Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
File:                     30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json)
Hash identifier:          PHEgFbBEaHwwu92XC4V0+M9mgTRlzcUTMushRNMPFrw=
Subject key identifier:   DE:EB:F4:C5:14:FB:A2:38:01:DA:80:DE:39:B5:D9:8C:AC:29:EE:FF
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Certificate issuer:       /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial:       2840CD7B3BE73A37075E0AB7C5EA876E13BC26C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
Manifest number:          011E
Signing time:             Wed 29 Jan 2025 13:41:39 +0000
Manifest this update:     Wed 29 Jan 2025 13:36:39 +0000
Manifest next update:     Sat 01 Feb 2025 19:39:39 +0000
Files and hashes:         1: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: 4NwmPIxf2RMGt+/F7Ae8cg90q3+NQMn4vttxiXgNmeg=)
                          2: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: LRn51PnWk986Sj4T/thYL4mcn9u+XLp7Ylmx3AHGajM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:40:cd:7b:3b:e7:3a:37:07:5e:0a:b7:c5:ea:87:6e:13:bc:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
        Validity
            Not Before: Jan 29 13:36:39 2025 GMT
            Not After : Feb  1 19:39:39 2025 GMT
        Subject: CN=DEEBF4C514FBA23801DA80DE39B5D98CAC29EEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:a1:c4:0e:48:5a:2f:88:82:9c:1d:d7:87:
                    c4:be:24:d9:40:26:e0:8b:2f:41:0c:98:87:7e:76:
                    90:3d:9f:be:45:d3:7b:d7:f1:b5:78:e2:7c:41:b6:
                    4d:d1:40:1b:cb:0e:b9:14:f8:4f:c6:de:a4:d4:f6:
                    8c:81:8b:d2:b7:0a:40:dd:d2:85:61:17:d0:1a:f2:
                    f1:80:8d:df:cc:98:94:1b:d3:12:92:c9:16:f3:a4:
                    bb:1a:86:c9:4c:f9:bb:9a:09:58:fe:db:89:0c:c6:
                    9f:b8:39:64:26:fa:79:6e:e4:c6:46:c9:dd:d7:f6:
                    87:02:96:61:a0:0e:9c:6e:87:f7:32:ca:ce:0d:e1:
                    d5:ce:27:e4:58:f7:e4:02:ec:07:33:fb:ab:69:7d:
                    08:6d:fb:6f:4a:95:35:ef:e7:d6:1a:65:a7:b2:b8:
                    e6:a5:c3:6b:d4:84:cc:5c:53:41:3f:48:86:8e:cc:
                    0a:b6:28:7b:49:e5:11:63:14:40:6d:78:d5:77:ae:
                    12:37:f0:ed:f2:74:34:38:ca:62:0b:d1:c4:5f:dc:
                    21:e7:46:ba:d2:c1:20:24:aa:f1:55:c2:71:85:d2:
                    7d:40:27:78:c4:09:a8:a9:d1:81:54:70:2a:2a:39:
                    e6:dc:13:e1:7f:9e:11:25:99:da:bf:4b:bb:b4:47:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:F4:C5:14:FB:A2:38:01:DA:80:DE:39:B5:D9:8C:AC:29:EE:FF
            X509v3 Authority Key Identifier:
                keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:39:bf:46:ed:ca:27:54:a4:9d:c5:b5:37:4d:94:3f:46:dd:
         60:c7:8a:30:0b:f6:3a:d0:a7:d0:89:37:e7:90:5d:a8:cf:3b:
         ab:2d:82:53:6a:4b:1e:a5:c6:8f:05:73:20:92:ee:23:09:23:
         eb:42:85:94:e1:4c:3a:00:2e:c2:41:ad:7f:1d:e5:ae:f4:14:
         07:bc:d1:8c:ee:2a:bd:6d:8b:4a:9f:8a:7a:c8:d1:58:69:0c:
         a8:66:91:cf:53:05:16:ed:09:8d:1d:31:ca:c6:55:6d:83:ec:
         ca:a2:22:9c:54:a9:d7:13:1c:17:98:7f:83:e8:7f:08:35:2a:
         ba:84:f1:4a:d1:c3:0d:1a:20:e6:be:3a:e6:c1:d0:d3:c8:b5:
         43:ee:f2:ad:19:94:fb:1c:42:58:00:7c:cc:8f:8f:d5:11:1a:
         b4:9a:ff:1b:dd:87:e0:6c:1a:53:ec:4c:2e:e7:b0:8a:73:70:
         5a:e4:ec:3e:ee:18:2a:63:b8:26:b9:98:6d:00:15:02:de:b8:
         74:b9:9e:59:19:2c:c7:05:ff:b9:a5:20:5a:e4:18:28:c5:d5:
         29:8f:ef:02:80:9f:1b:73:d7:a4:70:43:c0:8c:25:72:0d:5b:
         34:9f:4c:ae:c4:95:26:47:be:e9:07:ee:96:e5:d2:24:e7:5f:
         a1:95:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:11 2025 by rpki-client