Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
File:                     4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json)
Hash identifier:          /FigD6vS/BzBkDCtPWrRyDTDvb+UTw9VWb3Z+E/tqTg=
Subject key identifier:   A1:4A:54:5D:F4:98:82:4C:F3:DD:29:B8:26:B3:44:34:5E:F6:DC:C7
Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
Certificate issuer:       /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Certificate serial:       1723CFAB8CCE10160FEC346DF74E9EE19D924085
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
Manifest number:          5A
Signing time:             Sat 29 Mar 2025 09:42:00 +0000
Manifest this update:     Sat 29 Mar 2025 09:37:00 +0000
Manifest next update:     Tue 01 Apr 2025 18:39:00 +0000
Files and hashes:         1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: HSCUNLaKeqcd7Fit+HRGDE0GHJLW2sIkUfc8pivqrjg=)
                          2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: k1U2/psTS46TXND9+a6Y0Ru6bOEZLM1ohJX9BO2dJ/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:23:cf:ab:8c:ce:10:16:0f:ec:34:6d:f7:4e:9e:e1:9d:92:40:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
        Validity
            Not Before: Mar 29 09:37:00 2025 GMT
            Not After : Apr  1 18:39:00 2025 GMT
        Subject: CN=A14A545DF498824CF3DD29B826B344345EF6DCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:7f:ba:6c:16:ef:cc:f0:21:62:55:15:72:
                    eb:d4:b6:a3:09:c7:c5:82:ad:48:89:5b:02:e9:d2:
                    ab:3a:61:bc:dc:60:26:34:bd:0b:79:30:24:b6:6b:
                    0f:31:f2:c3:6e:ed:39:bb:b1:8a:2c:7d:cb:7d:e2:
                    2b:69:4c:fc:50:b6:32:7c:80:79:51:5f:42:c0:9e:
                    be:db:e2:ca:c4:d4:f4:1b:7a:ee:1a:50:d8:b9:98:
                    fa:e7:83:c0:a0:83:e3:1f:24:91:b3:1e:18:b4:6f:
                    6d:7c:87:da:be:fa:9e:d2:e1:05:f2:28:97:e9:c2:
                    00:ca:1c:3c:88:09:7d:fe:b2:82:58:d3:f6:0b:fa:
                    4f:a8:f5:17:ee:ca:17:18:c1:c5:ce:40:ff:f3:87:
                    bb:94:b6:0c:e7:7a:61:3f:32:8c:36:6d:56:b9:dd:
                    37:a3:db:7b:40:1e:81:ac:a5:5a:a9:28:fa:6c:0d:
                    37:bd:ef:db:e4:8a:a7:0f:5b:c0:9d:5a:1a:92:b6:
                    43:02:9c:57:4a:6e:6c:6a:2f:fa:26:a8:67:31:c6:
                    ab:e3:74:7a:51:0f:63:d0:62:30:18:12:36:14:49:
                    82:19:a7:3f:7e:cd:17:ab:c7:6e:0b:29:e7:81:51:
                    a9:e5:92:1a:c1:a6:dc:26:1a:27:b0:c6:c6:9e:fa:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:54:5D:F4:98:82:4C:F3:DD:29:B8:26:B3:44:34:5E:F6:DC:C7
            X509v3 Authority Key Identifier:
                keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:84:15:4a:4a:eb:22:f9:1e:67:9f:7e:1d:50:ca:3e:29:b6:
         9d:33:bd:cc:ab:ab:c2:3f:91:4a:9a:28:0a:42:0c:0a:eb:94:
         56:29:44:56:64:e4:bc:89:9a:02:15:cd:72:a7:57:31:5f:3c:
         bc:d6:53:36:65:6e:37:0b:f4:d3:af:2b:9e:eb:b3:2c:1a:32:
         ee:12:6e:bb:e0:be:29:7b:6e:ac:50:84:6c:29:fd:52:6d:ce:
         1e:9c:3f:d0:cd:de:57:c6:1a:e5:42:5e:36:3b:20:cd:c7:5e:
         43:1b:b3:63:f8:47:a0:e1:51:5a:af:a7:89:f6:90:16:02:f0:
         63:6b:11:74:27:04:e0:a5:58:95:ff:cf:1c:8f:12:b4:75:a7:
         0f:9b:12:12:91:cf:d7:4e:94:e6:f8:a4:47:bb:80:68:f5:a3:
         eb:43:d1:6a:a1:88:dc:78:85:5f:ce:c0:bd:18:fc:93:65:97:
         3e:33:c4:db:b7:10:20:f6:20:97:fb:7a:32:e0:83:1a:93:b4:
         0f:3b:7d:11:38:a9:b2:cb:6d:27:af:97:51:1b:8d:36:86:32:
         45:0b:06:9d:cb:57:00:79:55:82:5f:2e:a6:32:5b:de:e2:e4:
         4c:b7:ba:fd:c7:bb:b3:42:fb:72:6c:95:7a:1a:1e:06:4b:1b:
         bb:f1:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:18 2025 by rpki-client