Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
File:                     CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json)
Hash identifier:          G7UQNbZLuQG9zOuTJ/mZ9Eh//kltNO8vJWX8XUxeL/8=
Subject key identifier:   04:E5:9F:DF:1B:0F:6E:BA:56:2A:0B:15:A7:9A:86:25:EC:44:A2:9A
Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
Certificate issuer:       /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Certificate serial:       50EE955CF4AAC793D8F3981F8ED6CE4208AE148D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
Manifest number:          0126
Signing time:             Fri 28 Mar 2025 20:51:58 +0000
Manifest this update:     Fri 28 Mar 2025 20:46:58 +0000
Manifest next update:     Tue 01 Apr 2025 03:40:58 +0000
Files and hashes:         1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: yDhpP6Eq1/R2VFCYJwTBT5NxVHfOKwEekjNNpQ6iq8w=)
                          2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: OWaYDg1cDH9a+akHuxTt6wYPqaxaynY90OG7HIU4OWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ee:95:5c:f4:aa:c7:93:d8:f3:98:1f:8e:d6:ce:42:08:ae:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
        Validity
            Not Before: Mar 28 20:46:58 2025 GMT
            Not After : Apr  1 03:40:58 2025 GMT
        Subject: CN=04E59FDF1B0F6EBA562A0B15A79A8625EC44A29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:27:a5:65:26:c9:46:ff:ef:14:e0:78:8e:fe:
                    30:a5:38:79:37:71:df:78:dc:d7:8a:8f:6d:e8:86:
                    e7:c5:6d:56:20:f8:bf:09:87:ce:7e:f1:6c:7b:13:
                    b5:f3:e7:f8:f2:b2:a8:cc:4d:4d:de:00:ee:5e:21:
                    5a:cb:c5:af:b0:32:f0:66:9f:e3:44:7e:3f:65:7e:
                    c4:56:5b:61:55:70:98:cb:51:83:8c:dc:55:a3:5e:
                    8c:69:82:25:3e:dc:ae:5a:7d:02:e1:f7:7c:73:53:
                    e8:d2:55:64:9b:08:c9:87:1c:01:3b:f2:fc:11:47:
                    05:1c:ce:88:2d:69:06:4a:2c:99:20:b7:e9:c6:47:
                    db:f6:54:92:b9:31:b4:31:7e:42:94:31:57:06:8e:
                    ef:c0:e1:59:54:2b:7e:6b:85:cf:f3:ef:b0:1f:c3:
                    e1:46:4d:c0:3c:6b:53:f5:8a:5e:0d:10:bd:ae:86:
                    a9:ec:82:de:6b:8e:5e:b7:8d:2c:54:c0:fa:7a:c4:
                    2a:a4:1f:6c:d5:50:9b:ad:05:2d:fd:72:a9:6e:ae:
                    13:0d:58:c9:3d:2c:80:9e:10:b4:71:11:e8:e8:f2:
                    8e:d9:14:40:ed:3e:14:86:8b:2e:b9:7c:fc:22:6e:
                    34:b2:c6:61:17:a9:44:cb:bc:82:f1:5b:17:9a:91:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:9F:DF:1B:0F:6E:BA:56:2A:0B:15:A7:9A:86:25:EC:44:A2:9A
            X509v3 Authority Key Identifier:
                keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:f6:2e:44:cf:c9:21:d0:32:39:28:3f:f0:da:27:fb:75:
         02:fe:e9:f0:68:ed:41:30:e0:9c:c4:00:99:93:73:76:af:d5:
         d5:64:8a:f0:ab:f9:e9:9d:c5:cc:1b:85:38:02:e3:23:5a:46:
         41:20:d3:24:63:1b:33:e7:35:f4:8a:f0:cc:bc:34:9d:b4:b5:
         88:b6:9a:ff:fe:4d:4d:d8:2f:04:34:d4:c0:b1:ea:a9:d4:5a:
         e8:aa:fd:0e:a9:01:46:4b:6e:68:22:66:4a:91:a6:63:51:b8:
         7e:50:b3:24:2e:1a:83:05:2c:89:79:dd:30:c9:44:17:25:bb:
         5b:d7:56:84:24:ce:0a:b9:db:7e:1e:d9:47:e8:5a:b1:2c:9e:
         ee:40:5a:da:34:75:1d:70:c7:cc:d1:e0:11:5d:75:94:6d:12:
         7a:93:f8:f9:03:2d:91:39:20:32:3d:3c:f2:1f:ab:91:b7:ea:
         75:e0:8e:91:66:64:2d:da:ad:aa:dc:56:87:08:18:b0:f9:ed:
         db:78:1c:54:49:8d:32:12:59:94:93:1c:da:f6:c2:ca:95:ba:
         db:36:3d:59:00:4d:82:32:be:34:fb:2b:d3:df:ac:fd:05:f3:
         05:22:c5:3f:71:77:1a:1a:7f:f9:3f:ce:ef:9f:30:76:10:ef:
         dd:41:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:13 2025 by rpki-client