Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft
File:                     DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json)
Hash identifier:          3ZXDSYfX3SG/5+MN0OCOkH0YDgMFRixostfEopOQnr4=
Subject key identifier:   53:C6:C2:A4:A6:ED:EB:07:BB:ED:B3:0C:FA:53:B8:CA:12:8D:BB:23
Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F
Certificate issuer:       /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
Certificate serial:       46C03374B92BDA8BBCB97665BCC593B702F83610
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft
Manifest number:          01B2
Signing time:             Thu 30 Jan 2025 10:11:53 +0000
Manifest this update:     Thu 30 Jan 2025 10:06:53 +0000
Manifest next update:     Sun 02 Feb 2025 20:41:53 +0000
Files and hashes:         1: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: qqCe6NIeY5wOKnmmaXo6AjpaN3wuW5Sv2eZDOjhNZNE=)
                          2: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: qCHg+9KrPmmCMKbN84AylMJKCiXjXQ2KVOvVNtBlvIQ=)
                          3: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: iaX0jVZMqsM7HnKC1VbF47SKkzy6YJTNiBdraKPNi8w=)
                          4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: rIYn2x9xBTvWYF02bgk79rRjdwgksSC8GmTAPqYdm0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:33:74:b9:2b:da:8b:bc:b9:76:65:bc:c5:93:b7:02:f8:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
        Validity
            Not Before: Jan 30 10:06:53 2025 GMT
            Not After : Feb  2 20:41:53 2025 GMT
        Subject: CN=53C6C2A4A6EDEB07BBEDB30CFA53B8CA128DBB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:4f:ca:9b:4b:fb:28:5c:f5:37:f9:b4:dd:
                    b8:4e:39:da:a4:63:54:26:0c:4e:ad:03:f2:86:bf:
                    a3:2a:ae:a5:74:ff:0a:16:99:ff:39:53:8e:95:8e:
                    a3:7c:7a:52:78:02:6e:51:3f:d4:93:51:73:75:48:
                    73:1b:d8:c5:9e:31:d9:45:58:00:d7:30:c5:d9:dd:
                    7f:ec:a2:c7:df:fa:69:95:4a:c0:f7:e5:8e:aa:b2:
                    b1:5f:39:25:8a:be:05:24:e8:01:7d:56:9b:c2:5d:
                    2a:e2:06:b0:92:c0:41:25:d1:2d:e8:cb:b0:a7:ae:
                    4d:75:a7:8c:45:c2:b2:38:4b:4e:3f:2a:86:45:97:
                    e3:1f:c8:d7:e1:5a:43:a0:4e:ae:d9:ef:42:c7:98:
                    93:ff:05:98:f6:66:c8:f6:f4:f8:89:8d:b7:07:ef:
                    b3:74:ed:70:f8:35:c3:f2:0b:7a:41:ba:e1:81:69:
                    a3:ff:29:38:99:28:01:7f:c8:dc:c1:36:93:36:de:
                    69:6d:2b:60:ca:92:ed:4d:45:33:d5:2d:87:e7:5b:
                    1e:e0:a1:d0:a4:ad:9a:47:52:e6:1b:bc:b7:14:fc:
                    b1:98:4e:20:79:e9:1d:f8:88:9d:75:4e:bd:b9:66:
                    f1:dd:b6:4b:d0:fb:c9:e1:0e:52:dc:62:ef:3d:d1:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:C2:A4:A6:ED:EB:07:BB:ED:B3:0C:FA:53:B8:CA:12:8D:BB:23
            X509v3 Authority Key Identifier:
                keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:68:62:a3:f0:ac:72:c3:25:02:87:2e:93:d8:f7:62:61:
         f7:f1:a8:85:c6:f9:8a:65:c3:9f:cf:b5:ba:c8:bc:18:06:75:
         9b:5e:f9:4a:b8:29:d4:7d:00:77:5d:c0:cb:28:4f:e9:7f:8d:
         3e:e1:ab:ff:e1:0a:33:0c:22:3e:73:3e:93:f0:77:74:36:4b:
         72:23:61:ed:e9:31:b2:7f:68:a1:46:93:d5:40:94:9a:7c:1c:
         aa:bf:75:6b:70:8b:88:fd:28:e4:19:85:f0:8e:34:ac:f8:64:
         b6:b7:92:3e:c6:6c:64:8a:6e:5e:80:ff:a0:a6:08:4a:df:f0:
         4a:64:57:d8:0e:32:4e:8e:5e:26:1d:ce:b4:d2:01:56:6d:e7:
         78:81:a1:79:72:c1:76:ef:54:8a:bc:5f:a3:62:20:2d:ef:17:
         7d:bc:b8:3c:03:b3:7d:96:4c:d2:a5:3e:a5:0f:52:f5:15:44:
         12:63:ac:5e:eb:d5:7d:a5:fe:1d:40:68:a5:d2:23:40:df:f5:
         e9:39:07:64:db:9c:ae:7a:b7:50:43:62:3e:fe:c5:01:f8:eb:
         d7:6c:9d:1b:1c:a7:8d:f9:25:77:05:01:c1:4b:b2:9c:09:09:
         e1:40:93:18:7a:d0:2b:94:78:ad:a0:35:22:35:08:0d:32:c9:
         a7:44:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:40 2025 by rpki-client