Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
File:                     F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json)
Hash identifier:          iFiZGUIFrm2YcpQDNlITdc+c9r/HOXDEEOZDwO3b2Fg=
Subject key identifier:   8E:77:E5:B6:E2:4D:A7:FF:19:B2:27:F6:68:74:14:8C:25:23:43:65
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Certificate issuer:       /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial:       40F9F4495276D809E1ED36151D8EAADDC0BE55DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
Manifest number:          0321
Signing time:             Wed 29 Jan 2025 13:41:12 +0000
Manifest this update:     Wed 29 Jan 2025 13:36:12 +0000
Manifest next update:     Sun 02 Feb 2025 00:23:12 +0000
Files and hashes:         1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: 4fxeQutAHCIlBP4cv0mvnjFbleyvOk9Tizufv+tSvQo=)
                          2: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: QDyNAQCsZTwXaCDGrTmKaMOsrFVg55/LS3fiRrnIomg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f9:f4:49:52:76:d8:09:e1:ed:36:15:1d:8e:aa:dd:c0:be:55:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
        Validity
            Not Before: Jan 29 13:36:12 2025 GMT
            Not After : Feb  2 00:23:12 2025 GMT
        Subject: CN=8E77E5B6E24DA7FF19B227F66874148C25234365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:36:27:cd:f0:74:01:8c:65:5c:60:86:da:
                    10:00:96:f2:57:b2:ae:74:2a:b9:17:9b:f0:a0:80:
                    0b:fd:3a:e0:80:16:0b:66:76:94:5f:15:c6:f2:6c:
                    5e:1c:c4:97:c0:91:6c:4b:9a:57:80:1d:0c:7e:be:
                    af:3a:a8:c9:76:da:71:57:71:fc:ab:9c:74:8c:c0:
                    f2:85:dd:7d:23:3a:43:ad:0a:bd:8a:e7:4a:ca:26:
                    e4:26:59:fd:5f:de:eb:5d:74:d8:99:19:b4:00:bc:
                    85:4d:e3:49:cf:9a:bb:f5:fe:e8:e8:9a:81:14:d0:
                    8a:13:8b:2c:33:64:34:37:3f:a4:e2:1e:94:08:a7:
                    f0:cc:91:cb:47:dd:55:19:64:ff:c0:57:55:fe:63:
                    35:8b:d3:39:aa:16:37:fe:78:5d:fe:22:21:b7:32:
                    aa:61:7d:5b:7c:fd:0e:9a:75:21:67:09:b2:e3:4b:
                    6b:b6:0d:7d:b9:ac:06:64:a7:1a:8b:15:59:69:c4:
                    be:36:69:87:8c:f1:46:cb:7d:48:46:b2:97:48:8e:
                    eb:a3:1b:25:30:82:f8:d7:c4:7a:56:5a:93:43:4b:
                    5e:21:10:31:5d:09:e0:03:f6:d8:b2:26:8e:a5:13:
                    33:aa:b2:0f:49:8c:8a:aa:d0:c3:42:d1:82:03:d2:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:E5:B6:E2:4D:A7:FF:19:B2:27:F6:68:74:14:8C:25:23:43:65
            X509v3 Authority Key Identifier:
                keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:39:58:1d:92:e3:0d:08:6f:90:38:33:df:f3:cf:e6:f2:
         43:aa:e7:43:1a:41:bc:b7:9e:69:d7:24:7d:9c:cd:f6:0d:4a:
         99:ed:72:6a:4d:41:0a:6b:5c:53:67:5a:1b:71:e5:f5:ff:3a:
         69:6c:28:0f:0e:54:63:b7:6f:12:0f:51:6d:96:36:97:62:44:
         c5:42:0b:31:15:f5:ee:d5:51:f7:d7:85:0f:e0:1e:33:37:fa:
         8b:86:df:22:d6:30:f6:b4:9c:67:08:b6:a7:63:fd:6b:79:5d:
         a3:b7:15:d5:d9:98:91:b2:03:9e:f3:ed:56:0f:8c:1b:13:3b:
         75:e2:50:e9:af:40:25:f1:b6:13:6f:f0:e8:6c:0f:3a:1b:c3:
         39:16:63:78:3b:17:b5:dd:8d:83:1e:8a:9d:30:c3:46:96:64:
         51:e7:56:38:be:3b:67:ff:7c:ae:19:0e:a5:c3:0a:8c:32:b7:
         8f:b3:62:95:f0:c9:d1:a6:12:0e:bc:a3:f1:e4:87:04:67:3b:
         a3:d0:43:24:dc:33:6c:0e:cb:0f:fe:91:bd:c9:bb:6d:60:65:
         62:7f:f0:70:5f:bb:2c:6d:50:65:fc:65:e5:73:f5:81:02:b4:
         ca:b7:50:ee:2a:3e:ed:36:7d:13:98:cc:a6:01:ae:98:97:18:
         3a:f0:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:59 2025 by rpki-client