Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft
File:                     19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json)
Hash identifier:          EH+Tq1S71GkaCpoaP7MMFK4GYjUtywPQqVOuzBYOFuU=
Subject key identifier:   96:05:D4:9A:26:24:42:74:9F:6E:DF:71:AD:BC:B8:F5:7E:38:EE:F7
Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A
Certificate issuer:       /CN=19960F4C3FEEC60D5A59281148061FB21094449A
Certificate serial:       21370816EA9D849D9FD214F5A414840A14F090EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft
Manifest number:          017B
Signing time:             Fri 31 Jan 2025 02:31:38 +0000
Manifest this update:     Fri 31 Jan 2025 02:26:38 +0000
Manifest next update:     Mon 03 Feb 2025 04:41:38 +0000
Files and hashes:         1: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: sUjJArZ4zgj0HTRcqK8GlqoE/oO8CJ9eWCfCBKMyM4Q=)
                          2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: tcjkZKrAqQ9yYmgw2ICh6qsTS+FTZ8ZlcH4lGdwpZyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:08:16:ea:9d:84:9d:9f:d2:14:f5:a4:14:84:0a:14:f0:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A
        Validity
            Not Before: Jan 31 02:26:38 2025 GMT
            Not After : Feb  3 04:41:38 2025 GMT
        Subject: CN=9605D49A262442749F6EDF71ADBCB8F57E38EEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:b6:0b:60:33:12:80:66:41:98:26:96:68:
                    78:2b:3c:cf:7f:cf:81:10:de:a0:20:86:33:20:2d:
                    8c:83:b9:05:a2:6e:2b:9e:d3:4d:99:0c:6f:da:1b:
                    c9:88:51:75:ed:07:04:b3:49:64:e4:c0:cc:48:21:
                    9a:58:76:82:07:10:8e:c0:5b:9c:d5:b5:50:d3:5b:
                    ce:2d:b5:7f:f4:f7:16:8c:ae:18:3b:d0:95:13:72:
                    d8:05:3d:e1:c2:b5:da:69:1d:49:cf:0b:e7:29:f6:
                    9f:3e:b2:59:cb:38:e0:88:21:81:af:08:9d:2c:5d:
                    24:44:9d:98:23:65:dc:c6:8e:66:bd:18:d1:f7:c6:
                    59:21:ab:89:ee:fb:72:6c:77:5f:34:64:a5:45:0a:
                    e1:54:52:f4:8c:99:61:e2:07:2a:28:86:04:84:f8:
                    01:8c:29:9d:94:18:99:95:fd:50:0b:64:81:0b:d8:
                    bb:9a:02:16:4f:cd:6c:aa:e5:d5:fa:86:1f:7e:aa:
                    78:25:c8:89:c3:ce:69:a4:15:5c:05:f2:fe:d9:67:
                    65:31:60:8e:18:96:30:34:46:c6:6d:76:df:5e:83:
                    0a:af:59:ca:ac:40:28:f4:6e:3b:3a:21:5e:d5:d7:
                    03:ef:36:46:66:a6:e6:35:d4:9e:90:b8:69:f8:a9:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:D4:9A:26:24:42:74:9F:6E:DF:71:AD:BC:B8:F5:7E:38:EE:F7
            X509v3 Authority Key Identifier:
                keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:d5:80:05:ff:44:f9:29:c5:4d:e1:02:e1:12:05:f6:91:
         cc:94:2f:fc:eb:59:a5:7d:6d:63:6b:10:39:b9:ea:cf:35:c7:
         2f:a1:90:d2:8c:e4:2d:7c:d9:0c:d5:95:15:bb:22:92:75:4d:
         c3:14:07:96:df:bf:41:d9:91:09:02:63:25:39:d1:34:00:82:
         88:67:aa:8f:37:74:76:90:58:56:3a:5b:02:8b:af:57:4c:81:
         3b:4c:fa:16:a8:f5:42:fa:db:6a:b8:ec:ca:1d:b9:a4:f0:ea:
         5d:61:6a:c8:f8:0a:c7:19:a8:a5:0c:07:49:70:85:85:68:c3:
         e8:16:f7:01:9d:6d:a2:e3:e4:35:ec:ea:af:69:0c:64:40:20:
         ff:0f:49:77:27:d6:b4:0e:98:d9:4e:fd:16:6c:d0:a2:4c:11:
         62:26:5d:47:e8:72:cb:38:62:b0:63:bf:1f:21:7d:c0:9b:0a:
         f6:c5:9b:72:ec:bf:06:52:32:4c:02:6a:0e:b8:da:09:d4:dc:
         25:65:89:b3:b5:c4:19:5e:b7:1d:63:3d:fc:05:52:34:73:28:
         4e:09:b2:0d:04:86:50:f9:92:99:50:fb:72:23:ac:87:b0:3c:
         fd:6e:25:06:d5:5a:02:f2:ed:45:93:a5:50:a3:1c:a5:59:3c:
         1e:29:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:04 2025 by rpki-client