Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
File:                     6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json)
Hash identifier:          s1XN547AgAFHUitP/AOwaIT70tSjbqs8KRCZrv0z1y8=
Subject key identifier:   65:6B:2A:EE:EF:2D:7B:26:C8:B3:46:E3:8C:3C:11:1D:53:58:82:D5
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Certificate issuer:       /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial:       7AC9859BA2528149C44E6F1513EB82CB31314493
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
Manifest number:          020A
Signing time:             Thu 30 Jan 2025 02:21:27 +0000
Manifest this update:     Thu 30 Jan 2025 02:16:27 +0000
Manifest next update:     Sun 02 Feb 2025 05:45:27 +0000
Files and hashes:         1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: Pto1t/zWo/BTAn7DwBNKU7vR/ZyYh0xSxibr/QoeoHg=)
                          2: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: HCJTfWuRFERa9sFGXrmRjthEJz1rc9WgcSUiJ3w41QM=)
                          3: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: 7PzkGssWUKzWr7bTKiWuWem39yoOK1Ywvu1R+2bxEzA=)
                          4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: /uuHBhafeaoCH+HOZHl14rc39vsEcoNz0FatbJ58vz8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c9:85:9b:a2:52:81:49:c4:4e:6f:15:13:eb:82:cb:31:31:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
        Validity
            Not Before: Jan 30 02:16:27 2025 GMT
            Not After : Feb  2 05:45:27 2025 GMT
        Subject: CN=656B2AEEEF2D7B26C8B346E38C3C111D535882D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:37:06:76:d9:8f:da:55:33:ff:8b:cc:43:
                    69:45:82:13:c5:7b:a0:f8:4d:35:46:66:e8:4e:54:
                    0f:15:57:15:87:ec:08:22:4e:74:44:ad:72:5e:5f:
                    a5:58:3c:bd:7d:66:ed:ba:cc:b3:67:34:fb:57:2f:
                    b2:e1:5a:43:7e:28:74:08:98:8a:cb:ba:fc:3f:2e:
                    2f:71:8b:1f:f6:1f:2f:c7:d1:d5:6b:13:5b:16:3c:
                    d5:9c:40:31:47:10:01:48:fd:69:e1:05:f3:fd:6b:
                    da:4d:f0:c2:5c:c8:17:72:91:3a:cd:5f:d5:82:d1:
                    6c:5c:f8:a9:b7:88:50:08:9b:01:f0:6a:f3:21:58:
                    5c:b3:b7:5c:40:c8:9c:32:b5:c7:2a:65:76:45:f9:
                    07:1e:b9:d5:40:27:ff:0a:f7:4e:ed:e7:4e:7c:38:
                    99:a2:99:81:57:f9:20:b3:93:82:c7:b7:a0:9e:b6:
                    7a:72:7a:c8:ac:69:5c:8a:df:a6:e4:eb:e7:f5:42:
                    ce:59:46:2d:1b:32:55:d0:52:df:20:0d:62:c0:2a:
                    42:9f:0a:b2:a2:6b:ec:6b:72:7b:a1:cf:c7:5b:ae:
                    1b:10:d7:56:0a:13:cc:36:0c:40:57:ab:e4:3b:39:
                    fc:e0:0f:99:12:05:a7:fa:d8:18:68:08:85:8e:a8:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6B:2A:EE:EF:2D:7B:26:C8:B3:46:E3:8C:3C:11:1D:53:58:82:D5
            X509v3 Authority Key Identifier:
                keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:cc:da:91:ed:d5:f8:0c:ed:e1:d1:90:d7:08:76:a8:a4:
         45:8f:93:40:5b:76:de:24:2a:2d:93:85:b0:a7:f1:f4:48:87:
         bc:98:3f:1b:3b:95:a8:3f:f0:6e:11:91:e8:ca:17:3c:bc:ef:
         53:f3:50:b6:b6:7b:00:ab:b3:db:98:94:6b:f8:03:27:cf:6a:
         6a:50:78:74:6c:06:84:14:d5:80:84:fc:9d:25:f9:d5:a4:6e:
         04:6e:6e:c1:1f:eb:09:80:b8:9a:2b:95:9e:75:57:01:ac:60:
         56:b7:c4:dd:43:d8:33:d0:86:2c:c8:6a:d2:aa:62:1a:fb:28:
         aa:52:32:b2:b1:14:a4:a7:32:5d:90:d7:b2:52:42:48:3e:af:
         51:f1:b1:ae:85:df:a9:cf:66:56:91:f0:1d:02:40:c3:53:1d:
         c2:ce:d7:76:5d:31:c1:c8:bd:c3:22:72:c4:c9:15:10:1e:4b:
         73:30:ad:9e:d6:30:f0:54:0f:9e:0d:24:b6:16:2c:b2:99:09:
         f7:ad:0d:d9:45:67:d2:cb:ba:6b:83:ac:6a:28:ad:74:36:6f:
         ac:38:18:b3:c2:f4:fa:dd:45:43:4f:fb:5f:94:dc:9b:b3:83:
         4a:7c:bc:2e:84:fc:f9:16:f8:1e:3a:4a:dd:c0:da:93:7a:d1:
         66:d9:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:19 2025 by rpki-client