Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft
File:                     3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json)
Hash identifier:          To3FPQJ5Q6r2VYp7RPVokV5WnP3T5KLvpzfilNJqIls=
Subject key identifier:   4F:6C:77:CC:E9:EB:C8:F3:FE:84:0C:CE:19:1A:09:6D:1F:2C:06:89
Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47
Certificate issuer:       /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47
Certificate serial:       4431A3381C10423139A60B94F55C107796DE55BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft
Manifest number:          011F
Signing time:             Fri 31 Jan 2025 13:02:12 +0000
Manifest this update:     Fri 31 Jan 2025 12:57:12 +0000
Manifest next update:     Mon 03 Feb 2025 13:48:12 +0000
Files and hashes:         1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: fnicnAUixDYQ6rz670ejWzHTJ7LjMowR43yazv6eqJw=)
                          2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: 3VNyV+xggxa7xMMWy16vGpUaFxQO4lL/tc83QDohu80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:a3:38:1c:10:42:31:39:a6:0b:94:f5:5c:10:77:96:de:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47
        Validity
            Not Before: Jan 31 12:57:12 2025 GMT
            Not After : Feb  3 13:48:12 2025 GMT
        Subject: CN=4F6C77CCE9EBC8F3FE840CCE191A096D1F2C0689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:63:69:17:68:17:a0:e4:c7:a1:11:de:67:
                    9f:af:e7:2b:e9:d9:f3:0f:db:e0:9b:ac:98:69:e2:
                    cd:8c:b6:39:7f:92:de:70:d5:dd:46:b2:80:00:b0:
                    9e:72:b7:d1:f6:ba:03:81:ab:d3:46:7a:18:d6:b4:
                    0b:3c:94:5b:0e:2d:59:aa:6a:2d:b9:f2:d4:62:e9:
                    a1:3a:6a:ac:e8:1a:c9:67:48:14:e1:4c:86:1f:e8:
                    24:3e:f5:2d:cf:ff:42:16:27:e6:2b:71:a7:fa:61:
                    bd:ad:1e:82:bb:5d:02:09:8f:33:35:ca:ce:49:0e:
                    e7:f8:15:98:ca:b5:6a:8b:5c:16:af:60:c0:5e:40:
                    c5:48:16:13:61:bc:93:6c:6e:a6:3b:9e:10:79:aa:
                    84:f2:dd:b5:9c:29:68:e3:27:09:ca:7a:07:f7:0d:
                    bc:f7:36:4d:45:85:52:de:17:46:e5:21:57:a9:8e:
                    d6:c3:be:6e:e4:89:f5:45:35:ad:5f:42:e6:80:12:
                    83:c0:bd:6b:45:bc:b8:ce:6c:67:c2:e4:84:df:76:
                    76:c0:d8:b4:db:79:7a:95:27:00:8b:6f:7f:0d:5c:
                    c9:79:20:c8:b4:f3:ab:bc:ea:af:c2:4a:d8:fe:a3:
                    a7:a6:3a:be:5d:97:28:2d:14:03:6d:35:c0:0f:d0:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:77:CC:E9:EB:C8:F3:FE:84:0C:CE:19:1A:09:6D:1F:2C:06:89
            X509v3 Authority Key Identifier:
                keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:82:f4:4a:ad:e1:5c:6c:56:65:87:a8:e6:f5:82:1b:4b:2b:
         c6:b3:a7:3c:e6:85:78:19:ab:42:3b:3c:78:d2:0a:27:1b:ec:
         3b:c4:28:01:6d:d5:71:2c:1a:3b:a8:92:a2:3e:3d:a4:d1:08:
         fc:12:f5:12:94:f0:a6:b8:60:a6:6b:24:19:28:ea:ea:04:8c:
         0b:64:5b:c4:f9:5b:a1:f1:e4:44:6b:16:98:a8:e4:d4:5b:be:
         ef:13:0c:73:6e:a4:d7:c9:f1:ef:69:ed:a0:2b:18:90:8c:2a:
         4e:28:ce:c7:7a:53:b1:f3:0a:e2:6e:94:f4:a7:0a:47:80:be:
         a1:f6:37:de:6f:ed:10:36:8b:b7:2f:a4:77:bd:ba:02:03:b3:
         4c:f9:84:2a:b9:8f:76:9e:f5:b3:64:d8:b6:61:4b:ce:3e:94:
         bf:1b:8a:dd:9f:d4:3e:8d:b0:09:5f:33:13:9a:52:7c:c1:eb:
         db:e5:cd:4a:8a:34:7f:73:59:72:c0:9f:e7:29:82:61:11:e1:
         f7:f7:d4:c2:56:a1:28:dd:12:b8:6a:f8:1e:db:e3:dd:fb:9a:
         74:7b:e1:11:67:18:a0:ae:09:dd:83:6f:d7:70:ff:58:a6:c0:
         6a:9c:9a:33:a4:f0:5c:f2:a1:f1:82:30:59:b4:a3:d6:4f:fe:
         a4:10:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:41 2025 by rpki-client