Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
File:                     AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json)
Hash identifier:          rALPKei1xi+kRjKU0BVtD1Hh8BU5mWvs3JZOX7qxtV4=
Subject key identifier:   9E:54:CB:2F:8E:FC:E5:2A:CB:CB:C2:36:8B:E0:43:A7:C7:5E:E1:7D
Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6
Certificate issuer:       /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
Certificate serial:       2A4EF5F7AA57FFF6076F052D36CC3F93889D1F25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
Manifest number:          0225
Signing time:             Thu 30 Jan 2025 15:11:58 +0000
Manifest this update:     Thu 30 Jan 2025 15:06:58 +0000
Manifest next update:     Mon 03 Feb 2025 02:30:58 +0000
Files and hashes:         1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: FZ/KfA+DxAG+ZTg7U2MfltXt2h3VuKki+CieBBB2iIU=)
                          2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4e:f5:f7:aa:57:ff:f6:07:6f:05:2d:36:cc:3f:93:88:9d:1f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
        Validity
            Not Before: Jan 30 15:06:58 2025 GMT
            Not After : Feb  3 02:30:58 2025 GMT
        Subject: CN=9E54CB2F8EFCE52ACBCBC2368BE043A7C75EE17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:42:dc:c5:82:0f:f0:3c:f9:d9:b7:aa:d6:
                    d8:ba:1f:52:5c:06:c3:fe:9d:2c:44:a0:a8:7a:9b:
                    8d:39:25:43:43:02:15:c7:e9:5d:ad:f0:84:a4:d3:
                    8e:ca:5b:68:92:f2:2d:9a:59:b3:1d:cd:de:7b:b3:
                    b3:3c:2a:32:6a:55:9b:55:e2:d9:ab:26:fc:7a:01:
                    33:bd:e2:2d:43:56:bd:5f:6d:e0:1a:3f:7a:1c:47:
                    4f:cb:4b:b1:2c:7a:f4:e2:27:51:b6:c3:e4:0e:db:
                    e4:1a:f9:bb:ce:20:c5:e4:ff:20:a8:78:26:e6:77:
                    5b:cb:dc:32:52:b8:ae:ee:fe:2a:b3:98:a2:e7:d3:
                    1a:05:69:f0:97:e3:c8:6c:d4:34:da:b8:ca:aa:f8:
                    d0:f5:76:bd:2a:5f:9b:a8:2f:38:40:c4:48:18:fd:
                    f3:f8:a5:14:dd:57:9f:43:12:6d:5d:45:8f:1b:a7:
                    e8:b7:bc:dd:89:a4:a9:49:53:4e:0a:9c:6b:82:36:
                    d5:9d:a7:6e:a6:e3:b5:ab:27:2e:18:84:04:2e:50:
                    43:78:b3:81:5e:25:0a:cd:34:5f:50:50:4e:42:bc:
                    14:46:1f:d0:48:74:26:c1:30:4a:49:a7:25:c3:be:
                    b5:47:d5:11:bc:7f:88:9c:13:8e:08:a5:bf:4d:8b:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:CB:2F:8E:FC:E5:2A:CB:CB:C2:36:8B:E0:43:A7:C7:5E:E1:7D
            X509v3 Authority Key Identifier:
                keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:65:21:23:90:10:4d:d9:48:ae:1c:79:2d:07:81:d7:60:
         58:b9:d5:64:8f:b1:97:55:17:79:d9:37:47:9c:b8:8a:1a:09:
         cd:63:fd:ca:bc:34:2f:b9:f4:f1:db:9e:77:95:67:d3:ec:1b:
         b1:df:32:65:a7:86:1b:64:50:43:05:59:ae:23:61:9b:36:d1:
         a0:59:be:ad:72:6c:fe:8a:5e:19:bd:dc:82:ee:d4:3d:3e:5d:
         27:c4:72:1d:fc:71:bb:cf:21:bc:10:b7:7b:c0:12:a9:98:ce:
         86:b3:7c:5e:47:e4:6e:cb:62:60:4c:00:50:1e:bf:9c:e2:cf:
         aa:a3:e8:6f:4b:23:66:11:f6:9d:4d:27:e3:e0:3a:65:6e:b7:
         14:26:7b:7d:22:c4:3a:e2:f7:47:2a:a9:c2:3a:f3:79:54:3f:
         95:d4:b6:45:2f:19:e8:e6:fb:f2:34:fa:17:ec:ad:97:e8:79:
         38:d9:a2:22:23:8c:94:79:78:03:2f:9a:33:eb:43:70:17:09:
         59:7d:56:8e:51:a0:d0:42:4f:e7:d1:34:13:41:42:5c:9d:86:
         c6:4c:c0:28:9c:a2:35:ae:8c:f6:6f:81:25:e1:11:3a:95:10:
         59:05:9d:fc:61:82:ae:43:08:3c:51:93:a5:a2:ca:b5:93:c3:
         53:75:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:23 2025 by rpki-client