Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
File:                     23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json)
Hash identifier:          cfQOXQaeUfP2xhAtONfx7Smfl6nlI97Iue+AeXY966c=
Subject key identifier:   37:8D:97:58:04:07:0C:6C:66:79:CA:97:C6:EB:2F:F0:A3:25:AF:4B
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Certificate issuer:       /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial:       4DBB3A4FC1C879EEDCE721FA6A6ED52D117A5F23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
Manifest number:          0204
Signing time:             Fri 31 Jan 2025 07:02:16 +0000
Manifest this update:     Fri 31 Jan 2025 06:57:16 +0000
Manifest next update:     Mon 03 Feb 2025 17:46:16 +0000
Files and hashes:         1: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k=)
                          2: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=)
                          3: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: QsZE6Pf9tOzWFJZ205DEEwwT+7AiUe62wHHSHetJ1tI=)
                          4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: AwdKe4Y6MEUfnqDScIzMXI+Jh2SUVi5+YUpo0QrZJkc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bb:3a:4f:c1:c8:79:ee:dc:e7:21:fa:6a:6e:d5:2d:11:7a:5f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
        Validity
            Not Before: Jan 31 06:57:16 2025 GMT
            Not After : Feb  3 17:46:16 2025 GMT
        Subject: CN=378D975804070C6C6679CA97C6EB2FF0A325AF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:f8:d6:33:62:a1:90:76:64:04:b9:f6:33:
                    bc:ce:2e:40:c9:39:02:0f:e4:e6:f9:9b:50:a8:33:
                    ff:0c:00:d5:41:b5:6d:52:6f:a7:0b:a7:60:e1:11:
                    ea:fc:35:a2:fa:b4:eb:b9:67:11:56:9a:90:f1:2a:
                    f8:62:85:cd:5f:43:fb:7d:b9:98:f4:12:07:45:12:
                    df:37:21:00:c0:99:cc:86:0e:e8:ca:8b:49:08:27:
                    97:77:f4:ca:35:82:4a:ef:72:fa:a1:ac:2d:eb:d9:
                    a8:cd:61:88:a6:65:1b:01:a4:82:60:59:52:9a:75:
                    8c:69:e9:11:60:ed:a9:dc:b1:6f:27:90:30:2c:7f:
                    a6:78:b1:47:8c:0a:60:00:1a:70:e8:20:be:6e:45:
                    f8:76:bd:49:89:5b:5e:06:cd:c4:f4:2b:20:63:fe:
                    da:cd:26:1a:1e:2b:cf:4c:1c:28:a9:69:f6:d6:6c:
                    e2:97:6d:2c:41:8c:1b:0f:84:6c:78:57:b1:71:a5:
                    35:8f:70:4d:06:75:24:cf:f0:f4:ad:88:5e:d0:44:
                    d9:c1:3f:53:f6:8a:0f:08:29:27:ec:a5:d8:85:77:
                    62:fa:74:11:c3:41:25:76:ea:d7:0f:83:1b:b2:43:
                    f2:78:0a:c2:8b:60:7c:bd:76:c1:78:2f:a8:7b:4f:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:97:58:04:07:0C:6C:66:79:CA:97:C6:EB:2F:F0:A3:25:AF:4B
            X509v3 Authority Key Identifier:
                keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:91:0b:7a:6d:43:e8:4f:9f:bd:a7:1f:44:b5:db:c7:7a:
         88:70:5d:08:9e:61:49:da:fd:59:32:d1:51:84:31:b6:30:b3:
         a2:97:09:df:35:c7:80:c7:ea:e2:01:78:89:d0:13:f6:fe:5d:
         a2:1d:20:7d:67:f3:2e:54:a5:1c:51:aa:f6:86:47:73:62:53:
         0b:50:53:a4:e2:f2:ac:fa:a6:03:7d:9c:59:f0:d8:94:d1:1a:
         98:1e:69:cd:78:02:d1:ab:3e:13:77:ed:3e:e7:19:11:1d:0c:
         75:94:7c:b9:9f:cc:44:0f:e9:40:7a:11:9d:f6:04:f7:2c:0e:
         da:9e:67:66:b9:94:67:ff:7d:04:f4:a8:c7:57:39:93:6f:99:
         a4:df:b9:4a:8a:4a:09:a7:0a:be:46:ec:17:bb:fb:82:40:44:
         cd:f4:ac:9c:8a:fc:0c:58:f8:1b:da:d7:9f:6e:72:be:a1:f2:
         a3:c2:35:a2:c4:3f:5a:4c:aa:46:e2:86:6a:b3:a5:46:ca:81:
         6b:b3:b7:b2:fd:1a:63:94:ac:c3:8b:44:9e:8c:a3:30:d6:73:
         ce:14:19:20:1f:ee:f5:21:ac:93:6c:0c:71:ec:fe:d2:37:01:
         b4:09:06:1c:39:41:bb:e6:70:90:48:32:fb:ec:4f:f5:4d:d6:
         19:41:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:48 2025 by rpki-client