Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
File:                     96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json)
Hash identifier:          yDiXOMFJKvBWhFI5njgn6qO3oAodm5tjtATTC3BCjoE=
Subject key identifier:   32:0F:CB:E1:03:66:49:7E:DD:BA:EB:0C:CF:15:BE:7C:26:6A:29:5D
Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
Certificate issuer:       /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Certificate serial:       409DDC57F88B760940CF571F52850E72111648E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
Manifest number:          013F
Signing time:             Wed 29 Jan 2025 09:31:13 +0000
Manifest this update:     Wed 29 Jan 2025 09:26:13 +0000
Manifest next update:     Sat 01 Feb 2025 20:51:13 +0000
Files and hashes:         1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: pbtnRnaTH+DVJ0tZdjXb84dD832WiM9IiHWW1QnzvZE=)
                          2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: jXKcmK7LeE0fz1wa0k9C7QNdhk/J1xANVdKnvzgnwQM=)
                          3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: 4UtOikiEbw7MTyF2qB18hMHkq0zS5v90+Zpu/WwZgRA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9d:dc:57:f8:8b:76:09:40:cf:57:1f:52:85:0e:72:11:16:48:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
        Validity
            Not Before: Jan 29 09:26:13 2025 GMT
            Not After : Feb  1 20:51:13 2025 GMT
        Subject: CN=320FCBE10366497EDDBAEB0CCF15BE7C266A295D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:66:75:0a:84:2c:a4:e0:f2:b0:e9:40:cf:
                    5a:26:9d:fa:24:d1:56:8c:c0:38:45:93:83:ca:75:
                    0b:0d:8c:5a:d4:f4:20:5f:8f:4d:e3:9b:68:aa:2e:
                    e8:5d:d9:c4:d2:cf:9e:75:0f:7a:8d:e1:6b:61:6f:
                    03:04:6f:0b:c0:64:2a:9f:82:75:06:79:6b:b7:fc:
                    20:ed:14:de:f7:73:b1:eb:56:f2:8d:42:46:70:2d:
                    a3:84:de:ba:43:e4:65:7a:a3:de:aa:12:b2:6f:4d:
                    3c:a8:fd:0b:17:19:bb:7b:d6:03:21:e9:7f:6c:3c:
                    85:f2:9f:37:9e:96:40:bf:b9:6d:14:19:a8:ee:1f:
                    c3:be:f6:57:0e:b5:db:09:85:5d:63:05:04:ad:7b:
                    0d:d0:dc:7e:3d:05:67:ad:06:2f:87:61:99:83:52:
                    bd:eb:37:db:d8:46:3f:f1:68:77:63:07:27:9c:80:
                    0c:b1:12:af:59:5f:4a:55:09:c0:bf:22:6e:25:cd:
                    8c:6b:40:d9:36:2e:2b:d9:10:c4:97:48:0b:4a:20:
                    bd:2b:39:a3:d0:8d:7b:2a:3b:8d:cf:fa:c7:b1:25:
                    e5:d0:1b:22:85:b2:1c:15:c3:b9:6f:72:29:8e:27:
                    11:e8:72:c5:de:be:8e:0b:bd:1f:73:4c:4b:2f:5a:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:CB:E1:03:66:49:7E:DD:BA:EB:0C:CF:15:BE:7C:26:6A:29:5D
            X509v3 Authority Key Identifier:
                keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:c0:93:5e:d1:be:03:f4:3f:18:5e:2d:3e:17:b5:1d:a8:
         0b:5a:2d:75:f8:c0:06:3c:d3:35:e8:8c:db:ea:a2:b4:08:78:
         a4:30:f0:a3:2b:c3:9e:86:2b:78:db:0b:22:a5:ef:ef:25:42:
         39:c9:3c:95:1c:ce:1a:93:54:cc:b2:40:9b:da:c1:94:ce:91:
         5b:71:78:a8:4f:97:9e:a1:4b:b7:bd:b4:c8:cb:80:05:b3:d3:
         c4:3d:f6:9b:1d:53:de:ca:c6:d0:ff:8e:22:02:b6:9a:a9:75:
         d4:e5:6d:e0:50:4c:c0:97:31:9a:d6:f0:b4:7f:e7:42:29:3e:
         0e:28:03:25:27:2d:d0:80:4c:11:5e:02:66:23:5b:d2:41:90:
         64:a3:80:3c:1b:fb:59:0a:ff:dd:95:78:9f:bf:75:9d:0b:13:
         ae:0b:73:fc:86:67:db:a8:51:76:db:e1:dd:87:18:0e:3d:bb:
         b2:8e:fb:29:5e:d1:b8:72:ad:26:c2:a0:4c:41:89:74:d3:3d:
         1e:cf:b7:11:14:c4:33:2d:a3:74:65:9a:c8:af:e8:66:64:f8:
         3d:01:d2:ab:62:39:0d:16:26:c8:82:db:d9:25:41:3f:aa:1f:
         17:b5:56:d3:91:8d:50:ab:1c:ef:d5:51:e2:f9:77:31:80:e8:
         bb:77:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----