Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
File:                     402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json)
Hash identifier:          QE6YpRSmfTNWrHtYAWinzvxeKEOaQgPau1afhHm1PQU=
Subject key identifier:   38:00:67:CF:21:BF:78:00:A0:94:C2:D2:22:CB:DB:77:2D:84:44:E8
Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
Certificate issuer:       /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Certificate serial:       15E03BC863932B18A2E1413DCD28A520F8B5C205
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
Manifest number:          023D
Signing time:             Sat 29 Mar 2025 02:50:40 +0000
Manifest this update:     Sat 29 Mar 2025 02:45:40 +0000
Manifest next update:     Tue 01 Apr 2025 04:51:40 +0000
Files and hashes:         1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: TtGf4nRYyvo0GEmSUFlho2dYccp/P3EhBfou/fStoe0=)
                          2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:3b:c8:63:93:2b:18:a2:e1:41:3d:cd:28:a5:20:f8:b5:c2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
        Validity
            Not Before: Mar 29 02:45:40 2025 GMT
            Not After : Apr  1 04:51:40 2025 GMT
        Subject: CN=380067CF21BF7800A094C2D222CBDB772D8444E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:c3:20:11:8a:69:4c:8c:64:56:a7:e6:91:
                    5d:d0:5a:f8:8d:28:62:d3:63:1b:f3:ae:58:45:bc:
                    81:01:4f:ed:35:75:c2:0b:dc:36:7e:62:63:3f:8d:
                    18:62:64:8d:66:0b:f9:8f:bd:eb:b8:33:30:09:b2:
                    82:e2:ed:2d:1a:3d:89:76:a3:81:a2:4d:13:e7:50:
                    63:33:55:ef:39:6a:f1:a5:bc:b6:2e:b4:2b:cf:b7:
                    2e:4e:9e:2e:3f:f2:64:c1:07:86:6b:c2:55:ef:5e:
                    cd:4a:1d:64:1b:28:d2:41:15:9d:c3:13:e7:61:d3:
                    59:c1:b7:98:c0:49:0e:08:df:d2:33:53:f5:70:65:
                    04:ae:5b:95:b9:d6:be:f1:c4:21:4e:ed:dc:b1:99:
                    85:5e:97:fc:ad:9e:7e:d0:40:e5:ad:cb:eb:e3:7c:
                    d0:e8:f1:66:4a:b6:6f:b6:de:42:aa:54:8f:84:61:
                    84:d3:7e:4d:71:16:49:00:85:62:55:37:2f:ca:ee:
                    b0:37:14:11:4d:85:a5:2c:f2:23:b6:9e:47:d9:e0:
                    c9:e1:a9:b2:7a:51:8f:41:95:d5:e2:b5:f5:74:c5:
                    68:ac:ee:5e:fc:ed:0d:e4:fd:e4:8f:4a:fe:ff:91:
                    ab:2e:b2:0c:a1:df:4b:5f:ad:a6:05:2a:82:57:4e:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:67:CF:21:BF:78:00:A0:94:C2:D2:22:CB:DB:77:2D:84:44:E8
            X509v3 Authority Key Identifier:
                keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:73:54:43:a8:d5:c6:89:39:90:21:47:2a:16:c3:85:73:c6:
         1e:e6:64:86:c6:f3:1b:ab:eb:fc:d8:bb:f3:4e:d6:85:5f:ae:
         dd:4c:4d:2a:6b:a8:ad:3e:91:a9:a0:bb:e7:6b:b6:9d:18:3b:
         ae:d3:f4:3d:c0:03:c2:bd:4a:24:60:b9:b7:88:f2:86:22:f2:
         00:f4:ca:e9:76:bf:55:9e:ff:91:65:b4:61:5a:34:a4:07:d5:
         90:06:85:63:cd:9b:b8:e0:3f:b3:4d:50:2a:96:80:a2:a7:dc:
         e6:31:fc:4f:c3:5f:56:19:00:13:32:72:3d:43:38:f5:21:dd:
         7d:c8:ee:0c:c7:22:2f:05:29:47:2f:34:6d:0f:a7:29:38:fe:
         31:58:95:91:df:eb:3f:ef:08:63:e7:f9:9e:b2:67:c5:87:18:
         a8:3f:78:a3:bc:7a:be:df:64:e8:fc:3e:0f:d3:ec:05:ee:59:
         eb:f6:bf:7b:51:ab:48:29:b8:c9:98:19:84:aa:9e:2b:15:e8:
         8d:4e:ed:a8:30:4b:b2:b8:1b:22:eb:c9:77:32:ef:2d:db:38:
         d6:b0:57:c4:a4:22:85:34:f5:c8:aa:90:3a:b2:7c:a8:6d:b6:
         29:15:1d:08:37:72:99:dc:6c:12:0a:5a:35:5f:c6:01:f2:6e:
         bc:86:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:10 2025 by rpki-client