Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
File:                     408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json)
Hash identifier:          SxeCSlXAyH/2MXJNHY8P2LqzJipAWfqmKBo/qgdzZsU=
Subject key identifier:   D1:E9:90:91:38:03:75:B6:0C:9B:35:63:ED:14:96:C3:3C:3E:91:10
Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2
Certificate issuer:       /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
Certificate serial:       43CE043EE2F450F626199E86617A2FE6A69A830D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
Manifest number:          042F
Signing time:             Thu 30 Jan 2025 11:10:58 +0000
Manifest this update:     Thu 30 Jan 2025 11:05:58 +0000
Manifest next update:     Sun 02 Feb 2025 21:44:58 +0000
Files and hashes:         1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: SfzPB9sfBD5CpyaI3ZKGKRdoKKA53oIjD/rNKNLnpSg=)
                          2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ce:04:3e:e2:f4:50:f6:26:19:9e:86:61:7a:2f:e6:a6:9a:83:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
        Validity
            Not Before: Jan 30 11:05:58 2025 GMT
            Not After : Feb  2 21:44:58 2025 GMT
        Subject: CN=D1E99091380375B60C9B3563ED1496C33C3E9110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:2b:f6:6a:d6:10:0b:00:c8:6b:ab:f9:0e:
                    3c:e3:21:17:76:74:3c:df:aa:2d:a9:e7:ad:22:c1:
                    b4:57:3d:2c:3d:ed:14:2a:4d:29:d3:39:9d:d1:f5:
                    8e:86:0e:07:7c:53:de:be:06:bd:fd:44:c0:77:f7:
                    ff:8d:58:3b:45:11:68:da:a2:44:3f:32:f7:93:bf:
                    f0:98:8b:72:7e:c4:a1:c3:b2:ab:40:f2:f9:56:29:
                    73:b2:21:58:92:04:03:15:fd:93:81:54:b9:d5:d9:
                    3a:be:24:d2:b2:34:14:2f:70:ab:fd:14:bd:52:49:
                    6a:39:8e:4a:57:8b:ed:b8:8d:31:c3:31:f2:ae:31:
                    d2:5d:c3:9f:9a:ea:ee:fe:61:0a:4e:50:8c:48:aa:
                    2d:a3:53:1d:0c:d8:e6:8c:30:5c:21:bb:16:73:8c:
                    1f:0e:59:6b:d0:d8:91:3e:f1:98:93:f6:07:22:79:
                    91:9f:10:c5:d0:e3:bd:90:c9:cc:e4:45:2f:cc:25:
                    b0:ad:84:3a:b2:9b:c5:eb:03:7e:e5:5a:9f:0b:75:
                    cc:6b:0c:c7:02:13:bc:15:2f:29:8b:68:05:50:05:
                    81:fd:d6:1b:40:20:9c:b3:61:18:ac:e6:72:d3:81:
                    12:b3:62:80:ef:61:a7:89:47:ee:52:51:3a:c9:4e:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E9:90:91:38:03:75:B6:0C:9B:35:63:ED:14:96:C3:3C:3E:91:10
            X509v3 Authority Key Identifier:
                keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5d:96:15:e3:a1:2e:94:2b:0c:ec:f4:74:e0:b0:2a:f3:d5:
         79:fd:59:d5:fa:62:ba:41:1d:8e:2e:22:1d:a4:0f:eb:9e:e4:
         85:8d:04:30:88:98:63:14:51:54:5c:de:35:cf:f7:3a:17:d2:
         dc:18:5e:7f:76:8e:d4:be:e5:97:e7:d5:4b:85:15:58:37:99:
         7f:81:ea:d3:97:da:b8:68:e5:b0:7a:11:3f:ca:68:6a:4e:62:
         15:34:ae:51:7d:d0:01:1b:ea:8d:6c:88:b5:e2:2b:cf:6e:f8:
         4c:8f:01:14:8a:df:69:f5:b9:83:b5:90:e5:f6:64:1d:0d:4d:
         51:37:a6:9a:c4:74:26:e6:8a:31:e8:14:22:d6:e7:51:6d:62:
         da:d7:16:ff:81:67:83:2f:42:46:2d:c5:3b:8a:c9:90:ac:44:
         96:94:05:c4:9b:13:b9:9d:38:f2:4a:01:95:fe:02:7e:64:90:
         5b:15:1c:6b:d5:3b:4d:21:44:b6:99:4c:05:b3:dd:57:4f:ad:
         46:cd:9d:cf:b9:cc:7f:1b:8d:c3:bc:e1:48:13:5e:6c:19:d0:
         b8:a0:35:66:e5:c6:37:4c:78:f2:fa:d0:e6:15:26:f9:03:c7:
         3e:d5:f4:24:66:d3:56:21:f0:3b:01:81:95:2a:0a:ca:d2:06:
         14:c3:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:07 2025 by rpki-client