Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
File:                     DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json)
Hash identifier:          1/TEdIYsYdaXWxufb0tx/9lDazvhqsYgYRgx9r5VsW8=
Subject key identifier:   C7:C8:06:B8:EA:95:F2:F5:B0:24:31:AD:6D:FD:B7:F7:C4:03:40:5B
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Certificate issuer:       /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial:       34505706ACB26B0A3791C621ABBCEDB3B6283533
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
Manifest number:          016C
Signing time:             Wed 29 Jan 2025 13:01:42 +0000
Manifest this update:     Wed 29 Jan 2025 12:56:42 +0000
Manifest next update:     Sat 01 Feb 2025 23:24:42 +0000
Files and hashes:         1: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: AKe7Y2lyp5Q9y8MDRTPdGWnq5Sr6zXFhp0bG7CgZo5Q=)
                          2: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=)
                          3: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: fGeQBiKX+xxqfH1XXT4otHk8nTCoBgbZ9CMCkIFVfP8=)
                          4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: n7fDyeuU1HQZdFIYr/m3ZztFKIf2iIRMeVjsry1/EpQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:50:57:06:ac:b2:6b:0a:37:91:c6:21:ab:bc:ed:b3:b6:28:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
        Validity
            Not Before: Jan 29 12:56:42 2025 GMT
            Not After : Feb  1 23:24:42 2025 GMT
        Subject: CN=C7C806B8EA95F2F5B02431AD6DFDB7F7C403405B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:71:b1:b7:8f:0c:c2:27:a9:10:48:26:d7:
                    cc:95:7a:cc:42:12:79:2b:e1:5c:60:5c:39:cc:7e:
                    b6:83:b7:a6:c0:ff:55:24:5d:3b:31:dc:8e:c4:c8:
                    62:76:a0:19:3b:85:c1:68:55:01:4d:a8:c9:79:14:
                    6d:c8:03:7d:64:d3:66:bb:dd:c9:a8:66:b9:87:7b:
                    7f:b4:e0:d9:4b:dc:db:77:25:b4:b3:b4:5e:36:fb:
                    e3:1e:00:69:95:7c:9f:cb:7f:f9:f5:ba:86:97:d1:
                    bb:cc:e3:7c:0c:79:a7:aa:db:fc:d0:b2:2e:b4:a0:
                    58:2f:c3:58:18:f5:9a:cc:b0:e9:1e:7c:f5:46:09:
                    75:13:d5:90:5f:3c:5c:ed:74:9e:85:50:eb:3e:64:
                    6f:e7:5c:17:87:8c:47:c5:ad:8f:0e:a4:9a:9c:6b:
                    ff:c9:46:b2:44:c4:c4:70:43:7d:e7:8c:9f:45:29:
                    b4:cd:36:bf:25:b1:b0:3a:b9:7f:cf:cb:98:b6:05:
                    a8:4f:1e:89:63:fd:99:5c:68:f7:e8:64:b0:4d:e6:
                    2e:2e:13:ca:4b:28:8e:6a:45:db:7f:91:35:45:16:
                    31:16:73:08:5d:70:60:0e:c2:10:c1:23:0b:20:68:
                    96:b6:28:6a:b6:78:ee:f5:01:f9:73:07:c7:74:62:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:06:B8:EA:95:F2:F5:B0:24:31:AD:6D:FD:B7:F7:C4:03:40:5B
            X509v3 Authority Key Identifier:
                keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:7b:9d:99:6e:2d:0c:da:bb:e2:32:94:97:29:05:4f:0d:06:
         92:a1:52:11:e4:15:70:88:fa:a9:b6:3d:73:1f:98:97:3b:8b:
         58:eb:70:3e:55:c1:c4:7e:43:8d:9b:8d:b6:dc:02:f7:35:44:
         d9:49:3a:81:98:94:36:90:5a:11:2b:0a:a5:0c:36:eb:fd:05:
         0c:ba:b8:94:72:77:f2:55:30:b9:60:5b:b0:2c:92:b1:68:37:
         0c:9e:16:2d:24:cd:62:ca:c8:4c:03:77:2a:57:50:2f:e2:1a:
         65:c8:f8:20:18:79:bf:c0:10:48:70:2e:1e:86:43:9e:37:98:
         6e:74:b9:12:3a:d5:fa:fd:44:e8:9f:b7:95:43:bf:aa:41:7f:
         58:23:6f:41:f7:43:51:9b:68:d1:7f:ea:83:23:5c:02:b4:62:
         3a:1b:17:b4:41:49:59:0e:2c:aa:b4:a3:57:60:bc:01:80:d0:
         38:30:f4:d0:99:2c:54:02:41:5a:ae:1b:d1:4b:8b:6b:f7:8c:
         2c:ee:14:5c:a5:60:5e:25:fa:2c:fc:97:58:86:2a:a8:7a:98:
         53:86:ff:aa:88:32:39:5b:62:0a:20:b9:ba:08:f3:07:98:87:
         90:d2:72:80:61:e4:41:45:7f:b6:4d:4d:9f:92:f1:48:34:c0:
         2b:e1:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:53 2025 by rpki-client