Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
File:                     D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json)
Hash identifier:          wGkca5bwPMdACTt9rKZi3rq1VSAhMcvdXqYPABkjEXc=
Subject key identifier:   41:FA:71:8C:03:F9:0E:75:65:56:31:20:8F:CA:01:FF:1C:22:C7:82
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Certificate issuer:       /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial:       3DCC1FF5DCD23CD879164553FC458ADB7664D712
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
Manifest number:          01D8
Signing time:             Fri 31 Jan 2025 08:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 07:55:34 +0000
Manifest next update:     Mon 03 Feb 2025 15:47:34 +0000
Files and hashes:         1: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: mM9Mp3qdiTE3IUfaxzFCgLOJ49dHx/DcYiQXrHcL7wk=)
                          2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: LRfKEzMH/w6k9V3Mcfwz+2kHLqQU6SseIbdiPWokFF4=)
                          3: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: 0r2DXHLTRqJ3dFJ53Ux965JGSnIPU/UxvjrAllCGijA=)
                          4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cc:1f:f5:dc:d2:3c:d8:79:16:45:53:fc:45:8a:db:76:64:d7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
        Validity
            Not Before: Jan 31 07:55:34 2025 GMT
            Not After : Feb  3 15:47:34 2025 GMT
        Subject: CN=41FA718C03F90E75655631208FCA01FF1C22C782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:bb:99:4c:57:1c:b5:d5:6a:25:c9:72:d0:
                    4c:e3:0d:a3:61:d1:15:61:1d:06:22:03:34:ab:44:
                    43:dc:d5:49:ed:2d:e9:bf:cc:8c:a7:6e:c5:77:6f:
                    7f:cf:9d:73:e5:54:19:c9:90:8c:29:27:e5:a1:5a:
                    a3:2f:fa:20:83:99:9f:0e:6a:d6:64:f1:27:ee:ac:
                    7e:f6:81:4f:dc:bb:95:31:70:11:0d:6c:9b:43:ed:
                    e5:7e:b6:ab:cc:21:ef:7c:77:65:0c:1d:0f:be:a6:
                    2a:72:d0:bf:f1:0a:21:f9:d1:70:fb:62:3b:d1:8b:
                    18:9a:27:a3:ee:12:66:d8:fd:ac:dd:d6:a3:d2:e6:
                    2b:cd:b3:4b:a3:c2:79:c1:b5:99:b6:1e:18:4a:f4:
                    9b:29:18:d8:ae:c4:47:da:58:d2:40:b0:f5:96:98:
                    ca:9a:bb:a1:b6:84:43:43:fa:16:07:ca:1d:ed:20:
                    96:4a:73:db:85:66:10:f5:40:52:ee:20:c2:92:b6:
                    ba:b6:79:b0:6a:31:8b:1f:46:66:a3:0a:a3:5c:10:
                    39:7f:7f:d0:4d:a9:05:62:cd:dd:79:9d:11:59:ac:
                    b8:df:e2:b7:66:78:38:bf:d5:cb:87:b4:d6:2b:39:
                    c0:69:65:a5:52:1d:d5:f5:ec:28:0a:65:e0:42:82:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:71:8C:03:F9:0E:75:65:56:31:20:8F:CA:01:FF:1C:22:C7:82
            X509v3 Authority Key Identifier:
                keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:7a:10:a2:20:e1:4f:ea:f0:e7:f2:0c:4a:ef:51:72:cc:
         cd:e4:f9:1a:c5:92:c5:62:88:3e:21:b9:3e:c9:1e:af:0e:41:
         e3:de:fb:28:b2:b5:a8:28:fa:24:63:26:67:59:c1:9f:39:03:
         47:12:7c:cb:b0:2c:89:88:7d:59:12:c7:21:b8:3a:3c:f8:59:
         da:da:13:ed:d2:d4:b6:50:78:c7:57:6b:bd:5f:4a:03:29:1e:
         ca:1c:9f:04:9e:72:39:dc:8f:85:c2:c2:5d:6b:a5:fb:28:43:
         4f:3c:d5:24:e5:86:ee:84:e5:79:8f:e8:b9:3c:1e:9b:f6:73:
         d5:89:6f:81:56:70:cf:06:cf:95:87:75:67:0a:4a:8a:39:50:
         1e:89:a5:88:ca:5c:b6:89:39:1f:19:09:f5:76:ce:c6:aa:3f:
         cf:2f:8d:ce:ae:7f:5a:99:d3:d8:4b:cf:b0:36:e5:ba:d9:ab:
         56:b2:97:22:27:91:2e:04:f6:01:3f:2e:a5:37:d6:fa:04:33:
         ad:34:05:aa:ab:09:68:78:14:b9:d0:82:95:27:1d:e7:22:b2:
         63:25:80:dc:97:71:a9:23:e7:94:bf:77:fa:be:3c:6f:f2:ef:
         cb:40:64:a4:4a:96:88:6d:83:41:49:9f:12:af:f1:00:57:6d:
         b9:c1:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:39 2025 by rpki-client