Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft
File:                     5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json)
Hash identifier:          aXmt1b5NEWx8KOcnnXi+ez6xxAz1E5DCMwqtmyKp6OU=
Subject key identifier:   C3:CD:70:F6:1E:77:20:99:47:B3:10:84:A5:A8:24:28:CE:4D:93:A1
Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E
Certificate issuer:       /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
Certificate serial:       23172ACF357E9581495046A54944B3D9F48CD374
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft
Manifest number:          0161
Signing time:             Thu 30 Jan 2025 22:41:23 +0000
Manifest this update:     Thu 30 Jan 2025 22:36:23 +0000
Manifest next update:     Mon 03 Feb 2025 02:56:23 +0000
Files and hashes:         1: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=)
                          2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=)
                          3: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: x9CWqAwI2+uiJeRxUASK+F3uSN0+T+peYWv3g5sqKR4=)
                          4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:2a:cf:35:7e:95:81:49:50:46:a5:49:44:b3:d9:f4:8c:d3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
        Validity
            Not Before: Jan 30 22:36:23 2025 GMT
            Not After : Feb  3 02:56:23 2025 GMT
        Subject: CN=C3CD70F61E77209947B31084A5A82428CE4D93A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5f:d5:fe:c7:38:7e:bb:db:5b:54:a5:77:05:
                    cb:77:81:6e:8a:a5:ed:dc:0c:c6:7c:31:fa:b7:60:
                    95:25:5b:f4:b9:a4:8a:17:55:c4:3a:63:de:28:c8:
                    6c:7f:eb:ab:a4:56:31:12:e3:48:cb:ec:78:c8:3b:
                    59:01:40:3b:90:f0:81:0c:9e:bf:bc:33:50:86:01:
                    fc:f1:cf:bd:af:11:42:9a:47:27:b5:e9:89:23:fa:
                    93:7e:36:c4:88:10:bd:0c:6b:2c:4b:f5:7c:6c:3a:
                    28:f1:0e:ac:3a:78:fe:38:06:63:c9:18:da:b3:18:
                    e9:08:7e:ad:b9:f0:54:b0:74:e0:de:9f:07:09:8c:
                    fe:25:34:9b:ce:51:19:29:83:09:47:9a:37:0d:24:
                    11:8e:b2:93:ee:43:93:03:3b:d7:57:6b:11:41:60:
                    9b:3c:cd:9d:9e:ab:e2:78:8c:b0:d2:e6:d6:63:b5:
                    5c:c5:20:56:80:cc:2f:47:1a:c4:e7:8a:49:79:10:
                    c5:29:27:8c:48:2b:3f:47:30:84:fd:e6:60:30:cc:
                    70:f3:a9:09:2d:05:d5:b8:8e:8d:da:67:d5:39:3b:
                    4b:48:c5:c6:9c:07:9d:86:82:44:42:d9:c5:fb:23:
                    78:1d:44:e7:fd:14:c6:c3:9e:e3:0c:21:d2:40:76:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:70:F6:1E:77:20:99:47:B3:10:84:A5:A8:24:28:CE:4D:93:A1
            X509v3 Authority Key Identifier:
                keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:42:1d:bd:56:fd:20:0d:ef:92:22:55:5a:d7:14:c2:c8:08:
         89:1a:47:de:16:8c:55:5c:12:19:94:53:0f:b0:09:f3:3e:54:
         72:fa:53:70:72:f3:41:41:92:e7:fc:00:22:d6:75:e3:d1:28:
         28:dc:5a:a9:b5:70:3c:f3:aa:6b:49:a1:0a:41:92:54:81:5b:
         c2:b4:8d:67:c1:02:17:9b:6e:98:4b:ee:02:e3:c4:86:59:e6:
         35:e1:ac:2d:f4:58:95:c3:58:df:be:63:60:22:7d:e4:56:0f:
         66:3c:d2:95:95:f1:fe:f0:15:3a:4c:c2:64:50:25:58:af:99:
         2f:20:d7:0a:00:0f:67:bb:21:52:4b:d9:9e:97:44:3d:de:28:
         99:78:0f:8b:77:f2:8a:58:d9:bf:38:d7:e9:1d:85:30:eb:d5:
         93:4d:c3:77:0f:a5:4e:eb:7f:1a:f0:76:43:c4:00:29:76:16:
         11:32:53:17:fe:e5:bb:10:40:41:48:e9:ae:55:96:ed:f7:c9:
         82:ed:1e:42:14:d6:01:37:5e:39:1b:c6:a6:39:7d:d3:9c:bb:
         ee:b6:67:91:78:e7:81:21:90:44:bd:c9:9d:27:0f:52:90:2c:
         3f:00:e5:de:50:fa:c8:56:60:66:0c:e2:03:be:1e:4c:28:18:
         c5:ce:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:30 2025 by rpki-client