Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
File:                     20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json)
Hash identifier:          933DHXoEa9IjQgYJE+9LMlqmkwYlOtR3hKiia3tXU1U=
Subject key identifier:   8B:68:3F:35:91:B8:71:B0:CE:1B:52:0E:B9:24:89:C3:14:59:20:D2
Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Certificate issuer:       /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Certificate serial:       7E8C148786C59C46F85CA3FA28BFFB252972F829
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
Manifest number:          0427
Signing time:             Fri 31 Jan 2025 02:50:46 +0000
Manifest this update:     Fri 31 Jan 2025 02:45:46 +0000
Manifest next update:     Mon 03 Feb 2025 10:35:46 +0000
Files and hashes:         1: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: aV3ZPEDkk9pkPeRsaffKFxqQrrWxvO7+4mI9TdYcewg=)
                          2: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: hJ0Sh8sNAQ4iUVUL3RXk2QqqiaXFnaRJflSxUV9vLHc=)
                          3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=)
                          4: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=)
                          5: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:14:87:86:c5:9c:46:f8:5c:a3:fa:28:bf:fb:25:29:72:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
        Validity
            Not Before: Jan 31 02:45:46 2025 GMT
            Not After : Feb  3 10:35:46 2025 GMT
        Subject: CN=8B683F3591B871B0CE1B520EB92489C3145920D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:04:3e:05:52:ee:f8:2b:79:46:7e:f6:56:
                    86:f2:fc:f9:83:4b:c6:71:a4:06:39:8b:1c:d3:86:
                    2b:08:00:bf:3b:f2:9b:de:61:9e:db:85:75:04:8b:
                    b2:ad:32:e1:9e:99:35:94:a2:82:23:93:63:e2:8e:
                    db:1b:53:ad:5d:df:eb:9a:8a:c7:2a:af:dd:04:89:
                    33:e0:47:ce:09:81:c3:16:36:a0:9c:07:de:d5:0b:
                    c1:b8:45:a4:a6:03:de:53:56:e1:ad:e5:96:06:74:
                    cd:a9:9d:7e:50:94:60:c0:13:f0:1a:78:39:75:55:
                    ea:2d:b5:f4:8c:a5:fb:5b:ac:29:35:c3:db:dc:93:
                    ad:bc:c0:ff:b7:81:b7:08:3a:89:2e:7d:84:b3:80:
                    65:63:ae:5c:31:3a:61:72:4f:8c:b2:f6:04:7f:c7:
                    83:7c:54:3a:57:5c:4e:11:d3:48:58:4a:26:e8:2b:
                    68:bf:7d:3b:ae:0c:a1:0c:cd:98:a6:d2:6e:71:9c:
                    be:08:a6:7e:e1:57:f0:58:83:f9:06:28:8c:7d:2f:
                    d5:d1:fd:01:a4:d7:39:2e:53:54:7c:20:90:c3:b0:
                    a4:47:32:d1:1b:0d:f7:85:2e:13:9a:ae:6f:a5:52:
                    69:64:c1:49:ea:29:4a:9a:39:31:2a:90:72:42:d4:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:3F:35:91:B8:71:B0:CE:1B:52:0E:B9:24:89:C3:14:59:20:D2
            X509v3 Authority Key Identifier:
                keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:b6:02:b6:ac:28:57:6a:51:a2:fd:e7:75:df:a5:b4:4c:
         57:04:ef:61:36:7f:91:65:9a:43:06:b1:da:6b:29:c2:70:dd:
         d2:4b:6c:e5:ab:9f:a5:3c:2a:f8:17:54:ef:09:85:5c:03:68:
         49:73:1c:83:18:5b:75:26:a7:8c:69:a0:f5:3a:61:b1:4a:e6:
         fd:6f:a2:e5:4e:ae:c7:4f:18:d3:e9:65:7f:56:20:9a:5b:2d:
         9b:e7:53:f5:71:03:e7:76:ac:1d:db:cc:c3:be:43:f6:28:b1:
         1e:ce:0f:17:a9:22:9a:33:24:2d:d6:63:c7:53:14:16:74:c1:
         65:65:5a:50:e3:0d:ed:31:dc:f0:0a:e2:6c:bc:2d:cc:a8:e0:
         ac:0d:08:4d:25:13:47:d8:d2:b8:25:73:d3:b5:95:76:75:34:
         88:56:ae:3c:71:7a:c6:4a:97:6d:36:67:ea:79:39:65:37:a9:
         62:01:02:a9:8d:da:28:fe:f3:43:26:dc:1f:24:0a:7f:1e:3f:
         06:77:99:2c:5c:09:8e:8f:ba:ec:ed:ea:c9:e7:bf:4d:7d:ac:
         df:d8:37:0f:99:49:85:2b:9a:0d:e3:09:93:85:66:e5:51:7c:
         65:54:b3:cc:4e:bb:0b:39:e5:9f:53:42:33:09:a2:16:9c:a6:
         97:f0:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:43 2025 by rpki-client