Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
File:                     81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json)
Hash identifier:          KkKNmPvAAc2sWN45mFdg1t2Meh+MCaR/ZIM6OZp9n/U=
Subject key identifier:   CC:54:06:27:02:0D:E2:81:B0:19:96:AE:90:B2:10:28:31:35:63:BC
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Certificate issuer:       /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial:       2408CD4BA9B590002B1AB4C8BB5BAA90B22C953C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
Manifest number:          04A2
Signing time:             Wed 29 Jan 2025 15:11:42 +0000
Manifest this update:     Wed 29 Jan 2025 15:06:42 +0000
Manifest next update:     Sat 01 Feb 2025 23:18:42 +0000
Files and hashes:         1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: tDwbS64GJLMjSrxPmtcS9jOCO+Z5cxTCif0yhGzEoUE=)
                          2: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: 4PGoVd08XPUy6mgRi1oDzkoOAkRyQ3CrJAWNfIYjkEA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:08:cd:4b:a9:b5:90:00:2b:1a:b4:c8:bb:5b:aa:90:b2:2c:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
        Validity
            Not Before: Jan 29 15:06:42 2025 GMT
            Not After : Feb  1 23:18:42 2025 GMT
        Subject: CN=CC540627020DE281B01996AE90B21028313563BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:3c:36:3e:e3:4e:8c:dc:bb:a6:27:d0:0e:
                    94:42:8d:49:c3:06:ec:c0:98:70:89:74:8d:ed:48:
                    1c:8d:f3:e7:d3:8e:4d:42:a4:a4:ac:33:1f:fa:9d:
                    b2:d2:bc:7e:9a:9f:2f:95:45:b8:24:f2:1e:85:24:
                    29:e4:b8:d1:37:74:c4:58:39:8c:a7:4d:98:37:bd:
                    97:05:5f:c7:a4:a9:b7:13:22:1d:89:13:ad:ac:76:
                    1f:64:68:0d:f4:82:35:94:0f:1f:66:2f:44:a6:cd:
                    81:8a:80:a5:27:45:c9:97:fe:84:ae:62:70:d8:93:
                    b6:8d:72:9c:41:4d:a2:af:35:b7:43:d1:d3:a8:57:
                    b6:34:ca:d0:e3:63:77:06:6c:e4:b5:2a:37:3f:9a:
                    92:f9:8b:27:b5:9b:8a:61:e3:42:d4:6c:9a:a1:7c:
                    1f:2f:ed:cf:3e:e9:74:a5:e3:cf:44:d4:82:7d:61:
                    95:78:fc:c8:4b:86:5b:a5:e4:32:06:83:b7:da:e5:
                    51:ac:2b:4c:ce:ec:b9:77:b8:fd:a9:66:41:23:d8:
                    27:20:22:bb:de:1f:9f:9e:5a:13:ba:5b:6a:0b:9f:
                    61:76:97:c3:df:69:46:4e:f6:be:fc:e6:2e:83:7f:
                    48:01:13:b0:d0:33:72:1a:30:1e:ac:ab:2c:bb:04:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:06:27:02:0D:E2:81:B0:19:96:AE:90:B2:10:28:31:35:63:BC
            X509v3 Authority Key Identifier:
                keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:1e:f3:fa:cc:92:8e:06:90:b5:08:66:e8:fa:00:06:14:
         0c:f7:36:2e:db:f3:f7:93:25:02:e3:d3:4b:95:c7:e2:9e:6d:
         82:16:14:de:4e:a7:96:31:ce:19:2f:0e:2b:9b:5b:4a:47:db:
         93:55:31:b8:38:e6:5a:04:2d:16:68:16:00:11:a2:89:b0:05:
         05:b9:48:d3:0c:35:c5:a1:66:5a:9e:df:c3:b8:c0:a4:0d:71:
         f4:6a:d5:1a:3b:c8:bc:0d:6c:c5:4b:92:65:26:0d:63:5d:23:
         81:8b:9e:30:35:00:30:fa:34:12:2e:44:0c:14:dd:62:c1:75:
         bf:fe:df:32:89:9a:2b:0e:1f:f3:46:20:75:7c:95:22:5d:ff:
         4a:7d:84:2c:a9:56:7a:42:9e:72:1a:e2:01:90:6d:97:14:c7:
         48:c6:65:0a:e6:b6:10:eb:48:73:17:6d:5f:ae:78:b2:c4:72:
         b7:b0:50:1c:d0:a5:93:74:25:97:53:d6:d9:ab:6a:0b:88:f2:
         bd:12:2d:f3:f4:65:45:ac:bf:10:40:4f:2a:ec:fa:a2:74:a9:
         bb:62:6c:ee:ce:15:97:e0:ed:35:3b:b8:43:8e:6a:ca:ba:5a:
         3e:a6:69:c1:cb:2a:6f:3c:5e:49:0c:36:63:23:5b:38:15:88:
         ea:ee:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:44 2025 by rpki-client