Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
File:                     3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json)
Hash identifier:          lBKgO8w6lbRPiFZsfvk1/Qgi28EVh9fd22/wH0KjOKc=
Subject key identifier:   20:04:E5:6C:E0:3A:5C:EA:CA:88:EA:2A:29:8F:3A:A6:A6:F0:34:AB
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Certificate issuer:       /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial:       7002B13167FB8BFBE8BB3C0B01C690A698C608B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
Manifest number:          0196
Signing time:             Wed 29 Jan 2025 20:30:02 +0000
Manifest this update:     Wed 29 Jan 2025 20:25:02 +0000
Manifest next update:     Sat 01 Feb 2025 23:03:02 +0000
Files and hashes:         1: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: CQf2ElDU7GMe2mYHUGLnMKwSKTDCglJQZXamw0Ocs2I=)
                          2: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: pAEwhRYxV+IdN3IG0AqgmlSpqpDySaxKtO1akdQcPJk=)
                          3: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: uq7VBPdBUBt1kqmnMiL45Mq0szBy3gIv+qxo2j9zwpg=)
                          4: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: gC/dBQ2N9PvKMvFuI06G3U2I+dfO9VxJBQri33zTdRo=)
                          5: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: zY6MeVih11oEA5Y6wZpVQeAXzh1zZ/fzkIYHt+si4VA=)
                          6: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: zz0q4evVyiGmnkeJgjKZ6+3+IQRQHcK60NcY4NiLuVA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:02:b1:31:67:fb:8b:fb:e8:bb:3c:0b:01:c6:90:a6:98:c6:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
        Validity
            Not Before: Jan 29 20:25:02 2025 GMT
            Not After : Feb  1 23:03:02 2025 GMT
        Subject: CN=2004E56CE03A5CEACA88EA2A298F3AA6A6F034AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:e3:a1:ba:0a:c9:c1:e5:20:11:4a:5a:d2:
                    32:03:c6:06:e1:15:c0:6b:7c:c1:89:00:01:4c:30:
                    07:c3:ed:17:49:61:2d:8b:9f:e0:3d:a5:f8:74:d7:
                    ac:e5:1a:9b:42:84:e8:00:66:08:f8:25:f5:b8:ba:
                    a5:94:b0:e1:48:7d:8c:15:c3:19:70:9b:77:b7:13:
                    f3:49:13:7d:b7:e7:ba:c9:73:b9:7e:ae:59:79:4a:
                    25:6b:a9:27:ab:a7:6e:0a:d5:45:0b:c9:d5:aa:d0:
                    b9:21:ee:d1:86:e7:f6:07:b0:f3:74:92:fe:9c:93:
                    00:5d:a3:73:5e:90:b8:78:f2:7e:1b:37:82:3f:a2:
                    94:fd:8c:23:74:de:b6:47:22:ee:f6:86:e7:bf:47:
                    99:4a:7d:0d:80:f5:b5:a3:ce:c8:52:a5:93:97:a5:
                    5a:bc:0c:a9:2e:3d:ff:a7:2c:16:dd:02:6a:d7:cc:
                    c0:a8:d8:ef:73:3b:b3:de:84:08:32:88:37:c5:57:
                    7f:18:45:d5:21:d5:dd:e0:e3:2b:3c:4a:97:ef:bd:
                    3a:ef:20:79:47:1b:e3:a2:b5:4f:4b:70:d5:1e:a9:
                    aa:88:20:f4:89:03:2e:cb:ce:f5:62:8e:24:f6:28:
                    08:ff:80:44:c3:6c:5f:00:b2:b1:84:54:ba:6f:a7:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:E5:6C:E0:3A:5C:EA:CA:88:EA:2A:29:8F:3A:A6:A6:F0:34:AB
            X509v3 Authority Key Identifier:
                keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:59:76:77:af:c1:b7:dc:cd:87:e4:08:31:56:75:aa:da:7f:
         c0:ac:aa:8b:8e:41:1d:9c:19:da:ed:fd:22:9b:3f:6d:c5:0f:
         cc:1e:07:c0:ed:75:f1:af:75:2d:e5:6d:6f:92:33:7e:8c:08:
         70:9a:57:69:c0:d1:9d:67:d2:c9:db:bd:ae:de:0f:42:70:46:
         a6:97:6c:14:ea:68:c1:d3:55:94:d1:6c:2c:9a:90:17:25:e1:
         b4:e3:ce:52:0e:fb:3b:37:8d:cb:aa:c8:d9:c2:40:f2:76:54:
         e9:b9:2d:95:90:0a:2b:5b:94:7b:f1:55:60:e8:58:92:f1:b6:
         b9:9e:6c:6d:da:c2:88:42:ce:4f:9b:52:60:8c:9d:79:02:cf:
         a2:6c:6a:36:91:64:e0:a0:ed:8c:df:00:ed:ee:b1:d2:92:a5:
         c8:57:c7:b4:a7:eb:14:ba:f6:e7:32:ec:da:9e:11:d8:14:d3:
         95:75:bc:24:b8:c6:46:c0:43:93:86:67:72:e5:43:74:7a:2d:
         3c:ec:7a:f0:f5:eb:b8:7a:1e:6b:8a:2a:a9:35:ce:8e:97:18:
         43:48:91:76:26:56:a7:1f:c3:4a:0a:65:e7:7d:e6:c5:6b:cf:
         9f:7d:60:1a:72:31:54:3f:ac:0c:2f:94:0c:de:fc:c5:ca:78:
         fc:f3:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:47 2025 by rpki-client