Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
File:                     285218D0288125F1010B5469F03888B08A661969.mft (raw, json)
Hash identifier:          1u3FAqnFOUiaxtni7CpzytUCsl6FvFxaG57kJZrtdJg=
Subject key identifier:   91:3F:7E:15:A6:16:E6:9E:D9:5D:A7:F5:82:65:EB:71:3C:FE:8C:15
Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69
Certificate issuer:       /CN=285218D0288125F1010B5469F03888B08A661969
Certificate serial:       1DA24CA28D1CFCDC286EA86DDC692279A01A4A61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
Manifest number:          04A1
Signing time:             Thu 30 Jan 2025 22:51:24 +0000
Manifest this update:     Thu 30 Jan 2025 22:46:24 +0000
Manifest next update:     Mon 03 Feb 2025 06:27:24 +0000
Files and hashes:         1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: DuiypcnD4qqcXqDHDL+z3jxNzjeD6bhECO06D/OylMU=)
                          2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: k8P5AhT4s12SuVIrOLY9OUPcVfTVNiJQc/ut89s+Rrw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:4c:a2:8d:1c:fc:dc:28:6e:a8:6d:dc:69:22:79:a0:1a:4a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285218D0288125F1010B5469F03888B08A661969
        Validity
            Not Before: Jan 30 22:46:24 2025 GMT
            Not After : Feb  3 06:27:24 2025 GMT
        Subject: CN=913F7E15A616E69ED95DA7F58265EB713CFE8C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:e1:db:a3:16:14:05:cc:35:7e:6a:85:86:
                    c1:d8:11:45:30:87:4d:f7:88:61:67:30:fd:5a:2b:
                    17:bf:a6:76:32:d7:a5:93:de:cb:ed:65:cb:86:df:
                    09:cc:22:4d:c5:09:d4:26:fb:e0:8b:b2:ad:75:e3:
                    7b:ae:dd:b8:9e:37:d5:28:41:05:93:3a:07:f4:8d:
                    6f:01:f3:9e:21:5f:75:46:48:47:f8:b8:ea:48:07:
                    09:90:19:ed:21:b6:dc:a3:e9:cb:0e:22:50:74:6d:
                    d5:2e:59:19:66:79:e9:8a:9c:21:20:93:fa:2d:90:
                    0e:14:2b:4f:0f:a4:6b:58:4a:ae:10:ef:46:1f:d2:
                    3f:3e:44:49:ab:81:f3:ec:89:a0:e6:bd:46:5c:f3:
                    28:11:c3:06:a8:7b:0e:ff:0f:af:46:5a:dd:3e:0d:
                    76:9a:6b:e8:8c:37:79:80:bd:0d:d2:4d:05:61:02:
                    9f:68:b0:39:a0:62:b3:f6:97:37:31:8f:00:7f:26:
                    4d:e0:60:89:2f:fc:a0:52:65:62:f6:b6:49:95:1c:
                    90:88:1c:9f:c9:0c:d5:59:f1:2c:3c:18:63:79:9b:
                    bc:5b:7d:a0:90:6e:84:4f:9d:d0:13:20:0a:a6:98:
                    c4:15:ad:30:45:8c:47:92:fc:30:95:11:30:f9:35:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3F:7E:15:A6:16:E6:9E:D9:5D:A7:F5:82:65:EB:71:3C:FE:8C:15
            X509v3 Authority Key Identifier:
                keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:21:5f:20:17:29:1d:42:62:b8:d7:be:10:e5:06:2b:8b:18:
         9c:4d:a3:44:37:fa:70:e5:11:43:7a:e7:f9:7e:47:e3:0a:c3:
         09:a1:fc:38:67:a6:a2:11:5c:3f:a0:02:fd:6c:f7:49:3c:8f:
         1f:d0:dc:84:7b:bb:ba:fe:18:95:4d:4f:97:77:4c:99:23:16:
         30:34:71:ed:04:ba:9a:bd:96:8b:6f:f8:98:bf:40:ad:82:80:
         e6:26:36:89:e2:b1:f5:a3:92:40:77:23:95:ad:73:46:7a:17:
         5d:0a:84:b0:28:70:4b:a1:a4:49:e7:6b:19:41:f9:62:9f:a0:
         4a:15:f1:1c:a5:53:c0:62:b2:91:bb:25:44:7f:f5:b2:d3:43:
         f1:5d:90:97:5e:92:64:13:29:05:c4:74:8b:f1:d1:00:49:fc:
         c0:71:4e:47:65:ec:6d:b5:b9:7c:06:a6:a9:ea:39:9e:84:ed:
         81:d1:21:90:27:66:1d:03:4a:f2:a7:05:39:1d:b0:72:fb:97:
         2a:95:f8:0b:33:e1:ef:16:09:5b:a7:10:e9:a6:2c:a6:9f:65:
         1e:52:e8:4c:7d:ef:68:f3:8a:85:b7:0f:a2:95:9b:95:22:74:
         ff:d2:6b:68:18:49:0d:bc:3a:ec:47:62:7a:02:ae:98:4f:15:
         45:4a:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:49:25 2025 by rpki-client