Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft
File:                     2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json)
Hash identifier:          oBetJgL2QArF6o2oC9Z5kHV1ErHsMR/wr5oKcdo3sW4=
Subject key identifier:   09:25:5B:E1:88:E9:55:DB:8D:E3:66:65:FB:0A:05:2E:2B:74:78:05
Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7
Certificate issuer:       /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7
Certificate serial:       130A9CC622B792980160F3F4B51A61B8AFC383C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft
Manifest number:          CA
Signing time:             Fri 31 Jan 2025 13:50:47 +0000
Manifest this update:     Fri 31 Jan 2025 13:45:47 +0000
Manifest next update:     Mon 03 Feb 2025 17:18:47 +0000
Files and hashes:         1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: gu5kPjSwAabyiZsF8Dn1uIugDHy7dLf8mhSzm6N82pU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0a:9c:c6:22:b7:92:98:01:60:f3:f4:b5:1a:61:b8:af:c3:83:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7
        Validity
            Not Before: Jan 31 13:45:47 2025 GMT
            Not After : Feb  3 17:18:47 2025 GMT
        Subject: CN=09255BE188E955DB8DE36665FB0A052E2B747805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:88:53:fa:ce:ec:88:1c:f0:99:e7:0a:a3:
                    a2:a0:9f:d4:df:47:32:7c:20:cf:f2:b9:e1:8a:1c:
                    6e:19:dc:1a:56:62:69:1a:e3:ea:02:0b:39:72:7b:
                    49:c9:9e:f1:a9:70:51:d8:31:7a:0d:3f:41:d7:f7:
                    d2:85:fe:01:b9:3f:65:7b:ca:17:6d:70:1d:dd:8f:
                    51:14:07:18:f3:c8:5c:53:99:8f:45:4e:f5:2b:58:
                    83:71:d6:67:10:48:76:c7:0b:de:84:75:c5:d8:6a:
                    1e:ed:8c:59:08:af:20:4c:86:91:3b:42:c8:50:03:
                    df:96:6f:b8:33:5f:9d:55:2e:b8:9d:af:50:36:46:
                    6a:2f:27:e8:c9:ab:26:b1:67:68:ac:20:92:8e:a5:
                    24:b4:4b:87:b9:e1:aa:6f:02:e1:5d:b2:d6:6e:7c:
                    f5:ee:17:1d:c1:f2:12:2c:f9:24:e6:92:36:2a:f6:
                    b9:4d:85:2c:97:22:e8:bd:8a:44:a5:f4:da:46:67:
                    53:ae:4d:bf:d9:9b:4f:37:3c:31:0b:6f:83:fc:18:
                    72:d0:21:06:02:d4:23:97:ce:c5:91:73:24:14:f4:
                    d9:4e:00:ba:ab:75:1b:77:c5:d6:6b:06:8e:a3:22:
                    aa:aa:c3:b3:ed:42:1e:a5:2c:a5:8d:09:16:2f:08:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:5B:E1:88:E9:55:DB:8D:E3:66:65:FB:0A:05:2E:2B:74:78:05
            X509v3 Authority Key Identifier:
                keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:dd:26:bd:73:47:7c:6a:40:a8:3a:60:2c:be:c4:fa:01:
         7a:8c:f1:89:c8:b0:cb:7e:84:02:b2:aa:9d:b3:36:05:6e:f9:
         07:1b:db:39:d2:ab:17:6f:ca:87:cf:db:ba:54:ec:1d:ae:1f:
         fe:b9:11:1d:3f:43:20:e4:54:f3:e7:ef:24:35:d8:af:80:05:
         94:07:4b:78:99:8a:e1:ab:7d:cb:ae:cc:95:f4:4e:42:36:4f:
         f8:f9:90:60:39:8d:e6:0a:f5:ec:f7:b0:d3:24:f9:40:ce:41:
         16:ff:0e:6d:05:04:b4:e1:91:43:a5:4e:da:ba:f5:47:f2:39:
         57:73:1c:ce:9e:ed:c4:84:60:64:48:1b:72:f1:6a:05:43:fe:
         06:1a:9f:c5:e7:fc:03:43:c8:bc:17:33:af:eb:2b:37:44:b3:
         fb:7e:21:37:0b:5f:d4:e7:ee:f5:a0:b9:b8:6e:b1:af:3a:00:
         28:13:9b:06:be:70:d3:1b:87:d2:24:f0:8d:eb:3b:cd:5d:49:
         b1:92:d5:05:f6:f0:41:b3:92:fe:bd:5d:56:2d:93:61:96:5e:
         79:bd:9f:89:0c:66:41:b5:db:eb:cf:d4:45:1e:15:9b:a3:4f:
         ce:f3:d7:e1:64:18:0d:29:6a:b0:da:ee:05:26:ed:77:4f:cd:
         73:bf:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:01 2025 by rpki-client