Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File:                     AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier:          uwfIn5gu0lB/UYDQV5IyGeCQlC130KArwhSVpCQDeKo=
Subject key identifier:   86:E4:B1:A3:CD:09:D6:63:DE:23:FD:1B:6E:F6:E0:82:FC:00:92:FC
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer:       /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial:       13C700E2732A0B9C847E03864CE5159D4CE5C1F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number:          024D
Signing time:             Fri 31 Jan 2025 09:11:29 +0000
Manifest this update:     Fri 31 Jan 2025 09:06:29 +0000
Manifest next update:     Mon 03 Feb 2025 15:12:29 +0000
Files and hashes:         1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: wcz+anCBTgiQakHtWPH/KpkxtEXhljbsvXZlhvSrjhw=)
                          2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c7:00:e2:73:2a:0b:9c:84:7e:03:86:4c:e5:15:9d:4c:e5:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
        Validity
            Not Before: Jan 31 09:06:29 2025 GMT
            Not After : Feb  3 15:12:29 2025 GMT
        Subject: CN=86E4B1A3CD09D663DE23FD1B6EF6E082FC0092FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:69:2d:3f:7b:87:be:ad:c1:67:f4:a2:dd:
                    4c:74:28:ab:2b:3d:64:92:6c:95:9e:fc:a4:e2:6f:
                    19:99:96:2b:75:03:47:92:b6:c0:67:a3:a1:cb:83:
                    44:56:48:df:83:a9:62:20:14:9e:1c:14:a8:70:5a:
                    63:7f:6c:19:dc:e8:40:99:a7:e4:0e:79:3c:8c:fd:
                    b8:d8:47:2c:a2:7a:e9:79:9e:9e:91:7a:59:ca:0e:
                    c9:09:34:65:58:f6:70:eb:05:ca:d5:68:9d:68:4f:
                    12:aa:06:84:c0:4b:c1:45:76:70:3f:84:cf:97:9c:
                    28:93:0e:dd:5e:ab:10:15:e5:a9:0a:ff:08:b7:66:
                    7a:b3:08:2f:ed:2b:9a:35:3f:30:d7:c6:1a:db:07:
                    af:d8:8a:bf:ad:cd:21:3b:76:e5:a8:f3:9b:69:8e:
                    f4:5a:65:f6:92:76:9d:39:86:26:d3:41:0d:9b:87:
                    0e:90:0f:5e:49:8b:d9:f1:d6:6f:9b:c3:b4:4b:ef:
                    44:11:d8:ab:65:82:ad:73:b0:f3:cb:c2:80:25:01:
                    02:4e:94:66:3b:ba:d1:83:48:41:24:5d:75:c8:42:
                    94:ca:7e:5b:51:45:a6:54:51:0d:39:07:f7:91:2f:
                    39:90:8e:2b:1b:df:ba:83:00:a9:d5:2a:84:4e:63:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E4:B1:A3:CD:09:D6:63:DE:23:FD:1B:6E:F6:E0:82:FC:00:92:FC
            X509v3 Authority Key Identifier:
                keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:15:92:67:55:d2:5d:6d:7e:87:82:c2:b8:5f:b8:49:7a:77:
         76:13:7e:ee:d9:fd:ce:58:3e:30:e3:7e:db:9d:3d:c8:d4:f2:
         82:39:3d:cf:a6:37:11:e3:05:f7:6b:81:83:ee:e3:02:4a:1a:
         1c:0f:ba:79:2a:3d:b7:c3:58:5e:2b:3a:42:99:6d:c7:6e:e0:
         5b:b2:a9:41:35:69:6a:68:14:c4:23:49:32:bd:94:c7:a1:f0:
         4f:7f:b4:ea:27:a6:cd:e2:11:5b:94:32:e2:de:85:78:a4:7a:
         35:e1:85:85:96:a6:31:f8:c1:cf:3d:80:fc:8e:f4:b9:16:d6:
         61:0c:d7:46:9b:ec:0d:a4:9d:58:de:bf:5b:b3:e3:8a:71:66:
         fb:c7:7b:f0:33:87:2e:9d:8d:7d:ec:21:6d:51:b3:10:b6:0a:
         00:6f:42:53:01:d3:48:36:01:cf:33:83:3e:40:7d:e1:8c:8b:
         1d:a5:25:ec:29:7b:fe:c3:6a:f1:fe:43:49:77:86:b6:9c:d5:
         5c:a3:4c:20:9f:72:f7:e7:b6:90:3d:a8:03:ab:f2:b9:b4:9b:
         99:c8:b1:6f:06:8a:05:85:8c:f2:75:9a:18:7f:88:e7:f4:63:
         dd:cd:51:cd:81:19:ca:b9:7b:c0:58:be:74:e6:a3:e0:88:7e:
         cb:99:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----