Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
File:                     2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json)
Hash identifier:          CD8maFfOcpC3IOIVheLZk3vkeL/FaPYjyZeHy5EDzlc=
Subject key identifier:   8B:3A:27:A3:24:EA:DE:68:20:73:E9:BC:35:D9:03:68:FC:6C:3D:64
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       1EC978709A0C8A59138E6A8BB741908988702061
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
Manifest number:          0166
Signing time:             Thu 30 Jan 2025 22:11:47 +0000
Manifest this update:     Thu 30 Jan 2025 22:06:47 +0000
Manifest next update:     Sun 02 Feb 2025 23:39:47 +0000
Files and hashes:         1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: hRQcie60KJSN2mE+8sSkcdMMroOhw4RwYbH+JF7lOuM=)
                          2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: EuZkuHIlSaj82xE0GWoz4GAtuFIhoF+l9vRSJspBJV0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c9:78:70:9a:0c:8a:59:13:8e:6a:8b:b7:41:90:89:88:70:20:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: Jan 30 22:06:47 2025 GMT
            Not After : Feb  2 23:39:47 2025 GMT
        Subject: CN=8B3A27A324EADE682073E9BC35D90368FC6C3D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:0d:e0:25:3b:64:6b:c1:5d:d2:df:c5:ed:
                    1b:c2:8c:7c:c0:d4:29:f7:9d:11:1e:54:78:d5:3f:
                    4e:39:53:5f:f4:e9:b6:c1:3a:6f:40:b6:30:53:2f:
                    c7:a6:c0:c9:5b:d5:b2:71:53:2a:1d:26:7e:50:e3:
                    ce:92:22:4f:16:05:7d:68:66:ef:1d:74:50:a4:cc:
                    56:e6:58:8e:a4:6d:ab:7e:6d:9f:52:c2:1f:84:c5:
                    e6:60:bc:23:1b:76:64:64:41:0b:fa:c4:8d:14:97:
                    0e:35:1d:48:4d:56:6b:50:5d:c7:6e:fe:22:17:ca:
                    d5:7e:d2:ba:04:8a:b8:6b:0b:a6:02:c0:31:1f:7b:
                    42:8e:71:c7:08:0c:eb:36:99:75:54:b9:01:9e:04:
                    94:4a:a3:eb:9e:59:ec:35:95:f0:54:fb:fb:02:e0:
                    e7:f4:a6:2f:8e:6e:35:4a:ed:d5:d4:c0:2a:b4:3c:
                    aa:a4:96:d8:b5:5c:e9:6b:64:e2:d6:a7:c5:41:47:
                    a0:aa:05:30:a6:90:9f:fb:e7:2d:b5:24:24:d0:e7:
                    2b:59:03:92:4f:bb:fa:77:0a:6c:3c:ba:8c:c3:8f:
                    cd:51:c4:60:11:1d:e8:22:aa:34:63:94:57:88:14:
                    f2:74:d2:5c:36:ad:32:34:05:17:d3:cc:93:12:ed:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3A:27:A3:24:EA:DE:68:20:73:E9:BC:35:D9:03:68:FC:6C:3D:64
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f2:00:1d:95:17:9a:af:f8:32:6b:b0:2c:55:e2:79:50:b6:
         d4:c4:12:86:48:47:72:f1:93:0d:4d:0a:c7:da:14:48:8f:d7:
         9b:66:6e:0e:ba:f0:56:b3:58:72:40:5c:de:aa:a3:77:24:82:
         dd:44:28:00:b9:e2:36:c1:f8:47:e8:6d:2b:89:78:46:2c:6d:
         ba:1d:48:e4:0c:6e:5a:22:e2:50:73:cf:2a:30:b7:89:9e:af:
         1d:f8:b8:04:d1:c9:1e:30:2b:9d:1f:92:82:ab:0d:0f:31:64:
         ab:be:97:11:9d:d7:6c:c2:e5:44:b2:9d:89:96:53:bd:55:36:
         2d:e5:2f:6b:13:f3:5d:8b:55:f3:5f:f0:06:1c:8c:94:50:36:
         b9:3d:ef:f8:a4:8c:1d:4d:be:dc:ce:81:45:7c:8f:9a:41:05:
         4f:b9:f7:ba:dc:98:82:77:29:7b:80:d8:ee:d7:e7:8c:ae:86:
         7d:cd:62:6c:68:63:61:65:42:38:20:68:c6:92:4a:29:cc:77:
         ef:1f:dc:6d:e7:3c:31:ea:09:f7:dd:7f:92:06:7b:e4:75:de:
         46:90:f9:1d:67:cc:46:2b:0f:e4:d0:2d:1e:7b:87:22:96:c0:
         47:96:80:8a:36:ec:27:30:e9:a9:d0:a2:ad:ce:48:7b:ae:6c:
         8e:b6:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:11 2025 by rpki-client