Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
File:                     A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json)
Hash identifier:          TBWkqH+HVjJe9oQ9Kw3re5X3R6guknkYDmLjqbO06hY=
Subject key identifier:   D3:F1:D8:16:9F:E3:CB:B1:5B:62:D2:37:B1:80:2E:DB:36:C4:9F:E9
Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44
Certificate issuer:       /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44
Certificate serial:       61DADFF500C0C42DBB1E6A1943432EA82AB14F4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
Manifest number:          66
Signing time:             Thu 30 Jan 2025 15:31:07 +0000
Manifest this update:     Thu 30 Jan 2025 15:26:07 +0000
Manifest next update:     Sun 02 Feb 2025 20:15:07 +0000
Files and hashes:         1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: +7YR+QuAeVk3+sgZlcgzGSfoLo31AJ2VMqC4Rm6spP4=)
                          2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: RUPVI4iBPMLS1QMK9F+6VrshaIZ9gOkFJXlLWq55QFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:df:f5:00:c0:c4:2d:bb:1e:6a:19:43:43:2e:a8:2a:b1:4f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44
        Validity
            Not Before: Jan 30 15:26:07 2025 GMT
            Not After : Feb  2 20:15:07 2025 GMT
        Subject: CN=D3F1D8169FE3CBB15B62D237B1802EDB36C49FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:33:d8:2f:7c:0f:33:3d:53:36:d6:80:92:
                    81:ac:fc:f1:10:bc:9c:64:5b:ef:a3:6d:61:3f:fb:
                    b3:e7:b8:af:f1:91:01:e3:b6:b0:61:47:8a:54:24:
                    8f:cd:f0:64:4f:41:d0:39:64:f0:b5:a2:b9:20:0c:
                    c3:45:e9:4a:ce:74:99:ae:e4:60:f9:7d:3b:15:ed:
                    0f:ee:61:74:b1:02:bc:3d:61:97:cd:09:72:2b:96:
                    b7:b3:09:b8:b0:1e:05:c4:39:99:24:ee:10:95:08:
                    2b:0f:97:8e:34:d1:d0:e6:54:1a:d4:da:8a:d9:dc:
                    0a:e5:5d:0d:6c:74:56:b1:78:0d:44:68:7f:83:c5:
                    0b:a3:5d:2c:4f:43:dc:66:2e:35:3a:d0:01:c3:4f:
                    66:09:7f:cc:80:a4:a5:62:20:92:9b:35:e3:42:c5:
                    5c:83:9b:84:c3:7f:ca:13:28:b3:fe:f3:8d:a5:cb:
                    46:05:55:a7:c0:21:35:c8:1b:d9:52:25:2a:43:b4:
                    4d:bb:1f:03:13:d4:6e:bd:96:a4:a2:ed:2b:8f:0e:
                    f5:dc:9a:7b:e3:17:c9:ed:b0:e3:bb:4b:e9:de:5e:
                    41:1b:ed:0f:8a:62:16:ce:4b:7e:be:5e:7d:f3:df:
                    7d:d3:83:f7:1c:f8:2c:f3:5e:2f:8c:ba:c8:e7:f9:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:D8:16:9F:E3:CB:B1:5B:62:D2:37:B1:80:2E:DB:36:C4:9F:E9
            X509v3 Authority Key Identifier:
                keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:5a:4e:e2:6d:33:6c:cd:5d:7e:9a:1e:e5:bc:6e:6a:bb:
         44:1b:62:5a:33:5e:0d:48:ba:0e:c8:3e:6b:e6:f9:4e:8b:2c:
         0d:b8:d8:a5:05:6e:e6:27:46:89:12:1c:83:6a:19:c7:d3:9a:
         51:96:f5:44:58:6c:eb:bd:58:fb:ee:80:b7:b8:54:47:dc:e3:
         03:c6:a6:67:1e:7d:81:2a:d0:23:44:ca:64:51:81:74:12:38:
         2d:4e:85:98:b1:35:de:a3:ba:e1:91:6d:dd:e5:1e:57:cd:34:
         d6:dd:5a:b5:92:6f:1e:d2:96:06:6d:a1:63:fe:63:56:71:c7:
         f7:c6:41:bc:93:a9:a5:88:70:93:8f:a3:06:5a:94:fb:d1:e5:
         92:ab:be:23:3c:af:4a:5f:ce:94:af:8f:dd:28:34:01:cd:08:
         d5:d3:35:ce:e6:74:51:fa:10:7f:4d:aa:37:c6:84:17:7b:47:
         f4:77:4e:6b:10:3a:8c:ef:b6:4d:90:9b:84:60:e9:46:36:91:
         3f:13:45:35:ea:68:e4:43:97:6c:b5:90:c2:1a:a2:a7:03:bf:
         c4:08:a8:32:12:6c:d0:b5:e4:45:19:63:0d:93:ba:89:b1:70:
         14:e5:84:0c:55:13:ab:cc:be:db:63:c0:94:3b:d8:5b:9f:2e:
         19:52:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:20 2025 by rpki-client