Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
File:                     199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json)
Hash identifier:          u2gi+HZ5eTTaJYqFpCUaidwJjNcdyesw1DjvBBGqwR8=
Subject key identifier:   9D:48:A0:D6:74:E6:DF:3C:24:9C:B9:6F:AF:C0:84:7D:8A:10:68:9E
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Certificate issuer:       /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial:       0DE3CD1A6A8493D2F25858A3DF2F17EB48027727
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
Manifest number:          01A7
Signing time:             Thu 30 Jan 2025 03:10:37 +0000
Manifest this update:     Thu 30 Jan 2025 03:05:37 +0000
Manifest next update:     Sun 02 Feb 2025 12:02:37 +0000
Files and hashes:         1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=)
                          2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: viT+4ABYpJQqWiZV9v0mwZjpvGQox1+9GhW9qda3brU=)
                          3: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Z9jqS/MlHQNDz3+c7nvwuggXOFxbjd7WNaFGduuQIn0=)
                          4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e3:cd:1a:6a:84:93:d2:f2:58:58:a3:df:2f:17:eb:48:02:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
        Validity
            Not Before: Jan 30 03:05:37 2025 GMT
            Not After : Feb  2 12:02:37 2025 GMT
        Subject: CN=9D48A0D674E6DF3C249CB96FAFC0847D8A10689E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:38:e0:ea:7b:aa:52:83:4b:2f:0f:d4:98:
                    b6:a7:68:22:e4:f1:ec:70:6e:66:d3:91:eb:4c:43:
                    13:e8:f3:13:69:8a:a2:9a:92:d2:a6:f3:72:c6:b4:
                    e8:08:25:c8:3b:7a:61:f7:2e:47:2e:40:df:9e:97:
                    f2:4c:24:b7:23:3b:be:37:38:df:e7:0a:47:04:60:
                    ad:c8:1d:97:78:de:61:bc:41:59:94:51:ee:23:ea:
                    50:83:f9:66:39:50:fa:c4:1a:4f:f6:6d:e1:41:3d:
                    d9:d3:e2:f6:5c:6d:ab:b6:4d:17:b8:9b:c3:96:50:
                    60:84:37:bd:a8:30:a6:f8:3e:4c:cd:2e:df:17:b3:
                    e6:e4:14:d9:28:ba:d0:52:be:88:26:11:9e:28:41:
                    2d:82:f0:ed:9e:29:f0:61:e5:46:89:5e:8d:95:45:
                    19:c4:36:6b:20:56:fb:d5:54:20:df:55:41:52:b6:
                    1a:96:95:01:ad:40:f9:8a:8c:e6:44:01:5d:4a:38:
                    67:dc:fc:f5:a1:7d:ec:c5:86:07:60:c2:97:b5:0f:
                    22:a0:b5:98:92:9b:a1:00:38:2c:1f:50:84:27:7d:
                    a5:06:71:60:85:a5:dd:ac:c6:34:e4:c2:af:44:78:
                    5d:6e:e6:80:5c:ff:8a:71:6b:05:5e:3c:f9:58:2e:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:A0:D6:74:E6:DF:3C:24:9C:B9:6F:AF:C0:84:7D:8A:10:68:9E
            X509v3 Authority Key Identifier:
                keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:19:14:6c:57:d4:c5:f3:5e:68:0e:5b:b3:cd:a8:a0:bc:87:
         47:45:b6:c3:6c:c9:6b:65:d1:dd:fe:ac:46:28:eb:7d:8a:3c:
         6d:1d:e8:17:ab:94:e5:03:48:86:57:55:84:d6:7f:0b:07:ac:
         f6:9e:93:c5:46:f3:92:78:37:79:f2:9c:05:14:0c:da:76:12:
         25:63:da:86:58:17:93:e3:c2:e8:ab:a3:2a:59:9a:d3:ee:cd:
         d2:e5:a9:df:cb:ec:fc:fb:f3:84:7d:44:ac:54:68:f5:6b:98:
         9e:09:fc:95:7f:cd:38:6d:61:2a:af:1a:bc:d7:ff:c7:3c:6f:
         61:1f:15:6e:ab:99:a6:23:20:b6:1e:54:bc:17:a8:7b:00:90:
         f0:7a:87:92:b4:da:4e:da:14:78:d6:dd:68:b2:50:d5:00:7c:
         50:34:ab:53:09:8b:c9:b6:ef:9e:f3:ee:cd:94:c1:5f:23:e5:
         0d:8e:94:d6:23:b4:7a:ee:26:fb:db:84:0c:1d:b0:78:d3:4f:
         13:17:96:46:7c:43:1b:c5:a3:52:d0:b8:cc:70:55:5f:73:b1:
         c1:68:28:27:f7:33:00:30:bc:c5:99:d6:74:09:77:ae:6a:44:
         36:01:87:c6:75:4e:0d:1b:8a:98:5e:64:8e:37:9e:e2:23:9e:
         aa:ba:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:38:16 2025 by rpki-client