Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
File:                     87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json)
Hash identifier:          DkobgKaS4nlekguMPsD+Ra6/RGDMEWRjHUpqXINDQRs=
Subject key identifier:   57:32:0B:44:8E:6F:03:51:97:CE:58:6C:B0:E5:87:5C:0C:B6:80:3B
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       42A1313CCA98F095081AF52733347D4ED411C18B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
Manifest number:          012D
Signing time:             Fri 28 Mar 2025 22:51:46 +0000
Manifest this update:     Fri 28 Mar 2025 22:46:46 +0000
Manifest next update:     Tue 01 Apr 2025 08:24:46 +0000
Files and hashes:         1: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: 7O+AvnULpeJy5aJ05kQrhljlfkV5ExWXqcP1gSPlqXU=)
                          2: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 5D15jDxwoTM16wzauOrUEtRL0kfiyMbHWtAJqnbWWIY=)
                          3: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: yqFry/4LxGJrVDuxbVY2RcAPDTNylJF/fe+W8ljuItE=)
                          4: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: tXqFPzzIYSaMhQVlADffN/Hhkl9ZDWSwCOT5BwB5GQU=)
                          5: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: jacU4c2UenPX8vzT/l1Osf9mSgEop22wfa5VW6r4QpQ=)
                          6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: iq4zdyWuYQ9zfhh7R084abIYQNuWQgzRr+n2plfHB7I=)
                          7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: 0hFlZ7fplBnjhpvQ2rtjlp/hS8tlJFaTBMFE7R6GDgM=)
                          8: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: KNuzEtjQXTPqbO4WNny2KjokoOmzzEFCKrvvjyUWvLI=)
                          9: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: JK9K79TizKr0Mzpc6GsKln188Fhnc893fnWWFi5WKGk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:31:3c:ca:98:f0:95:08:1a:f5:27:33:34:7d:4e:d4:11:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: Mar 28 22:46:46 2025 GMT
            Not After : Apr  1 08:24:46 2025 GMT
        Subject: CN=57320B448E6F035197CE586CB0E5875C0CB6803B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:60:0d:55:a1:6e:9a:e4:98:7a:d7:5a:dc:
                    36:c4:4b:df:68:c2:47:18:58:e7:c6:15:c9:ed:96:
                    f1:ac:7a:59:a2:61:37:80:38:10:79:2f:06:35:34:
                    6b:3f:3a:44:af:39:d3:64:26:fa:54:9d:9b:51:26:
                    35:08:e0:3f:ce:01:93:0c:8d:1e:80:d4:8d:2a:69:
                    55:e5:18:28:01:c7:49:5c:ab:0d:a5:fd:24:c2:f4:
                    92:1d:6e:56:8a:89:b7:14:d8:f0:83:72:51:3e:a8:
                    2e:00:a0:da:6b:e9:ad:53:80:05:53:70:b7:45:2a:
                    e4:ce:32:b1:bc:8f:67:ba:51:d6:ec:be:55:68:9d:
                    ac:5d:7f:68:8d:a3:f6:8b:ab:b1:c3:a7:12:ea:73:
                    f9:5d:04:81:ba:b4:b1:8d:09:14:e0:f1:da:9b:b4:
                    8d:94:ec:c2:aa:a0:c0:f2:b4:34:43:d5:99:2a:80:
                    cd:58:9a:89:59:15:cd:12:7a:55:96:0a:8b:b1:8e:
                    dc:2d:ad:c8:dd:f7:8b:91:97:1e:45:b5:34:9d:14:
                    5a:65:b7:bf:3d:e7:8f:c5:33:fb:0f:cd:db:31:3b:
                    04:91:2a:c5:9e:8b:fb:ff:6a:07:53:dc:f6:dd:d0:
                    a6:4a:93:fb:32:c8:76:5e:46:a2:19:14:93:64:b9:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:32:0B:44:8E:6F:03:51:97:CE:58:6C:B0:E5:87:5C:0C:B6:80:3B
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:fc:08:d2:b1:c5:77:5e:01:5e:d1:8d:f7:06:0b:f0:cd:
         7f:74:2b:78:9e:16:27:45:63:8a:75:fd:9f:2f:53:aa:5d:8a:
         bb:f6:90:1f:60:58:ef:2f:36:a8:1b:2b:82:5e:a2:13:ac:67:
         82:98:81:48:8c:e3:e0:64:73:27:8f:c5:2d:bd:33:3d:06:e9:
         80:bf:03:63:51:2c:58:c7:9f:61:9c:db:d7:cc:57:36:84:85:
         cf:87:e6:df:bf:3f:26:f4:81:16:23:1a:e8:42:98:df:98:dc:
         b1:fd:41:a4:a0:cf:85:51:31:d3:1c:82:61:42:7b:e1:ad:7b:
         cb:3d:7c:fa:a9:ce:b7:01:b4:49:c1:47:48:a3:03:c8:de:95:
         ac:7f:97:a9:0e:d4:ca:5c:07:da:7c:09:ae:90:7e:f0:10:51:
         45:fc:45:80:15:9c:54:ae:c3:c8:33:cb:d7:4a:5a:f1:ec:91:
         f0:b4:59:bf:ca:a7:22:55:6a:39:a1:0e:5a:8e:2c:82:09:19:
         0c:86:6e:b0:70:38:83:ed:b1:03:d8:6f:5e:a3:a3:0f:5d:b5:
         27:b6:04:c3:8a:2d:e7:52:03:4b:56:6a:1f:d8:ce:ab:12:c5:
         0a:e7:57:cb:59:1d:37:66:f1:05:97:1a:f8:d4:c1:42:a2:98:
         49:ec:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:51:35 2025 by rpki-client