Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
File:                     2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json)
Hash identifier:          73WaQQAuPDX9XFfbz831MqR+fxIxb2gTT+99lxM11Fk=
Subject key identifier:   57:60:16:65:DC:E1:20:97:B6:A6:19:58:CA:73:BB:AC:F1:95:C6:C5
Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37
Certificate issuer:       /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37
Certificate serial:       6D5D203CD1EB36913D9939C480466DD12033A19C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 18:02:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:57:11 +0000
Manifest next update:     Mon 03 Feb 2025 20:36:11 +0000
Files and hashes:         1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: KJA6UrlrIJ6/cYx8fXJJM/dmYEAHCdQbQ3mWfDPqObc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5d:20:3c:d1:eb:36:91:3d:99:39:c4:80:46:6d:d1:20:33:a1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37
        Validity
            Not Before: Jan 31 17:57:11 2025 GMT
            Not After : Feb  3 20:36:11 2025 GMT
        Subject: CN=57601665DCE12097B6A61958CA73BBACF195C6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:00:a9:7e:00:8a:e6:38:41:c6:cb:bf:0c:
                    ad:fb:76:c7:5f:9e:d2:b0:ae:58:f4:4f:72:a9:be:
                    75:62:a1:a0:27:ae:8c:f9:78:09:95:f1:74:b4:08:
                    7f:7f:17:ef:7b:1c:f2:a7:27:82:3d:c9:57:46:43:
                    a3:cf:55:5e:e4:16:50:9f:c0:8b:2c:be:f6:6b:da:
                    05:e6:9f:e8:ce:0d:c0:88:ec:7b:36:af:e3:6d:ad:
                    38:0e:12:19:9d:23:82:1b:7c:d8:13:08:af:80:bc:
                    c8:06:49:ee:2e:14:1c:fc:5b:36:39:0a:ab:00:23:
                    fb:72:18:d6:4c:17:41:ed:1b:33:64:48:05:47:88:
                    68:e3:eb:24:44:77:b0:f0:8c:6c:e9:98:8a:a6:4c:
                    1d:d5:f2:50:ae:cb:49:a4:0a:af:66:73:9e:98:05:
                    32:01:00:c9:1b:b2:b1:59:6d:a0:f4:32:df:84:93:
                    8b:65:7e:d0:6f:e8:ff:8b:4c:87:f7:5b:89:29:5e:
                    3c:56:4c:41:33:20:64:2c:63:2f:79:97:a6:c2:cd:
                    4a:e1:b6:5f:af:fc:16:e8:07:d2:92:8b:59:53:87:
                    5b:d0:bc:bc:07:18:51:00:3a:17:54:98:e9:c1:c8:
                    6e:f5:39:27:31:31:dd:b8:34:b5:b3:65:d6:47:f0:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:16:65:DC:E1:20:97:B6:A6:19:58:CA:73:BB:AC:F1:95:C6:C5
            X509v3 Authority Key Identifier:
                keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:1b:c1:4d:4c:78:70:7a:36:ed:7d:70:e6:d1:bc:d4:c5:c7:
         96:ac:8b:01:94:13:01:2f:a0:2a:b4:e4:a1:b2:16:b0:4d:27:
         c4:5b:ba:4d:51:61:4e:ac:88:b8:f3:d2:2e:9e:bf:7e:18:1f:
         47:0b:15:59:ab:88:8c:aa:b6:98:45:cb:bd:06:70:f7:47:cb:
         fa:27:81:7a:7f:e6:57:f0:c5:4e:3c:cf:bb:9a:d7:b5:cc:7b:
         15:0c:fc:01:04:fc:87:3a:7f:5b:2c:a6:40:cf:6c:6c:4b:8d:
         8f:eb:51:a0:51:b0:6e:3b:4e:3f:27:59:8d:40:f8:43:58:9d:
         6a:ae:fb:52:75:3c:86:4f:c2:22:cd:49:48:5c:56:b2:0f:ff:
         19:25:d3:c8:19:ea:9d:8c:f1:01:6d:bc:0b:84:69:64:dd:f0:
         77:a5:23:5d:2f:fa:5e:9c:26:2d:49:83:79:da:8c:c9:ff:b0:
         bd:1f:26:26:8e:ca:8c:31:e9:38:d4:4b:92:b9:dc:32:9c:0c:
         bb:12:aa:6e:c1:8c:08:7f:de:b6:f3:ae:eb:b5:ba:af:5e:6c:
         c6:6f:19:dd:e9:57:64:cf:e9:4d:f0:5c:e1:bd:70:b4:87:10:
         b7:82:c7:86:80:a6:75:54:e0:bb:ad:d5:35:d2:97:3a:cd:cf:
         93:89:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:49 2025 by rpki-client