Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
File:                     B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json)
Hash identifier:          Sbnn6lnz4b56eeSc82kxQT1H44Ue8WSL3tr2HKCArLM=
Subject key identifier:   C6:AC:92:71:39:45:D7:51:FC:96:74:F3:C2:71:C7:31:32:23:B7:88
Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
Certificate issuer:       /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Certificate serial:       2F6D20F4FE7E9B302FA2D77CA92E34B532560D09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
Manifest number:          0104
Signing time:             Fri 31 Jan 2025 18:42:04 +0000
Manifest this update:     Fri 31 Jan 2025 18:37:04 +0000
Manifest next update:     Mon 03 Feb 2025 22:36:04 +0000
Files and hashes:         1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: Ijuzu+TBiJBgMamj2QqEsIgAYyu4QBgZE1MuTHTMRCE=)
                          2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: 3F/Ls2qhXUa4S9cBXHSt6kG6S2ZgzGR5S48Dst3/z70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:20:f4:fe:7e:9b:30:2f:a2:d7:7c:a9:2e:34:b5:32:56:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
        Validity
            Not Before: Jan 31 18:37:04 2025 GMT
            Not After : Feb  3 22:36:04 2025 GMT
        Subject: CN=C6AC92713945D751FC9674F3C271C7313223B788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:8b:b3:67:d7:2c:a5:10:7f:1b:90:2c:0f:
                    eb:f0:cf:96:52:f6:3d:0d:04:c9:fc:f4:f7:3f:3a:
                    17:bd:68:7d:9a:c2:51:65:3a:c7:f0:ce:90:08:65:
                    c9:77:ec:2d:3e:19:50:3b:c6:f1:37:ef:4e:2e:2e:
                    2f:5a:d8:1f:46:f7:f7:05:13:26:5a:63:c1:1e:17:
                    ba:82:41:5e:97:16:cb:4d:98:dc:bc:25:8e:46:15:
                    47:d0:e4:4e:a3:93:3a:92:92:12:77:70:64:c2:64:
                    62:37:f1:96:6d:f0:30:70:73:24:c3:48:b5:33:5d:
                    37:2a:d6:e2:a1:af:83:e1:40:f6:36:33:be:50:62:
                    ab:ff:7a:c5:9f:bb:12:08:4d:49:11:ae:ec:f2:58:
                    4f:82:91:72:b1:df:d1:1d:0b:f7:18:5f:8a:b2:de:
                    b6:cf:4d:63:59:4f:98:cb:a3:9c:d0:91:82:23:40:
                    c5:b7:8a:9b:67:6b:a5:e4:86:56:0a:66:32:aa:b1:
                    08:72:33:7c:23:8a:98:67:03:50:8a:d5:d7:af:ac:
                    f0:d5:61:c3:e9:59:27:f0:54:92:cf:26:f4:4d:36:
                    9a:63:db:0d:49:76:9b:89:16:f0:32:27:7d:00:23:
                    77:43:af:3a:66:cc:8f:29:a7:aa:96:8c:1e:5c:c8:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:92:71:39:45:D7:51:FC:96:74:F3:C2:71:C7:31:32:23:B7:88
            X509v3 Authority Key Identifier:
                keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:90:10:04:fa:90:35:1e:71:80:2d:e2:49:ce:71:95:24:
         31:06:99:b6:2e:ac:6a:ca:17:37:a9:3f:e2:8a:10:35:4c:13:
         ca:83:71:75:9b:78:8c:69:1d:f1:21:8c:db:63:c8:64:fa:10:
         05:8f:1e:80:4f:ab:44:6e:33:8a:ba:78:6d:f0:4c:68:71:79:
         63:d1:7a:22:1a:8f:7b:5d:c3:e8:5e:ad:19:93:60:a0:e0:45:
         75:e4:e5:b0:02:01:22:52:a9:df:e9:94:b7:c6:36:d5:32:2d:
         33:47:f3:09:77:2e:9d:42:28:f0:10:1a:0c:a1:54:e7:15:bd:
         38:23:74:7d:f2:36:f9:13:96:7e:3c:69:5a:5c:d3:68:15:71:
         4b:22:7e:e0:e6:94:41:76:5e:1d:ab:3f:9a:53:44:32:1e:6b:
         08:27:3f:ea:16:38:4c:7c:04:04:36:e1:47:c0:53:19:ce:d0:
         c5:f5:6a:7b:5c:fd:35:e0:ae:9d:f7:b5:31:7b:12:c2:2c:08:
         ae:b1:09:73:75:bf:6c:09:cf:bf:17:7f:8b:68:d9:a4:e9:89:
         30:5d:78:24:11:89:51:5e:9b:a1:c9:9e:66:45:0c:04:dc:0b:
         2f:44:aa:28:de:b1:a3:31:0a:d8:ce:8e:55:ed:0d:55:f1:41:
         84:8c:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:46 2025 by rpki-client