Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
File:                     1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json)
Hash identifier:          lStQ2yEYuiCWZT4QEO53fsmDCKrDB3Q+VU5vCWE6nWE=
Subject key identifier:   C0:BF:2C:95:6A:AD:3B:98:24:BC:19:6F:8C:75:A8:A6:06:75:B4:8F
Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17
Certificate issuer:       /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
Certificate serial:       5EDC80B921F4E3B2B081D3D88B703FA81077DA2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
Manifest number:          0158
Signing time:             Fri 31 Jan 2025 12:31:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:26:36 +0000
Manifest next update:     Mon 03 Feb 2025 21:32:36 +0000
Files and hashes:         1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: z/E1zr31aHxUK4OGvS7c/jZhL+sP2oYHqfMpvP9G7Kg=)
                          2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dc:80:b9:21:f4:e3:b2:b0:81:d3:d8:8b:70:3f:a8:10:77:da:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
        Validity
            Not Before: Jan 31 12:26:36 2025 GMT
            Not After : Feb  3 21:32:36 2025 GMT
        Subject: CN=C0BF2C956AAD3B9824BC196F8C75A8A60675B48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:ba:f3:61:49:17:53:58:c7:68:41:71:7f:
                    68:54:16:2c:d5:35:09:a8:f7:c5:70:44:b3:17:6c:
                    86:bd:30:aa:54:e4:0b:58:34:88:01:51:ec:f1:93:
                    f4:b0:52:13:2d:db:7e:11:68:8a:1e:68:0d:65:23:
                    6a:44:50:c1:38:89:09:33:f9:72:dc:e9:79:9c:02:
                    b3:2a:12:8b:60:55:21:6d:2d:ba:f6:ba:39:5e:cf:
                    91:24:ee:db:53:7a:81:7f:ed:cb:f6:80:48:09:b9:
                    c2:1b:67:0d:2a:46:19:cd:cf:50:92:f8:37:62:63:
                    41:3b:30:f3:3d:12:9c:3c:58:6c:fd:37:26:89:6f:
                    84:25:52:ec:1b:7c:f0:70:79:07:31:e2:0e:04:6b:
                    9d:fe:7a:a7:a2:61:44:86:d4:ea:76:fa:59:1d:25:
                    8e:66:17:75:66:19:91:94:bd:3c:ad:2a:a7:77:99:
                    65:1b:57:7a:0d:7b:32:5b:4c:f1:2e:c0:0c:fe:9b:
                    49:74:78:fc:46:27:0d:e5:d8:da:22:bc:b1:f6:ea:
                    be:21:82:70:c3:6c:c5:da:db:59:cd:23:10:70:e9:
                    97:52:34:60:cc:36:7b:b4:10:6b:55:5b:76:8c:35:
                    93:76:bc:49:7d:63:ca:9b:de:dd:31:66:c9:3b:ff:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BF:2C:95:6A:AD:3B:98:24:BC:19:6F:8C:75:A8:A6:06:75:B4:8F
            X509v3 Authority Key Identifier:
                keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:37:78:c6:cc:74:8c:16:c6:37:f1:ba:c1:7f:6e:5f:1e:
         92:66:e7:36:9f:74:eb:49:c9:ce:03:e8:0b:cb:cd:df:44:59:
         dc:5c:aa:ea:64:ab:be:75:34:e8:f0:47:b5:7b:39:e3:51:44:
         99:dd:ee:66:09:27:81:fd:fc:83:8a:81:10:c2:a8:cb:dd:4b:
         67:28:6b:c5:40:5f:bc:a6:27:8d:2d:7e:86:fa:29:1a:e5:79:
         98:9e:e3:d1:87:eb:16:45:79:85:71:28:ce:39:d5:8d:db:ec:
         2b:60:13:9d:17:6b:3d:db:87:94:39:92:16:9e:4f:66:28:e9:
         77:a9:14:f0:8b:f7:47:3d:b4:b3:d6:3e:09:19:ad:1e:d4:4e:
         b5:d7:62:82:74:76:ac:6c:8a:cd:7f:f1:be:e7:2c:4d:f1:07:
         73:26:1e:f8:7a:b9:01:37:62:11:76:50:c3:a5:99:b3:e2:68:
         a5:0c:cd:75:9b:bb:6d:3d:e0:ae:d9:32:44:3e:0c:8a:4a:70:
         3e:25:b3:1a:9e:03:76:65:fb:b1:4e:f2:96:e1:12:77:3e:12:
         c3:93:61:62:a8:96:28:7f:c6:52:84:74:e9:e2:17:8b:75:20:
         e5:aa:2d:e1:fa:af:63:ac:eb:46:ea:27:ad:37:33:80:19:2c:
         70:87:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:43 2025 by rpki-client