Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
File:                     5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json)
Hash identifier:          0eZ9d1FyQL5JpNgzzI88TqxbwxiJs7LQwPFSHu8KBug=
Subject key identifier:   74:98:F6:68:93:4D:16:87:FE:30:62:73:51:5B:0F:A7:4E:82:C7:7F
Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
Certificate issuer:       /CN=5EC928AFD73AFC70F10C468E21482031920DF521
Certificate serial:       42545A5D7F7D15D49DBA0A727FD25273B2CC3668
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
Manifest number:          B9
Signing time:             Thu 30 Jan 2025 21:00:36 +0000
Manifest this update:     Thu 30 Jan 2025 20:55:36 +0000
Manifest next update:     Mon 03 Feb 2025 03:50:36 +0000
Files and hashes:         1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=)
                          2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=)
                          3: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=)
                          4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: f/+yvw0qv/uRbJfcQHbRGOLaCbT1cImI1ZOldCLMxLk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:54:5a:5d:7f:7d:15:d4:9d:ba:0a:72:7f:d2:52:73:b2:cc:36:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521
        Validity
            Not Before: Jan 30 20:55:36 2025 GMT
            Not After : Feb  3 03:50:36 2025 GMT
        Subject: CN=7498F668934D1687FE306273515B0FA74E82C77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:29:34:0a:53:eb:bd:26:ac:ed:71:6b:f8:
                    bb:c1:15:0a:9b:16:66:e0:67:c8:9a:65:fa:d2:1a:
                    d9:56:c8:08:4f:e7:52:d1:ff:1e:f3:0d:ff:83:ce:
                    f8:cb:e3:a9:40:43:7e:e5:0e:9a:b6:6f:86:c4:28:
                    a0:fa:d7:10:f4:ba:e2:c9:26:7e:73:85:c6:25:af:
                    86:78:ea:73:6a:e4:24:3c:f5:47:93:e9:ea:a5:37:
                    c8:97:72:1b:a4:e9:d0:04:0c:cc:09:99:90:be:c6:
                    34:b9:c7:8c:66:42:7f:38:84:a4:cf:92:4b:5e:f3:
                    79:c8:10:68:51:29:fa:f0:51:57:ae:0c:12:cd:39:
                    bc:f8:22:60:b4:bf:09:99:2a:3f:c8:87:c9:4f:a4:
                    ba:78:54:9e:b1:d5:15:48:25:fe:77:b2:6b:54:5e:
                    d1:2d:af:42:7c:73:a7:7d:be:85:ea:11:44:1e:d8:
                    f6:d9:f2:10:41:ff:5e:4a:52:76:f0:e6:36:5a:7c:
                    e1:2a:2b:9f:56:3b:e1:4e:3a:80:7a:46:45:37:e3:
                    c1:43:8f:8b:21:d1:2b:72:fe:aa:80:4d:aa:27:44:
                    58:d8:78:90:1c:00:be:7a:6d:c6:95:6d:73:42:0a:
                    d5:20:bb:b5:bd:4b:20:a7:26:83:50:5d:ae:f4:69:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:F6:68:93:4D:16:87:FE:30:62:73:51:5B:0F:A7:4E:82:C7:7F
            X509v3 Authority Key Identifier:
                keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:51:18:6a:51:b3:d8:a6:67:03:9d:74:a4:98:9f:bc:ab:
         56:a9:30:fe:83:38:3b:44:25:7f:5e:8c:43:54:17:4d:4b:35:
         bc:2a:b9:43:bc:e6:3d:3a:25:24:81:8b:6a:6d:c2:d2:bb:1d:
         a6:14:36:dd:08:3a:49:a6:b1:27:44:52:a2:14:27:68:8c:d3:
         94:4b:90:09:28:33:32:46:1d:0a:36:af:1c:3c:e1:80:8b:1d:
         fe:b9:58:c9:cc:56:3d:2f:25:df:60:01:e6:a2:bc:6d:da:07:
         fa:69:6b:7d:f5:4e:c9:09:fc:8c:c3:c0:e8:20:be:f5:3c:5e:
         cd:a2:cb:d7:6a:cf:3e:25:d5:40:74:65:13:e6:31:3e:1b:76:
         d2:45:db:15:49:d2:28:66:1d:a9:d9:7b:47:1f:97:1d:7f:85:
         33:97:95:fb:3b:50:e4:3f:1d:6e:a4:c8:b4:b8:1c:ea:cc:07:
         2f:05:61:60:76:f6:13:b2:61:a9:a8:68:65:79:dc:07:53:e4:
         ad:6c:81:9e:49:11:de:2e:a2:16:40:be:2b:d9:21:c7:43:cc:
         09:3a:a3:66:19:84:89:74:b2:fe:15:41:47:00:14:f0:e4:88:
         5f:ed:53:97:d0:e4:34:e9:58:0b:73:2a:81:6a:a6:08:09:3c:
         ba:f4:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:46 2025 by rpki-client