Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
File:                     9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json)
Hash identifier:          NRwsA5IZGCtBbn0BL7hoJFyq38ciNfjoTnKnC0JOdeA=
Subject key identifier:   85:E5:12:57:AA:65:62:73:86:17:F6:BB:E6:E4:83:03:A1:15:9B:CB
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       0422C5B225D214277F1E1FE8428C5B69739613C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
Manifest number:          D1
Signing time:             Thu 30 Jan 2025 09:11:23 +0000
Manifest this update:     Thu 30 Jan 2025 09:06:23 +0000
Manifest next update:     Sun 02 Feb 2025 16:54:23 +0000
Files and hashes:         1: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: pe62LiojXyM7gYicjmgnqk2m0Gdqr7TylPQuh7SdFnU=)
                          2: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: Clrc3mInhK9Wm/m30p1/GaBgIlI7XYbockGQ+SJxrjA=)
                          3: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: 7vbMiozb3uHTPyIGLruw8yBs7XhAiHnr0tqrwOMZY8w=)
                          4: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: aKEsgE6H2Q6MjQcVkyp/z8tGgi8bnF/5scXJTaxQ5O4=)
                          5: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: 3xpIJX5oINXJUPuBkhUbqHuDByu9ZULCKQ7tzsRwqDk=)
                          6: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: NbBYk657nhFcWyfIb4SK1Hr5N01903qmNQrNmHuRDKc=)
                          7: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 7c1sfMcrfO93nFfMchi4QHV2HKxCNeAUSMnzGqAyt9Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:c5:b2:25:d2:14:27:7f:1e:1f:e8:42:8c:5b:69:73:96:13:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Jan 30 09:06:23 2025 GMT
            Not After : Feb  2 16:54:23 2025 GMT
        Subject: CN=85E51257AA6562738617F6BBE6E48303A1159BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:2a:2b:fc:4e:ba:32:d3:06:6c:9d:c3:44:
                    44:d0:12:c2:19:36:79:46:b6:d4:95:46:61:d5:9b:
                    8d:af:23:6c:5b:99:8d:a2:a0:f0:5f:40:4b:7e:71:
                    d5:3f:f2:c8:a0:28:8e:b2:9a:12:84:e9:9d:e4:45:
                    54:ad:9a:b8:cd:32:78:f0:6a:2e:61:3d:5e:a9:dc:
                    eb:17:9e:33:54:64:a0:63:79:16:0f:71:5b:79:82:
                    48:99:fa:b4:d7:a5:ac:c9:ce:37:44:85:3e:f5:a1:
                    be:a1:11:7c:06:9c:29:c4:1a:30:d2:52:be:0c:6a:
                    59:80:72:54:4c:9c:83:f9:8e:19:20:28:ec:24:1a:
                    dd:93:1b:4c:24:12:dd:3c:56:55:b7:1b:b8:ae:e2:
                    48:79:f5:46:36:15:47:ca:aa:47:27:53:55:bf:40:
                    6a:49:a0:b0:45:3c:52:29:43:2f:3b:1f:b8:4a:dd:
                    28:2f:ed:9b:67:b6:56:55:c4:05:47:b2:7f:bb:24:
                    82:d8:b8:ff:e3:07:63:c2:c1:8c:6e:48:7f:23:58:
                    c7:0b:ca:7d:66:db:a9:a0:54:29:a3:88:28:77:03:
                    8f:ad:89:cc:7a:6b:c3:5c:a6:15:22:74:66:9e:9b:
                    60:69:92:8c:5a:6e:03:8e:75:3b:50:eb:b0:5f:e9:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E5:12:57:AA:65:62:73:86:17:F6:BB:E6:E4:83:03:A1:15:9B:CB
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:6c:d3:d5:3a:4a:2f:c2:cb:97:65:92:f4:56:0f:a3:32:
         9c:ef:c5:f2:b0:3d:9b:57:e9:9e:a5:51:c9:cf:04:c8:b1:a1:
         5d:8e:6e:e1:63:c8:28:dc:62:b0:8b:b3:15:84:59:a6:39:36:
         c9:9b:6b:52:cc:66:47:28:36:1c:10:92:fe:e0:96:eb:52:db:
         a7:c8:ea:4b:3c:64:0d:36:56:56:2b:a4:42:63:d3:28:a3:6f:
         d7:3b:13:79:f9:2e:3a:6e:c5:ad:c7:d6:eb:87:03:bc:9b:c9:
         34:a1:9c:5b:3b:f7:ef:f0:66:cd:88:d6:1f:e8:5e:39:f3:e7:
         b8:b2:e3:99:c7:39:1e:8d:07:94:29:fc:29:17:ee:cb:71:e5:
         11:2d:b3:c5:3f:eb:51:89:64:69:65:3d:f7:f2:f5:5b:a7:23:
         c1:89:89:95:ea:a3:fe:e3:ce:7b:65:78:0f:9b:63:4b:eb:2d:
         e5:1e:37:be:c0:f2:98:48:5e:e4:a8:ad:cd:6f:8a:de:34:01:
         18:66:7b:ef:f5:ee:ff:a2:c7:74:a7:75:19:d5:47:29:81:fa:
         af:36:8c:46:dd:6e:32:33:c8:fa:97:80:30:38:14:a8:a4:56:
         5e:46:90:4e:f5:89:15:40:ed:92:14:8e:6d:72:ad:2a:91:98:
         37:35:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:28 2025 by rpki-client