Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File:                     DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier:          DqpohPzV22ZRbTYD2deS7HD09ZzVWSkIos28zBHwsq0=
Subject key identifier:   65:F3:BE:7C:77:61:1E:E7:5D:A8:AE:20:C0:17:1A:52:B2:E5:B1:A2
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       5C3B50ED51C859F36164558C75368E45FA7471F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number:          BA
Signing time:             Wed 29 Jan 2025 21:31:41 +0000
Manifest this update:     Wed 29 Jan 2025 21:26:41 +0000
Manifest next update:     Sun 02 Feb 2025 05:50:41 +0000
Files and hashes:         1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: D76Tuknqw2sCMj+MoDL+qqxexPCIzlekQxqU0xgbwkM=)
                          2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:50:ed:51:c8:59:f3:61:64:55:8c:75:36:8e:45:fa:74:71:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Jan 29 21:26:41 2025 GMT
            Not After : Feb  2 05:50:41 2025 GMT
        Subject: CN=65F3BE7C77611EE75DA8AE20C0171A52B2E5B1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:61:b0:df:10:4b:90:1f:6e:78:d1:d5:cf:
                    f4:df:74:3f:a5:0a:4a:49:bb:c5:9d:9d:ca:ec:cb:
                    e7:6b:0b:90:52:d3:ad:36:32:cf:97:f3:5e:7b:f9:
                    ae:00:4b:27:4a:c6:3d:ae:0d:74:e0:78:b0:85:97:
                    60:05:6d:98:46:bd:17:09:ce:f8:d9:2c:df:1e:c1:
                    56:25:49:5c:86:09:62:ab:0a:40:c2:ad:ef:cc:3a:
                    54:3e:39:96:f0:37:7a:95:33:86:bb:73:70:e5:30:
                    6d:0f:be:ba:7e:ae:84:eb:b1:18:e2:83:b2:54:f3:
                    19:ee:84:1c:e8:7e:64:dd:4e:49:9b:db:09:84:7b:
                    43:db:4a:73:4c:7d:1d:51:03:4e:d0:80:2f:d1:fe:
                    63:91:06:c1:90:d4:0e:f2:52:cf:33:7d:9f:fc:29:
                    0c:65:aa:27:1d:f5:f1:65:54:7f:67:f4:dc:49:14:
                    9c:64:c1:5d:8e:97:47:f9:f0:2e:73:04:5f:50:4a:
                    96:b6:ef:25:5f:be:09:93:74:8a:72:68:1f:58:9f:
                    a5:d8:7d:7b:12:9b:52:5a:b6:97:7d:cf:8f:03:9d:
                    f8:dd:2a:f8:7b:67:95:0e:56:fc:16:78:4e:33:ec:
                    a2:f4:f0:37:0c:35:a3:9c:e6:0f:0a:ca:fb:f7:6e:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:BE:7C:77:61:1E:E7:5D:A8:AE:20:C0:17:1A:52:B2:E5:B1:A2
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:44:61:e7:94:c9:71:88:7d:19:6d:6f:16:d5:8f:1e:4c:06:
         51:7f:7c:17:d2:29:bb:f8:e7:bb:d9:84:86:cc:00:bb:b6:91:
         5c:e7:0c:3f:51:40:d1:41:c3:c1:23:61:f9:13:af:a6:54:79:
         d9:6c:14:28:66:e3:3c:a8:cc:60:73:6d:b3:34:7b:09:77:53:
         76:7f:de:2f:56:1a:58:dc:01:74:b4:20:1c:ae:b4:18:f2:5c:
         9f:6d:77:8c:ee:7f:0f:b8:96:a8:a6:8d:b7:2d:c1:bd:db:90:
         6e:68:f5:d6:75:af:08:e6:8d:b8:3c:26:06:85:e6:a5:87:1d:
         cf:4a:f0:be:48:d5:8e:62:84:98:04:f1:ee:59:e0:82:64:0f:
         bb:d9:46:9a:94:b2:22:64:40:41:3a:e7:9b:e9:60:3e:0b:6b:
         b7:2a:38:06:33:c5:76:f3:ef:06:b8:93:43:75:c3:17:7f:73:
         43:1c:0f:59:bd:19:f1:61:1b:fe:bc:45:f9:5c:28:0f:ce:31:
         ac:11:34:bc:16:da:16:d4:b1:42:bf:c5:82:89:7a:7f:ff:05:
         c9:07:9a:59:86:88:7e:49:36:2e:da:78:8e:22:34:0a:1b:33:
         fa:1a:a0:28:a2:09:e2:65:2a:14:ad:cc:d2:58:c1:ce:b3:d9:
         88:e6:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:35 2025 by rpki-client