Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft
File:                     2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json)
Hash identifier:          hHQIYPhdx0FfqGlWyQFttdGWzXCeUgoAjv9eUkwI7jU=
Subject key identifier:   01:3A:49:EB:64:4E:53:E8:A9:57:A9:97:86:35:BE:BE:6D:2D:49:AB
Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D
Certificate issuer:       /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
Certificate serial:       4B1CCA420D90CCDC7D8D0A59228ABF5BD111D484
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft
Manifest number:          01EC
Signing time:             Thu 30 Jan 2025 20:21:53 +0000
Manifest this update:     Thu 30 Jan 2025 20:16:53 +0000
Manifest next update:     Mon 03 Feb 2025 05:10:53 +0000
Files and hashes:         1: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: SQhkMQ8/Fi8Sb6goSAi10Kg4TUazRHzvZPvVMEK8rDA=)
                          2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=)
                          3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=)
                          4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1c:ca:42:0d:90:cc:dc:7d:8d:0a:59:22:8a:bf:5b:d1:11:d4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
        Validity
            Not Before: Jan 30 20:16:53 2025 GMT
            Not After : Feb  3 05:10:53 2025 GMT
        Subject: CN=013A49EB644E53E8A957A9978635BEBE6D2D49AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:6c:4b:25:0d:62:7f:ca:65:2d:0c:dd:c0:
                    d5:96:a9:c5:e7:b0:03:83:e7:b3:ef:08:6f:01:08:
                    3d:98:58:da:27:80:4e:38:2f:09:5f:b2:ed:25:58:
                    5d:de:4a:3b:9f:50:24:bc:13:60:97:59:b5:d0:41:
                    94:a3:be:1a:a5:8f:8a:d4:f9:13:6a:c3:8d:9d:07:
                    6a:59:b7:21:10:6a:4c:c4:22:f5:8b:ac:c9:4d:02:
                    68:bf:03:58:33:3b:1f:8f:82:0b:58:cd:1f:64:f6:
                    ba:4e:1a:a9:7c:6a:30:ca:71:1b:71:d6:54:bb:31:
                    3c:dc:ba:dc:ed:28:30:24:3e:4c:f2:2a:d6:5b:b6:
                    89:f0:af:89:17:e1:09:3a:29:5d:9e:3e:4f:41:ae:
                    93:26:e4:20:cb:38:e1:d9:61:8c:a8:79:b6:fc:4d:
                    98:18:04:85:a0:ef:ec:01:d8:17:0b:51:50:c0:9d:
                    4e:82:e3:e3:42:15:90:d2:3a:9b:45:fc:2e:cf:79:
                    96:69:3c:d1:09:59:da:bd:46:56:6d:df:81:02:ea:
                    f1:b9:53:da:72:da:dd:6b:37:2e:e3:c6:ce:66:45:
                    df:29:03:c7:f8:cd:f4:85:0f:c1:92:7c:0e:df:e3:
                    b8:6f:da:83:66:f4:63:7f:75:36:93:cc:cb:a2:9c:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:49:EB:64:4E:53:E8:A9:57:A9:97:86:35:BE:BE:6D:2D:49:AB
            X509v3 Authority Key Identifier:
                keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:55:21:11:ef:16:eb:d1:23:4a:4a:19:eb:30:f5:44:aa:
         bf:5a:ea:48:7c:a3:90:2f:81:1e:7e:91:8d:c3:99:a2:1a:93:
         ff:1b:6f:4b:7c:3b:34:51:56:08:b8:42:51:39:88:0c:6b:b4:
         3a:c9:d1:bd:a2:0c:1a:bc:2b:c1:90:e9:22:f3:58:8a:fb:4d:
         01:27:c7:4d:f5:5e:50:43:4e:c2:85:44:cf:70:fb:ce:f0:0b:
         0d:a7:11:ac:4f:e6:ce:44:44:dd:8b:7e:d9:ae:44:6b:a3:3e:
         af:aa:77:f9:a1:6f:08:dd:2f:3e:59:1c:94:65:25:01:a0:74:
         e7:4f:a4:b2:eb:22:f6:a1:b7:ba:2a:99:9d:37:72:a7:a0:92:
         84:f9:0e:e4:dc:c9:32:ad:7b:b6:ee:f6:1b:e1:fe:48:95:0f:
         57:e1:55:5a:6d:87:e9:6f:91:e3:f3:a6:1f:9f:79:66:ef:9a:
         53:c3:29:19:2d:6d:68:66:8d:45:94:02:c0:e7:15:01:53:d5:
         81:20:a4:1d:2e:bd:16:d1:25:cd:8a:1d:b1:d8:4d:90:1a:75:
         1f:52:81:de:37:3a:df:4b:b6:57:c4:33:1a:29:e8:10:82:d9:
         91:df:af:5b:c7:30:31:75:00:98:26:20:a2:fb:53:d0:f8:73:
         8e:93:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:39 2025 by rpki-client