Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft
File:                     1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json)
Hash identifier:          ft1phIa3aXQT8GDV58ffWt4sUC40y4kdVFoPovMk4F0=
Subject key identifier:   DD:66:C9:AC:1F:10:9E:A7:5A:29:B8:BC:83:47:ED:C3:4F:96:A0:63
Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED
Certificate issuer:       /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
Certificate serial:       0CCF65D7D9684F646CA160464DBC8AC251385F6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft
Manifest number:          0168
Signing time:             Thu 30 Jan 2025 16:51:37 +0000
Manifest this update:     Thu 30 Jan 2025 16:46:37 +0000
Manifest next update:     Sun 02 Feb 2025 22:21:37 +0000
Files and hashes:         1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: 6OI+mk++2Czr96NB1J6kQR4JScjj7yre9vOpeSSbAZU=)
                          2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cf:65:d7:d9:68:4f:64:6c:a1:60:46:4d:bc:8a:c2:51:38:5f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
        Validity
            Not Before: Jan 30 16:46:37 2025 GMT
            Not After : Feb  2 22:21:37 2025 GMT
        Subject: CN=DD66C9AC1F109EA75A29B8BC8347EDC34F96A063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:d0:30:c0:04:8d:74:7c:81:ef:f3:99:b3:
                    f1:27:e3:59:5d:35:83:68:53:ad:a3:e5:ef:01:96:
                    c4:f9:6c:af:f4:a4:9a:3f:88:e7:9b:f2:dd:62:51:
                    db:c6:b3:05:8e:01:44:6f:19:d5:8a:55:9c:1d:92:
                    4b:6f:10:a8:fe:c1:14:b9:d4:96:7a:85:47:63:ab:
                    dd:e2:aa:ab:25:8e:81:d1:83:ab:cb:d4:f2:af:3c:
                    b8:e2:ae:2b:b9:09:f2:23:1e:a4:c9:c2:1b:2a:48:
                    a6:97:04:dd:1e:1f:03:b9:7a:b7:f2:11:39:09:9d:
                    72:c8:a7:82:28:44:53:78:65:3f:a2:1f:12:88:37:
                    7f:25:55:9a:cd:a0:10:d3:b9:08:1b:dc:5e:4a:1a:
                    3c:0a:47:bf:fe:4d:0c:a5:2a:50:1b:cc:d5:9e:e6:
                    4a:77:e4:e8:20:c9:3d:65:4a:b6:28:cb:d9:15:d2:
                    a7:d3:9b:b1:f4:a7:26:0d:5a:b6:cb:74:cf:66:1a:
                    ae:fa:d5:e3:07:da:15:36:13:49:ad:03:9b:4a:75:
                    76:9c:39:f8:2f:53:85:b3:92:07:16:73:b1:d3:ca:
                    53:c0:43:75:69:e7:f1:58:da:a7:8a:85:cc:b0:74:
                    74:82:bc:1e:21:98:30:91:27:0b:ef:a9:a4:28:ce:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:C9:AC:1F:10:9E:A7:5A:29:B8:BC:83:47:ED:C3:4F:96:A0:63
            X509v3 Authority Key Identifier:
                keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:c5:d2:19:f8:a4:c0:24:bf:a0:a9:ae:00:ea:33:51:08:
         66:01:49:ec:9d:de:79:47:9b:14:1d:ba:a1:90:20:eb:8e:be:
         4e:5a:a9:71:f7:d7:64:ac:09:98:54:0f:c4:2b:00:f7:2c:e4:
         8a:fd:9d:50:5e:5b:07:58:d0:63:81:17:02:07:17:62:f8:47:
         d0:e1:e6:97:70:88:7b:6f:64:2d:0a:63:85:ea:61:65:db:1f:
         f6:21:34:71:4a:d2:72:26:67:e4:61:1a:40:60:6e:a3:bc:a4:
         8a:7e:9d:da:f2:f4:cf:6e:ee:bc:a3:ca:3e:30:0b:44:44:ec:
         6d:5d:8c:56:33:da:34:29:8a:a2:23:60:39:e4:7b:e2:a7:63:
         ac:6b:67:53:44:4f:b6:37:70:c7:92:bc:cb:2f:1a:58:19:6c:
         3e:53:f4:5a:6c:30:aa:6f:4c:87:d7:49:f4:7b:91:93:74:d7:
         c7:cf:53:17:90:b5:b8:05:62:4c:d3:10:22:df:01:71:d7:d4:
         59:2a:f3:25:57:ce:27:ac:2b:7b:cd:d0:51:9a:c3:e3:ca:39:
         bc:f4:c4:b6:51:bb:20:fc:6a:54:7a:3e:c0:3c:5d:f6:5b:70:
         95:82:fb:d2:1f:8a:78:d6:9c:07:b5:50:61:01:6b:43:95:98:
         7c:e0:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:47 2025 by rpki-client