Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
File:                     17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json)
Hash identifier:          905JeeMtxxTYE8zMsXYTQ1WHg+vvfWJJ65IIerMo5FY=
Subject key identifier:   9A:4D:08:F8:35:69:41:A4:02:4D:39:75:D7:BB:3B:90:EE:7D:C4:EA
Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
Certificate issuer:       /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Certificate serial:       4F984927C9B06A407848F59E0A087FC1B12C7E2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
Manifest number:          3E
Signing time:             Fri 31 Jan 2025 11:20:58 +0000
Manifest this update:     Fri 31 Jan 2025 11:15:58 +0000
Manifest next update:     Mon 03 Feb 2025 16:16:58 +0000
Files and hashes:         1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=)
                          2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: c6DuxluM1WbN7E0QYHe7FGqS4tjRzqWXhYBJhnZWT/M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:98:49:27:c9:b0:6a:40:78:48:f5:9e:0a:08:7f:c1:b1:2c:7e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
        Validity
            Not Before: Jan 31 11:15:58 2025 GMT
            Not After : Feb  3 16:16:58 2025 GMT
        Subject: CN=9A4D08F8356941A4024D3975D7BB3B90EE7DC4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:48:66:51:20:3a:d3:33:0e:14:60:00:fa:
                    34:ad:13:6b:40:9c:45:51:fd:52:72:a2:6d:49:78:
                    c3:00:08:01:a5:84:e3:a7:7e:b0:0b:31:1b:2f:6a:
                    4a:54:1f:ab:f1:c9:94:ca:14:10:7d:77:33:06:d4:
                    80:5e:33:a3:59:7a:a0:93:65:d0:2d:6f:b8:93:e3:
                    ee:b6:a9:62:02:c1:38:75:5e:50:95:43:29:0b:37:
                    3a:ad:dc:2d:b1:e5:66:db:1a:13:53:d8:3b:51:e9:
                    1c:75:a9:88:63:bc:67:fa:48:f6:54:07:0b:ec:2b:
                    f6:cb:25:35:3a:43:42:6d:8d:c4:89:8d:5c:e8:60:
                    89:8f:11:46:90:9c:04:48:71:0d:bf:ef:30:63:80:
                    a9:87:aa:5e:93:63:3c:5d:9e:99:43:43:0e:cb:81:
                    50:61:f7:0e:72:7d:c3:fc:a6:7c:15:ab:6c:c3:ac:
                    cf:a4:3b:01:76:42:8c:ff:8e:ef:f4:98:7a:6e:eb:
                    2c:7c:6c:ed:9c:ae:67:77:9e:79:6e:07:d0:0b:67:
                    0d:59:b6:f2:20:d5:1b:6c:5e:7c:6c:c1:04:d7:1b:
                    71:53:38:87:8d:5d:84:c4:87:51:7c:3a:91:55:cf:
                    74:2b:f9:11:f2:57:e8:f9:6f:b3:fa:b4:b6:d7:b6:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:08:F8:35:69:41:A4:02:4D:39:75:D7:BB:3B:90:EE:7D:C4:EA
            X509v3 Authority Key Identifier:
                keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:43:ef:2f:e8:fb:81:45:75:cc:99:2c:aa:13:64:56:1b:7f:
         5d:14:93:d7:88:c7:b8:f4:ea:9d:17:b9:a6:18:01:24:18:08:
         43:3e:71:97:0b:f8:41:06:87:71:21:5b:2f:6a:ee:cc:3b:f3:
         24:a5:44:8c:9c:a5:fc:ea:6e:62:a9:de:29:19:3c:f0:ec:4a:
         7d:09:cd:d1:b2:2c:80:f6:be:77:77:55:05:ec:f7:2f:91:09:
         57:b1:ad:17:a1:3f:21:34:e4:27:92:3a:2b:63:6e:1d:85:19:
         76:b9:f1:2f:ff:04:2c:3a:17:73:8c:3e:06:d3:29:61:3d:91:
         6c:08:23:55:b6:3b:4a:10:22:f4:3f:ee:31:77:62:93:b9:d1:
         4a:a3:82:aa:74:40:79:2d:f2:04:44:3c:bc:5d:8c:d8:73:3a:
         0f:6a:9d:99:46:00:ee:59:32:d3:77:b7:9d:72:27:9b:e1:8f:
         0e:d0:b8:26:2a:ed:7c:b9:8a:1d:60:38:ed:ac:c5:38:98:2d:
         4e:9c:16:b2:65:38:b6:02:fc:f6:be:23:38:e4:44:04:82:8b:
         60:c7:cd:2e:9e:1d:a7:c6:85:0c:ba:8b:17:7a:5a:3a:d6:bd:
         f1:6f:b6:14:ae:6b:e9:4f:3f:3c:2f:31:87:3b:25:3b:2f:b7:
         e3:ec:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:15 2025 by rpki-client