Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
File:                     20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json)
Hash identifier:          dshJnaOvps43lpCuZTggHgJJvl/CwzxL36ETYRHtYmA=
Subject key identifier:   81:02:2A:83:D4:E4:83:36:24:70:34:D9:10:A5:ED:A7:8B:11:22:42
Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
Certificate issuer:       /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Certificate serial:       4D1B925CA49E46E27A332E6AFC06AD4903D600D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
Manifest number:          01AF
Signing time:             Wed 29 Jan 2025 20:51:48 +0000
Manifest this update:     Wed 29 Jan 2025 20:46:48 +0000
Manifest next update:     Sun 02 Feb 2025 03:21:48 +0000
Files and hashes:         1: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: EGclrgNqEUsqjZr9jH2Zkdw2aJUVmaUX3+ExtVvUymk=)
                          2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: y0IC1wewy1NTZC1WvVqvRnWg597FE/H/DcwR9g+OaRM=)
                          3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: CYRCxIMfYw8kr5hwucdBgVETX9ccYUsB+pGv5wRWbVU=)
                          4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: vH/AHPKtlG2C1g0YKzqe62eHzdCNjomBrQRdxjjmNr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1b:92:5c:a4:9e:46:e2:7a:33:2e:6a:fc:06:ad:49:03:d6:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
        Validity
            Not Before: Jan 29 20:46:48 2025 GMT
            Not After : Feb  2 03:21:48 2025 GMT
        Subject: CN=81022A83D4E48336247034D910A5EDA78B112242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:55:1b:7f:30:c0:ed:77:93:73:86:99:10:
                    26:cd:14:89:02:bc:45:eb:4d:42:53:cb:8d:fb:66:
                    da:db:e5:a0:5b:3b:b0:4b:61:75:ac:22:dd:c6:39:
                    d9:11:bd:a3:29:00:04:e5:aa:cc:5f:11:8b:1b:34:
                    06:e0:34:e7:ca:6d:a3:ba:4b:36:bd:78:5f:21:c8:
                    c4:95:5e:a2:22:85:86:34:36:c8:70:87:66:ad:95:
                    5d:34:d9:8c:bc:d1:69:3e:e4:c3:31:ac:3a:2c:53:
                    2e:91:1a:9f:bc:91:79:ad:36:01:4d:b2:20:d3:1c:
                    5c:75:7a:3f:13:02:62:64:b0:05:bf:cd:17:a2:79:
                    9b:e7:47:20:65:3d:e0:7d:71:7b:c1:30:42:81:54:
                    2d:80:84:7a:4e:98:76:6a:30:c9:9f:11:36:b8:ec:
                    36:de:54:14:c5:b6:be:94:08:52:c4:36:3f:0e:73:
                    19:52:eb:b5:eb:95:0a:87:f1:2f:56:09:59:87:e0:
                    e0:ce:fc:67:06:c9:0b:0b:d6:66:b3:f1:b6:83:7b:
                    c6:b7:5a:a2:9f:76:61:c6:d0:9e:2d:c1:d8:30:d7:
                    f8:3f:94:fa:23:22:53:ad:42:6e:6c:cc:14:38:60:
                    4e:6c:8c:29:0a:48:bd:54:08:83:cc:0a:06:8f:af:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:2A:83:D4:E4:83:36:24:70:34:D9:10:A5:ED:A7:8B:11:22:42
            X509v3 Authority Key Identifier:
                keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:66:61:db:0c:d2:01:af:9c:f3:38:35:7e:57:9d:a1:4c:
         d5:66:94:36:69:99:10:81:00:97:40:7a:31:3c:7a:37:90:6b:
         76:26:26:66:35:ab:c2:3f:99:cc:ef:b1:75:b6:1a:8a:d9:fa:
         e4:50:3b:d3:f1:f7:88:e6:a9:df:d2:a0:03:d1:e7:b3:d9:1a:
         fd:22:4f:4a:70:6d:d6:c3:0b:20:34:20:c1:1c:8d:52:78:42:
         7d:c7:04:9c:34:00:e0:dc:2b:a8:f4:e5:5d:ed:16:dd:fb:66:
         1a:7b:7b:92:5a:ab:eb:23:20:57:52:91:a1:55:ed:ea:32:fa:
         a3:6a:50:75:81:b1:83:4c:7e:d7:7d:2d:30:c6:1f:31:1b:1e:
         76:87:7b:15:05:d0:af:6b:d6:6c:56:e1:87:fe:50:ea:8d:10:
         ff:29:4c:02:27:a6:a6:2f:f4:e2:42:85:76:89:93:90:bb:32:
         15:7c:ff:21:5a:ac:39:db:96:cd:57:07:28:e7:58:24:cc:f9:
         a4:4b:36:6c:4e:d6:88:96:e9:59:55:ab:d9:76:74:52:05:42:
         fd:2f:37:e6:4b:b1:b8:40:50:21:6c:4a:ec:49:45:ae:d1:21:
         e0:fe:a4:22:0c:85:a6:e6:1d:9e:9e:84:d7:3f:7c:4c:11:0a:
         df:9f:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:58 2025 by rpki-client