5:96:38:e6:94:d0:aa:07:25:56:47:29:0c:f8:9d:76:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
        Validity
            Not Before: Jan 29 22:45:34 2025 GMT
            Not After : Feb  2 10:40:34 2025 GMT
        Subject: CN=AEDCE76BD43DA0A77E785984A8AEC89EE327C6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:9d:7a:c3:12:bd:25:fb:25:77:c5:ba:44:
                    aa:4f:45:44:bb:a6:62:70:be:d0:8c:bf:23:01:f8:
                    59:2a:a0:9f:bd:04:af:be:33:a5:57:9c:0f:fa:78:
                    05:ec:c7:05:3a:c1:54:e4:2a:68:c1:1e:2d:29:d6:
                    09:13:ea:af:8d:f1:fd:f8:43:89:67:7b:c2:39:61:
                    39:a1:d1:75:0f:f6:0a:04:de:8b:60:a1:52:a1:de:
                    e8:fa:87:15:ad:d2:4c:74:05:ad:d3:fd:a9:d5:bb:
                    f3:6e:4e:43:d0:0c:e6:79:4b:db:d5:0f:a5:e3:ef:
                    e7:29:ff:28:30:f1:c9:c2:39:b9:f0:56:68:ca:f2:
                    f9:28:46:ae:7f:27:c9:4b:52:78:30:dc:7e:bd:4d:
                    a6:aa:fd:7b:b8:c0:73:ea:73:36:5c:e1:09:19:07:
                    2c:c7:56:50:11:87:50:99:62:41:4c:30:0a:8f:d4:
                    97:0c:d8:5d:f9:6f:36:7a:43:45:cf:49:83:b9:02:
                    e0:d3:74:3d:d6:bd:7b:23:36:76:33:06:11:0a:54:
                    ac:c1:6f:84:44:ce:93:21:4f:f5:58:83:91:14:c2:
                    6b:ce:90:9c:ed:72:b0:5e:8c:9d:15:4c:ed:b3:d0:
                    57:ee:5e:98:9d:2d:b4:2a:4c:7b:0d:02:7d:fa:06:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DC:E7:6B:D4:3D:A0:A7:7E:78:59:84:A8:AE:C8:9E:E3:27:C6:F6
            X509v3 Authority Key Identifier:
                keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:93:2f:4f:3d:a1:11:3e:cb:2a:c8:01:a0:cd:74:b3:a7:1b:
         68:35:1d:15:3f:c4:c7:53:12:ee:f5:ae:19:51:8a:96:e1:33:
         62:4e:09:2c:20:8b:7e:55:16:d4:b9:b1:3d:7e:b1:02:f8:ed:
         58:99:21:b7:42:7a:98:49:27:83:8d:d1:fa:47:f5:13:75:5f:
         57:8b:16:dd:98:37:33:16:91:48:4e:43:13:da:8f:18:9f:5f:
         24:89:e5:f0:f6:f1:29:28:3c:11:70:f3:eb:39:9e:91:e3:4f:
         00:b2:11:be:25:a3:3d:90:1d:54:69:d2:bc:8e:ad:a1:89:a7:
         c2:86:cc:9d:d5:19:1d:98:ba:a6:e7:29:33:dd:c7:4d:fa:b5:
         e4:e6:95:95:a8:47:40:20:cd:bc:cd:1d:16:0f:13:15:d9:19:
         32:90:f4:f8:3a:40:7f:4b:22:d5:cf:84:cf:5b:af:6a:cb:0c:
         87:b0:38:08:03:27:da:30:35:1f:16:39:87:53:61:39:71:02:
         9f:fb:cb:67:31:c9:17:9e:1c:ab:de:4d:d6:99:0f:49:30:0b:
         f5:7e:9c:28:5c:06:4d:43:bd:7a:1b:4d:62:b5:35:08:02:da:
         41:ed:cd:32:8d:7f:ef:04:6a:3c:48:78:3e:bf:af:4a:65:11:
         97:14:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:17 2025 by rpki-client