Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft
File:                     1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json)
Hash identifier:          Ka8/P9+6VIjMoCU79pdKaqDpvWhqsr0hu55N8O43n0c=
Subject key identifier:   DB:2F:33:C4:BB:A4:C4:C7:EC:63:89:D0:B1:96:ED:19:37:3C:27:51
Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A
Certificate issuer:       /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A
Certificate serial:       6DEE5E0C82748CA6B8C434B480B8EB102AA9832E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft
Manifest number:          033C
Signing time:             Fri 28 Mar 2025 14:31:02 +0000
Manifest this update:     Fri 28 Mar 2025 14:26:02 +0000
Manifest next update:     Tue 01 Apr 2025 01:27:02 +0000
Files and hashes:         1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: GEdCbvoze7bDbJNRQnmnRSAQHPNT6i0uxONOvPSs1R4=)
                          2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: UVa2BFyeyFnWWwBGER708Zkc5wG3hgx7lEbyHJ9YtXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ee:5e:0c:82:74:8c:a6:b8:c4:34:b4:80:b8:eb:10:2a:a9:83:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A
        Validity
            Not Before: Mar 28 14:26:02 2025 GMT
            Not After : Apr  1 01:27:02 2025 GMT
        Subject: CN=DB2F33C4BBA4C4C7EC6389D0B196ED19373C2751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:30:95:b3:1c:29:77:41:97:15:a3:65:7d:
                    d8:cb:12:84:d9:a2:8e:e9:4a:d9:14:ea:5c:78:2d:
                    14:e2:71:37:79:7e:e4:42:f2:76:6f:97:c7:df:78:
                    03:61:22:3b:54:d2:8e:ce:89:b5:1f:77:8f:74:91:
                    ca:1b:f9:13:56:c6:c7:fe:ec:81:e8:8e:e1:e6:f7:
                    70:7e:02:91:48:4b:9c:da:76:f2:73:4f:35:50:76:
                    5d:96:78:96:88:85:e3:b4:33:e1:3a:96:b0:c2:ab:
                    5d:7f:28:85:a4:55:e7:b1:61:30:18:43:1b:9f:e4:
                    66:82:85:53:91:fc:5a:8a:9b:a1:2b:67:99:54:ff:
                    18:c1:6e:29:a5:b6:f4:06:5b:75:28:e3:7c:b8:07:
                    9e:f6:f0:af:61:2c:22:ab:fd:04:95:e6:57:37:1d:
                    ea:59:53:be:cc:1d:27:e6:d7:4f:43:a7:4a:1f:c1:
                    b2:20:8b:97:44:7d:ca:62:d5:0f:9d:b6:24:e1:c1:
                    59:da:93:5f:73:7e:cb:81:a5:f9:2d:b8:dd:54:8d:
                    9c:15:50:34:e4:a0:75:d4:0d:24:2a:ac:32:88:ac:
                    08:9b:89:18:1b:ae:40:57:d8:90:ad:42:58:ac:de:
                    cf:2a:21:59:53:f7:47:d6:60:b4:20:42:37:18:e2:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2F:33:C4:BB:A4:C4:C7:EC:63:89:D0:B1:96:ED:19:37:3C:27:51
            X509v3 Authority Key Identifier:
                keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:25:5c:57:77:30:0e:a3:3b:8b:d4:17:4d:ea:d2:d8:e5:
         b9:e1:cd:8c:e1:ae:c1:91:da:55:14:2f:39:23:cb:e7:e2:52:
         e5:e7:19:5b:32:58:81:f6:05:e1:32:08:bf:db:1b:fe:2b:1a:
         1c:12:27:1a:f2:dd:f9:59:59:7e:ba:47:69:88:d4:33:e6:be:
         63:d2:1e:c9:44:3f:82:e6:d3:e1:d5:d6:af:9e:15:b2:31:1c:
         35:aa:cd:e7:3d:f2:e9:5e:44:d9:73:c6:44:27:12:93:cc:86:
         a7:14:2c:f1:f3:92:9d:d2:fa:1e:5e:5b:45:8a:3d:24:44:9e:
         0d:b6:f0:69:a8:3d:62:df:88:27:40:d0:39:22:53:22:ea:0f:
         a3:8c:fc:65:6a:23:49:f9:51:bc:83:26:39:5b:95:6d:0a:68:
         e6:03:b5:cc:e6:e3:01:07:8b:8a:59:58:55:db:61:f7:6f:99:
         e3:43:f7:7a:33:82:ea:bb:47:08:82:58:b7:b2:d3:5f:59:75:
         c2:17:76:69:f1:01:ff:4a:b2:3d:a4:a6:4a:9b:74:1d:1b:63:
         5b:0e:d8:07:0d:85:b6:c1:25:1d:6c:b4:7b:cb:f7:9a:4d:33:
         d7:bb:9c:3e:d8:a9:97:c3:ee:72:71:d7:e3:84:93:2f:36:9c:
         38:a2:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:19 2025 by rpki-client