Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft
File:                     D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json)
Hash identifier:          VNXY4vjJ/GoneErTCGAqWfk314q4UuyobtYBMKsZuJQ=
Subject key identifier:   16:30:0A:1A:77:73:C9:8E:2D:AE:D9:49:B6:E5:3D:A0:7E:A2:51:2E
Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3
Certificate issuer:       /CN=D454E26475969CECE78A97B9152AFC76DB922AA3
Certificate serial:       6C91FECD2BA7BE1E4A6EA92FF5320F2AE8577679
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft
Manifest number:          0149
Signing time:             Fri 31 Jan 2025 18:02:18 +0000
Manifest this update:     Fri 31 Jan 2025 17:57:18 +0000
Manifest next update:     Mon 03 Feb 2025 20:53:18 +0000
Files and hashes:         1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: S65pEd9EafGpFv9l7wABGuB12ZG1hQ7yB7Ag/x5xGSY=)
                          2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:fe:cd:2b:a7:be:1e:4a:6e:a9:2f:f5:32:0f:2a:e8:57:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3
        Validity
            Not Before: Jan 31 17:57:18 2025 GMT
            Not After : Feb  3 20:53:18 2025 GMT
        Subject: CN=16300A1A7773C98E2DAED949B6E53DA07EA2512E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:3e:43:7c:3d:2a:d5:44:0d:f8:25:fc:3a:
                    49:9a:6a:a1:ca:4b:48:40:b5:9b:f6:37:46:ff:3a:
                    9f:d4:54:9b:97:49:a9:d6:17:1a:aa:fa:d9:1e:33:
                    5c:98:cb:30:81:5a:f6:d6:99:92:76:6b:15:fe:7a:
                    94:d5:b1:e6:36:4c:4d:78:10:70:7d:9e:d7:62:d6:
                    88:2d:06:6d:a4:51:3b:11:d5:87:8c:7f:35:6e:51:
                    70:05:20:e4:d4:8b:09:5b:19:b5:f5:64:54:7b:f3:
                    0a:a9:1a:9e:65:11:4d:92:21:d1:07:70:4a:96:7e:
                    e1:d8:f3:a9:4a:1b:65:fd:86:08:62:d9:08:74:a5:
                    da:99:40:0c:dc:f4:ba:b3:86:f2:dc:fe:cc:fd:40:
                    1b:02:d3:2c:40:36:20:45:ff:61:dd:69:dd:ff:b2:
                    42:07:e9:74:d6:17:75:cd:40:90:ea:3a:73:b2:7e:
                    e9:61:f9:99:bc:55:94:45:80:a2:a9:ca:51:43:a1:
                    79:86:4f:f3:31:3f:13:b8:fc:7d:4d:0d:b4:33:80:
                    95:cc:96:94:8e:39:bd:f0:1e:32:88:5e:19:a5:6b:
                    ce:00:98:2a:a8:d8:ec:28:a9:c2:23:84:13:7c:c4:
                    be:44:45:ff:4c:33:92:29:b7:5e:84:d7:ce:21:3d:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:0A:1A:77:73:C9:8E:2D:AE:D9:49:B6:E5:3D:A0:7E:A2:51:2E
            X509v3 Authority Key Identifier:
                keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:69:5c:8d:14:d1:ac:97:0e:4d:22:57:98:04:9e:de:d0:
         1f:84:36:b0:3d:28:9c:f8:c2:96:2b:f3:e2:e4:e3:32:18:9a:
         a9:2c:a1:89:5f:17:b6:4f:22:57:9a:08:67:57:bc:22:17:58:
         ef:40:84:c6:04:64:a0:86:95:28:be:e7:4f:d0:1a:13:ee:65:
         02:3e:d5:ba:7f:97:ae:1c:86:a9:20:80:b7:18:e3:f5:12:88:
         10:7e:aa:44:a9:78:65:d7:27:70:56:14:50:95:50:eb:d3:88:
         08:fe:77:60:a5:38:d6:6e:f4:cd:eb:fd:5b:3d:76:f5:eb:86:
         3d:ae:92:d1:33:26:18:28:21:aa:4f:fc:51:2c:1e:9c:b9:d3:
         de:4d:63:67:f7:7b:d3:c5:f1:af:ec:91:d4:89:5f:48:34:08:
         12:4b:3c:45:5e:fc:2b:40:db:28:4c:ba:18:81:78:09:ae:6f:
         3d:1c:bc:6a:81:ba:31:a5:59:35:6f:bf:34:d3:b9:3e:c8:87:
         be:b4:60:02:c0:40:e5:5c:ef:fc:d2:6d:a5:64:65:a7:a8:80:
         96:78:55:bd:d9:83:7d:9d:09:a1:1f:be:eb:d1:83:5d:56:ee:
         2d:b6:3d:59:a1:b7:dc:15:2a:99:02:10:d7:26:43:3f:cc:0a:
         20:0b:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:03 2025 by rpki-client