Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
File:                     C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json)
Hash identifier:          JyBvNISx5tkE7VUGY9SCknBskcX934UYYqGRvZww7rE=
Subject key identifier:   AA:C3:40:59:EA:60:5B:AD:20:30:85:67:8C:95:22:6D:CA:E7:CD:2D
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Certificate issuer:       /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial:       1D78CAD7CFEE8926BDC20FB1878BD5CA65442281
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
Manifest number:          01ED
Signing time:             Thu 27 Mar 2025 16:20:58 +0000
Manifest this update:     Thu 27 Mar 2025 16:15:58 +0000
Manifest next update:     Sun 30 Mar 2025 17:56:58 +0000
Files and hashes:         1: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: 2GRWO9/Q0MpgVDiM1R341bc3uq7zSgQtLGeuDYAy19g=)
                          2: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q=)
                          3: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=)
                          4: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: bRUc2+1223ChTn5fiiQnfANgFJbl98c6D7/Y9ZKJub4=)
                          5: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: MqPsWsjfl+dvyk5ktsSY4CI6tIF3C/cx5WnXAN8LB/s=)
                          6: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: jzAqzS+UM0D1OlBXnCUhpQdP3zDL5sXG1VXuhoHVU1Y=)
                          7: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: +gGFIbmz6MNLj5Vm2IvAwgGsv19fCAUik3uGncQgwzA=)
                          8: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: sh5TYY+kSsxR1pmF4DA1+vUfc+JlTOxylxIbw3b89Eo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:78:ca:d7:cf:ee:89:26:bd:c2:0f:b1:87:8b:d5:ca:65:44:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
        Validity
            Not Before: Mar 27 16:15:58 2025 GMT
            Not After : Mar 30 17:56:58 2025 GMT
        Subject: CN=AAC34059EA605BAD203085678C95226DCAE7CD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f3:21:2d:05:08:5b:b5:2b:ac:28:28:dd:69:
                    f9:cb:2d:60:65:16:1e:36:09:06:a4:62:46:df:16:
                    41:f0:01:11:02:fd:63:f5:db:92:41:35:37:8c:01:
                    19:91:ac:96:c3:e4:a7:2c:36:0f:1b:4b:c9:5f:ee:
                    9d:ca:51:23:da:c0:5d:9d:ef:ac:04:4f:74:1a:80:
                    20:77:dc:f6:fa:5c:71:80:92:ac:26:18:68:90:51:
                    53:e3:b4:78:c6:43:94:ef:7a:a3:4b:74:86:56:d9:
                    77:c2:7e:8f:57:2a:a4:56:35:ca:b8:ba:6d:07:d1:
                    88:d3:0f:00:d3:c6:78:09:2c:e4:37:b4:5a:87:87:
                    66:ab:9e:45:e0:44:26:50:52:69:d5:43:f2:7f:35:
                    b6:14:7e:38:9d:cf:12:2e:89:a0:2b:c1:e4:05:2d:
                    1c:cb:ad:e6:40:98:6b:53:02:b9:c1:b1:66:fb:c2:
                    20:57:3b:02:94:11:8a:86:5b:28:91:59:ca:a8:d2:
                    9e:a3:ea:19:fc:8d:96:d1:af:3f:25:46:12:8b:21:
                    d9:af:d5:6a:7b:43:dc:15:e4:89:2f:b2:85:38:c7:
                    4e:c6:30:1f:58:7d:e2:2f:0f:7d:05:61:0a:82:c9:
                    49:17:04:7a:77:50:4a:10:be:d9:74:77:16:fe:7c:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C3:40:59:EA:60:5B:AD:20:30:85:67:8C:95:22:6D:CA:E7:CD:2D
            X509v3 Authority Key Identifier:
                keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:20:ea:4f:cf:0e:9e:22:c9:16:d9:48:7c:1a:8f:81:b1:b0:
         95:1a:60:8d:ba:aa:10:a9:ab:4e:55:20:39:f0:64:1b:05:da:
         6c:55:fb:a4:b4:47:53:72:6f:52:1f:26:9e:60:e9:64:fa:f9:
         0f:30:2a:52:70:07:09:13:15:54:e4:1e:5b:9d:e3:92:46:01:
         4e:51:a2:c7:e4:5c:4f:0a:d1:0c:66:51:1a:9d:32:50:b4:48:
         8c:e3:22:06:5e:39:60:79:1f:68:76:fa:32:67:1c:95:cd:3e:
         e2:30:13:3d:10:9f:21:3b:c3:94:14:67:a2:dc:7f:fd:a9:b5:
         c5:ab:fa:b4:a2:f1:ae:56:86:21:14:c9:0e:dd:75:33:ee:b4:
         28:f3:3e:64:31:24:30:fa:24:79:78:21:62:b1:b6:2c:aa:c8:
         8e:b1:49:85:04:05:b6:4b:05:4a:f7:d4:1d:9d:20:12:ee:ed:
         64:f4:c4:de:eb:51:87:bf:03:10:a3:41:44:8d:a5:52:3d:ad:
         99:86:80:57:cc:0f:42:53:89:5c:6d:c4:33:35:3b:c3:22:da:
         d7:9a:08:3a:63:bf:93:96:df:c9:ab:56:bd:ae:66:4e:53:ff:
         44:5a:30:f8:f2:d7:0b:b1:e1:ef:37:7e:0d:9b:d4:e0:36:2e:
         93:a8:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:49:07 2025 by rpki-client