Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
File:                     63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json)
Hash identifier:          K8TjFk9NipGrHbf3E8r3rDoGbfee4meAortO33fmmWk=
Subject key identifier:   2D:68:BC:47:5E:7B:D2:EE:1D:80:73:DD:35:0C:26:CB:B0:AB:96:11
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Certificate issuer:       /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial:       409844CD2559C9315D9D9D11E4B9CB6F17C34DFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
Manifest number:          0159
Signing time:             Fri 31 Jan 2025 12:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 11:56:08 +0000
Manifest next update:     Mon 03 Feb 2025 12:51:08 +0000
Files and hashes:         1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=)
                          2: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: 1c7OtfRJptP2AjZ/gjICq0ta92rxjXL3DKKSKQ3kppY=)
                          3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=)
                          4: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:44:cd:25:59:c9:31:5d:9d:9d:11:e4:b9:cb:6f:17:c3:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
        Validity
            Not Before: Jan 31 11:56:08 2025 GMT
            Not After : Feb  3 12:51:08 2025 GMT
        Subject: CN=2D68BC475E7BD2EE1D8073DD350C26CBB0AB9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:d7:a4:bd:02:a6:d0:02:aa:db:f9:8b:1f:
                    b0:88:06:fb:58:45:37:c7:84:be:d2:9b:8e:ae:3c:
                    83:3f:30:4e:49:e3:8e:d1:b6:29:aa:66:b2:86:1b:
                    71:a4:e1:17:9b:9b:50:fd:72:c3:59:b7:1b:00:04:
                    a2:42:89:8b:ff:8f:8a:6b:38:11:9d:1c:5c:fc:94:
                    1f:98:3d:55:e9:a3:19:1d:12:8e:0b:07:c4:aa:6e:
                    5a:1a:f5:c7:24:8c:3b:2c:1b:1b:b8:27:32:c2:8e:
                    5c:20:ca:24:d7:94:e0:c7:bf:f8:1b:32:f8:8f:04:
                    d7:65:70:d6:8e:25:ff:8c:96:13:d1:71:2a:3b:b9:
                    78:e0:3b:f9:88:a0:e7:e2:d9:c5:15:31:90:44:46:
                    3c:17:da:1d:10:35:a1:94:ed:ca:53:a6:e5:2c:62:
                    72:32:4c:1a:25:32:2e:b3:f0:cc:38:d3:a9:30:a2:
                    1e:b5:be:31:55:92:8a:00:6a:1d:9b:56:b9:ea:bb:
                    11:d8:7a:df:c2:28:87:03:01:9e:fa:c6:14:ef:b1:
                    5a:db:e0:95:8a:e1:8d:50:f2:66:c8:a6:f1:11:76:
                    f6:9a:ba:aa:6f:16:bf:52:d6:32:68:b6:0e:a2:c2:
                    88:4a:bf:32:28:4a:dd:a3:7c:81:9a:a2:6a:9d:98:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:68:BC:47:5E:7B:D2:EE:1D:80:73:DD:35:0C:26:CB:B0:AB:96:11
            X509v3 Authority Key Identifier:
                keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:80:95:68:59:b1:51:d3:4d:1c:31:67:50:68:01:93:83:
         e4:ee:b4:60:c4:52:28:5a:de:fa:82:6d:50:75:90:62:fc:02:
         07:3f:3e:4d:a6:a2:97:97:e0:dd:a2:96:73:0e:d3:6b:01:ae:
         49:92:f3:92:14:ee:8a:59:19:0f:2c:13:17:49:3b:d6:5f:3c:
         5b:7c:f2:8e:d5:3b:af:9f:6b:33:fe:e4:23:5a:ab:44:07:21:
         f4:88:6e:2c:ca:33:2f:c8:de:69:11:26:b8:b7:d1:64:06:2c:
         38:01:36:4b:b2:ab:7c:6b:4a:34:8d:dc:41:3d:9e:91:f6:0c:
         58:7c:c8:38:03:e1:e1:bd:ea:fc:5a:35:60:b4:1e:5e:13:65:
         cb:71:82:78:34:96:6b:26:80:22:5a:c1:52:4d:10:34:55:79:
         a2:6b:e0:82:cd:da:00:db:fe:82:4b:00:17:7d:c4:0d:82:50:
         66:01:08:7b:a5:70:02:eb:31:4c:ae:cc:14:f8:90:b5:85:1c:
         91:9f:f3:4a:40:63:79:4b:5d:80:a0:21:82:b2:32:9b:dc:93:
         7e:53:a1:cc:c8:0d:f8:ae:aa:fb:4b:22:e4:ab:a4:e5:6d:13:
         f9:18:0f:e0:d1:f4:b2:6f:cf:fe:9e:8a:c2:93:69:3f:4b:53:
         fe:d6:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:10 2025 by rpki-client