Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
File:                     9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json)
Hash identifier:          suTeCzO+7Ql0RHr9r4dUeRnv41RXhphuq+/MgWMrWvM=
Subject key identifier:   35:0F:3C:3D:81:F6:32:88:4C:2C:47:8E:81:26:F5:13:D4:28:2D:D8
Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43
Certificate issuer:       /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
Certificate serial:       447D99093951844FB35A3A7205818D6B8BBA4DEE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
Manifest number:          3F
Signing time:             Fri 31 Jan 2025 05:11:21 +0000
Manifest this update:     Fri 31 Jan 2025 05:06:21 +0000
Manifest next update:     Mon 03 Feb 2025 10:36:21 +0000
Files and hashes:         1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: g0CPpqeQCPFHn2zuvtSi7Zwk2a/e0STS1UOQH5CZd1I=)
                          2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=)
                          3: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=)
                          4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=)
                          5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7d:99:09:39:51:84:4f:b3:5a:3a:72:05:81:8d:6b:8b:ba:4d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
        Validity
            Not Before: Jan 31 05:06:21 2025 GMT
            Not After : Feb  3 10:36:21 2025 GMT
        Subject: CN=350F3C3D81F632884C2C478E8126F513D4282DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:d8:ed:6f:0c:15:7d:0b:0a:b2:6d:2f:31:
                    f0:d9:d1:cd:04:d8:d4:5a:b8:f0:4a:84:48:b8:ed:
                    77:e0:73:8f:a5:52:51:89:6b:82:e8:84:85:67:45:
                    5e:e2:2e:8f:34:5c:2c:a7:45:bd:2c:09:a0:ac:c4:
                    ca:43:ce:b7:a0:4a:08:62:91:3c:31:60:29:be:9d:
                    ef:ab:30:bf:aa:6a:16:e2:5d:04:fd:6e:ec:1c:23:
                    a2:39:10:18:92:1a:75:15:4a:90:fd:25:b1:ce:8f:
                    59:4d:10:ad:6b:76:2c:20:50:20:bc:e1:2b:d4:7b:
                    a5:c6:2f:62:e9:fa:81:20:80:e5:cc:1a:41:c4:0a:
                    f6:47:56:8e:36:2e:ee:a0:df:6e:60:76:3c:9b:ab:
                    0d:2f:f2:89:34:72:24:7f:4f:aa:2d:39:cd:10:c3:
                    eb:66:e4:ac:bc:e4:1f:3a:3a:4e:e4:dc:61:df:d4:
                    2a:a7:fe:27:8d:d5:b4:50:e2:e9:16:5f:a0:ed:c0:
                    7c:dc:2d:83:82:2c:4b:cc:84:70:54:d7:58:06:89:
                    62:f5:c5:1e:cb:c1:a7:59:0d:34:31:78:82:90:6f:
                    3d:ee:8a:da:36:23:53:de:9f:b7:a7:97:56:44:ae:
                    80:75:07:a6:32:1e:f0:a0:b9:73:19:5a:14:7f:e4:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0F:3C:3D:81:F6:32:88:4C:2C:47:8E:81:26:F5:13:D4:28:2D:D8
            X509v3 Authority Key Identifier:
                keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:57:61:8b:d2:51:d0:b5:39:90:b4:1e:a8:c7:48:fa:b5:a4:
         ac:86:2c:d3:e7:05:97:de:4a:02:11:38:05:9a:f6:4f:c1:6d:
         62:95:bd:86:94:8a:82:e1:4c:60:9b:00:aa:37:4b:12:ff:c7:
         52:03:5a:95:61:65:b0:b9:6d:84:99:fd:6b:ff:d8:7c:a8:65:
         2e:6b:05:0a:49:85:f9:13:53:5f:50:68:3e:32:1e:d3:97:f7:
         15:04:b9:9b:19:bf:6d:bd:d9:d2:06:a6:24:ad:bb:3c:b7:ac:
         2c:91:81:90:61:4a:af:df:3d:bc:0c:5e:bf:ef:ba:7e:ea:2e:
         d1:b0:b5:fb:e0:fc:cc:40:41:3f:1c:79:6d:cb:31:04:15:69:
         3a:4e:b0:35:ae:63:14:98:ed:a1:1c:e1:73:24:6a:c9:e2:b8:
         06:3e:81:be:18:a0:f2:4b:14:d9:b1:59:40:40:55:cc:df:e8:
         83:be:bc:9f:8c:d9:cd:b5:c7:8c:7f:de:11:7c:26:f7:b8:cf:
         e4:f8:45:2a:e8:f7:92:dc:78:9e:00:f0:be:c9:9d:a2:a3:bf:
         4c:d5:a2:f1:bd:10:06:4a:83:49:58:50:a9:32:90:3a:39:ab:
         ab:b7:6b:8f:60:93:c0:a1:b6:d6:a5:21:55:15:6a:f4:d2:c6:
         0e:a4:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:38:06 2025 by rpki-client