Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
File:                     E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json)
Hash identifier:          BsBaEq2ydpFA1JFyAjxihgjHhFntS+EWWkXxKsecoi8=
Subject key identifier:   3D:9D:16:69:28:00:26:45:89:89:BA:BA:E8:FF:77:C8:79:3D:9D:D5
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Certificate issuer:       /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial:       2F400807EC0C957723EFF9C6B7CCA4EBA814A5E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
Manifest number:          0429
Signing time:             Thu 30 Jan 2025 16:31:10 +0000
Manifest this update:     Thu 30 Jan 2025 16:26:10 +0000
Manifest next update:     Mon 03 Feb 2025 01:35:10 +0000
Files and hashes:         1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: pIrm7aPUPJFZ4XifD9qRVgfWPMQmX5/I7DSyyV9fZas=)
                          2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=)
                          3: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: aLlGejDm9535rrLXGBpBsSSrWGA2DujzYJe/8cQ/cIQ=)
                          4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:40:08:07:ec:0c:95:77:23:ef:f9:c6:b7:cc:a4:eb:a8:14:a5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
        Validity
            Not Before: Jan 30 16:26:10 2025 GMT
            Not After : Feb  3 01:35:10 2025 GMT
        Subject: CN=3D9D1669280026458989BABAE8FF77C8793D9DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:0d:f5:93:09:3c:a7:73:a8:4e:37:7c:16:
                    68:85:93:79:9b:7d:87:49:f0:a7:9b:a4:3b:ef:7d:
                    72:0d:bf:7c:b6:59:d5:82:3b:b1:68:5f:1b:d3:f9:
                    0b:3d:dd:07:b2:12:6a:50:ff:fb:d1:a9:56:6c:e0:
                    16:d2:1f:4a:6a:5d:1c:64:d6:17:6c:a5:4e:05:d5:
                    01:e3:3a:52:3f:10:b6:8b:42:00:af:f8:c3:20:82:
                    96:36:40:1d:4c:e2:c7:3d:b8:f5:95:fd:09:e2:4c:
                    5d:a8:9b:68:ca:21:ef:7f:53:8f:18:e0:e8:11:39:
                    2f:33:fa:28:fb:90:9e:43:43:3c:4e:40:8b:71:05:
                    11:df:57:1d:28:52:ac:8b:0f:0f:11:c6:2f:11:5c:
                    75:f8:30:57:7f:c9:92:b9:3e:a6:7b:aa:7e:0a:9f:
                    0a:6d:3c:5a:62:c7:e7:4b:5f:19:11:70:77:61:ef:
                    a2:ee:05:8d:26:bd:15:3b:a0:8b:e2:a6:aa:a0:9c:
                    20:f0:48:46:89:88:33:b5:4b:33:6a:36:17:b5:d1:
                    13:29:3b:81:b5:4f:f1:7d:c6:5e:76:dd:8f:18:60:
                    e2:51:aa:92:07:6b:d9:b8:33:8c:eb:ca:c3:0b:d2:
                    36:99:f5:ed:26:2e:fc:f1:46:f2:d2:ce:39:1d:ea:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:16:69:28:00:26:45:89:89:BA:BA:E8:FF:77:C8:79:3D:9D:D5
            X509v3 Authority Key Identifier:
                keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:72:f0:62:f4:7c:d5:24:29:43:61:a8:f0:f7:1d:c4:76:84:
         c7:35:a2:35:02:25:5c:66:a8:8a:1d:04:fc:0d:ed:06:db:d3:
         9c:d9:0a:18:88:39:d7:27:e2:f4:aa:d9:15:72:1a:81:36:1a:
         c6:c5:40:d5:51:0f:ca:ef:bb:c7:6e:57:e7:0a:f4:33:0d:18:
         39:29:37:68:87:5a:69:e7:a2:07:5b:69:76:ab:58:e6:f1:de:
         cd:42:b5:00:2d:b4:2a:99:10:ca:58:09:55:4d:e5:14:14:97:
         2c:7a:bb:63:a6:bb:b1:53:ad:26:41:87:b4:52:31:36:d0:35:
         0f:7c:1a:b0:37:e5:aa:6a:a2:ae:4e:05:da:db:95:54:a2:f0:
         17:0d:a4:da:12:15:cb:95:31:60:49:81:51:51:7d:c4:81:13:
         5d:ab:3d:a4:16:ac:64:be:4a:15:1b:63:ac:4a:bc:04:74:3d:
         79:f2:80:fc:65:68:13:a6:42:27:a1:50:b0:3f:eb:14:ec:39:
         3a:74:fb:9e:c5:41:f5:36:81:44:5e:58:6c:63:49:fb:ac:a9:
         80:67:38:ee:cb:12:6f:67:54:f9:58:d4:ec:77:a0:f8:51:36:
         fb:6c:3a:d8:49:a5:57:86:d6:b0:05:60:99:e1:ea:ed:04:9a:
         6f:85:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:53 2025 by rpki-client