Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
File:                     994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json)
Hash identifier:          0KPsO+9TEuLZXlq/1wdcaL9vcZalJRMdemzk8t78zl4=
Subject key identifier:   E3:3C:22:38:F6:50:36:A8:B6:4E:A9:DF:D7:A8:C8:8B:29:0B:68:88
Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
Certificate issuer:       /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Certificate serial:       573E6B2C87CE4A6C3EC2A2DCA7F82C3C4FCACC91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
Manifest number:          60
Signing time:             Thu 30 Jan 2025 18:21:30 +0000
Manifest this update:     Thu 30 Jan 2025 18:16:30 +0000
Manifest next update:     Mon 03 Feb 2025 04:25:30 +0000
Files and hashes:         1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: rmN2qyI3QpQlQWDR7hP9k3TqV3FXdPyaKRb9/h+2xAQ=)
                          2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3e:6b:2c:87:ce:4a:6c:3e:c2:a2:dc:a7:f8:2c:3c:4f:ca:cc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
        Validity
            Not Before: Jan 30 18:16:30 2025 GMT
            Not After : Feb  3 04:25:30 2025 GMT
        Subject: CN=E33C2238F65036A8B64EA9DFD7A8C88B290B6888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:88:07:07:49:aa:cd:28:9f:5c:a9:8c:85:
                    de:b1:57:d2:f1:fb:26:eb:da:e5:95:b9:7e:50:33:
                    12:71:f9:4d:86:49:ae:bc:b0:9e:e1:7a:4d:4c:54:
                    00:a3:c3:fc:8f:58:9e:c2:06:d8:47:2e:60:21:56:
                    ed:90:cc:2b:8a:82:04:44:ae:62:dd:00:d9:af:7c:
                    cd:c2:24:0c:fc:6b:79:dd:00:2c:4d:da:81:d2:7a:
                    3c:d1:b4:b8:b0:a2:dd:1f:14:c9:00:a7:93:da:c4:
                    48:1e:3c:f4:27:cb:f4:b2:95:5a:5d:82:3a:5d:33:
                    cc:eb:29:d2:c4:c1:e5:2a:9a:b7:0a:6e:61:5e:17:
                    5d:4a:d7:8f:46:8c:e4:a7:6d:95:0c:70:18:e9:7d:
                    ab:56:f5:4c:ee:d8:dd:32:61:59:6f:1c:ff:58:98:
                    a0:9d:26:0b:81:4a:dc:77:ee:4e:dc:ec:9f:e1:e0:
                    61:dc:ae:8a:6e:7a:19:74:02:ea:0e:12:62:5b:99:
                    89:4b:14:ae:04:04:e7:c9:19:0d:55:75:d0:84:55:
                    9a:82:93:fe:e6:3f:5e:bd:69:7a:29:56:17:c9:b4:
                    d7:c6:cd:c2:e7:c4:af:fd:af:22:44:26:e8:80:09:
                    78:07:b4:91:e8:64:9d:28:03:a3:f7:4c:82:ed:f3:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3C:22:38:F6:50:36:A8:B6:4E:A9:DF:D7:A8:C8:8B:29:0B:68:88
            X509v3 Authority Key Identifier:
                keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:3e:d5:80:d9:06:d2:63:ca:60:18:b7:1d:74:de:cb:ba:
         03:64:cb:c1:29:49:b4:81:8d:17:5c:ec:2b:16:21:6a:e8:44:
         7d:6b:9f:da:e2:35:34:3b:00:1b:9d:e2:65:c9:bb:d5:2f:46:
         ba:80:b4:d0:98:30:8b:c5:4e:9d:af:8d:ee:40:56:ff:11:c3:
         02:ef:34:bf:6a:08:1e:36:5c:49:e8:e2:e5:eb:5f:62:c8:b7:
         30:5e:4b:93:e1:0f:67:30:34:74:03:17:c8:ae:a5:8d:b7:ab:
         d0:93:65:16:19:6f:5b:48:b4:db:aa:96:64:ea:2d:f9:fa:18:
         01:e1:5e:60:52:85:d3:51:04:bc:42:d5:33:a2:42:93:da:36:
         2a:57:97:4c:4a:b5:94:70:2a:46:1e:4b:a1:67:21:e2:39:5f:
         0a:3a:0d:22:28:03:00:1e:47:f3:a3:31:9e:a1:79:28:be:58:
         ca:a8:6d:5f:1a:a1:93:6c:39:85:46:31:bb:e8:fc:94:18:8d:
         65:f0:ba:2b:75:ef:3a:7c:69:f7:23:0c:c9:51:e6:58:d8:bc:
         0d:7c:92:f7:fa:65:89:2b:57:10:56:2d:2d:a0:ef:64:54:b5:
         a7:6f:fc:3b:e8:be:54:2e:3c:a5:f6:74:d6:0f:42:d2:86:91:
         c9:d7:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:08 2025 by rpki-client