Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
File:                     12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json)
Hash identifier:          6q8MwAvgK1c4HR4UOoL2olbV3WKDZf1lxfMXhzPkIBE=
Subject key identifier:   D8:FE:9D:70:34:1E:31:73:D5:99:B7:F2:21:69:65:C4:D6:88:31:55
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Certificate issuer:       /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial:       47991782578200064193554D09E3AA0BED5639DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
Manifest number:          A5
Signing time:             Thu 27 Mar 2025 21:31:47 +0000
Manifest this update:     Thu 27 Mar 2025 21:26:47 +0000
Manifest next update:     Mon 31 Mar 2025 04:53:47 +0000
Files and hashes:         1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=)
                          2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: pyURNAT3nGoEZbQy7ZOc2I5Cinz27MMTTV2knzI8tsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:99:17:82:57:82:00:06:41:93:55:4d:09:e3:aa:0b:ed:56:39:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
        Validity
            Not Before: Mar 27 21:26:47 2025 GMT
            Not After : Mar 31 04:53:47 2025 GMT
        Subject: CN=D8FE9D70341E3173D599B7F2216965C4D6883155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:3c:d0:06:79:90:6b:29:4c:95:15:e2:ee:
                    f1:8b:81:3c:d1:31:da:5d:cc:7d:1e:01:ae:0c:12:
                    dc:87:98:28:08:d3:fc:ed:c2:7e:47:4e:05:79:e9:
                    ce:df:07:f5:c7:d1:30:ee:74:14:aa:d2:82:85:a1:
                    c0:cd:1d:fd:d8:53:e9:05:1b:63:9d:c1:00:4f:d0:
                    02:0f:fe:83:4a:57:5f:97:a4:a5:f8:cd:4d:fd:16:
                    59:b6:59:b8:eb:5a:73:72:8f:06:52:2b:77:ad:c7:
                    33:9e:27:90:68:31:33:c2:a4:e5:c8:bf:5a:8f:f8:
                    0b:52:c8:80:df:de:22:66:68:8c:2b:e8:b1:77:09:
                    6c:23:1e:54:36:10:b2:d6:9a:b7:e6:01:50:2a:d3:
                    c2:c4:94:8d:7d:cc:72:6a:e1:50:f5:22:a7:7d:fc:
                    ca:12:46:ea:33:a7:5c:14:0b:6c:59:f8:c4:48:5a:
                    50:35:e7:82:65:c5:af:5a:7f:11:74:11:77:1f:45:
                    b1:03:0a:f2:f6:1e:89:44:1d:fe:ec:ad:d4:5f:68:
                    07:ad:d6:03:19:dc:b6:ab:d9:74:0a:88:13:ca:ac:
                    57:e7:11:f9:02:46:f2:79:50:6f:c8:b1:8f:79:9f:
                    76:9f:96:ba:0a:9a:27:7a:63:fc:ab:fa:e1:9b:19:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:9D:70:34:1E:31:73:D5:99:B7:F2:21:69:65:C4:D6:88:31:55
            X509v3 Authority Key Identifier:
                keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:07:15:78:ef:69:53:15:9d:96:8c:f2:ef:92:e3:ac:91:
         67:d9:28:03:84:62:70:75:d6:fe:55:53:29:15:ff:6c:80:a2:
         7e:de:f6:8d:30:05:5c:9f:0f:bb:26:1f:d8:28:03:9a:67:2c:
         3a:30:d7:08:cc:d7:af:4e:10:c6:8e:13:35:00:bf:f9:cf:2d:
         ce:eb:cf:85:7a:64:10:b2:51:c3:c1:52:c1:87:76:0b:e3:52:
         08:92:16:ad:13:1d:ed:8e:ba:f9:01:18:3e:50:b0:c2:3c:66:
         62:55:e7:bb:7e:35:75:bf:b8:fe:13:a3:bb:39:5e:37:e9:1d:
         98:1e:a7:a6:73:24:0e:a6:21:ae:c4:0a:88:f0:e1:e6:5e:7c:
         90:ff:e2:fc:ca:68:9e:2c:e4:fe:62:96:07:de:1a:ed:a5:d7:
         1a:10:4d:9d:fb:7e:1e:34:b7:b6:f2:0f:8e:1a:54:64:1d:07:
         75:15:ab:e6:3e:e9:db:3c:3e:a3:18:47:d1:fd:43:9e:0f:10:
         63:96:02:64:2d:c7:f5:12:2a:20:28:ed:b7:73:1a:df:61:12:
         50:d4:bd:36:b4:b7:1e:06:84:6e:66:f1:a3:80:02:e9:d0:60:
         f9:4d:76:c6:1d:e7:d0:a7:4d:08:a9:eb:0b:25:59:e2:20:94:
         d0:d2:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:28 2025 by rpki-client