Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File:                     43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier:          UM/lny3kg04XbFNax3SZJhEerY8+CNjiWFBECi4R3Xs=
Subject key identifier:   FE:DA:4A:7E:60:03:01:12:72:5A:AF:F2:82:3D:41:E7:DC:4D:8D:46
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer:       /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial:       1F62E3E92030E5FC0EECAFCD863EFC85B3C300B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number:          DC
Signing time:             Sat 29 Mar 2025 10:30:42 +0000
Manifest this update:     Sat 29 Mar 2025 10:25:42 +0000
Manifest next update:     Tue 01 Apr 2025 21:02:42 +0000
Files and hashes:         1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
                          2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: Zfzve6hXKBRfyf/knR1uXlgypox76mfQyqBpms/eoEc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:62:e3:e9:20:30:e5:fc:0e:ec:af:cd:86:3e:fc:85:b3:c3:00:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
        Validity
            Not Before: Mar 29 10:25:42 2025 GMT
            Not After : Apr  1 21:02:42 2025 GMT
        Subject: CN=FEDA4A7E60030112725AAFF2823D41E7DC4D8D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:a8:c6:43:f7:b1:a1:43:6f:50:60:77:76:
                    eb:fc:d1:0b:9f:1a:da:1d:b9:0d:55:ef:c4:c7:db:
                    6a:4a:c4:da:8e:90:e3:b2:f0:22:2e:c8:41:84:56:
                    d8:2f:c6:10:e6:47:02:79:ba:cf:93:b1:2a:bc:c6:
                    b5:a2:97:3f:01:1a:c0:0d:e7:4e:67:26:41:23:ce:
                    bc:ea:9a:f0:62:a4:e2:45:45:67:ee:64:9a:76:6a:
                    83:9a:c0:ee:8a:9f:58:08:78:e0:1a:54:08:c0:4a:
                    16:3b:48:3f:ea:7a:c8:bd:cd:94:ad:39:a7:a2:8b:
                    8b:04:58:f8:cd:2a:e2:6d:d4:16:5b:e5:f9:fd:27:
                    45:16:f2:83:43:eb:c4:98:c6:67:b2:83:7f:9d:84:
                    73:04:1e:25:bd:d5:89:2f:bc:76:d7:d8:45:61:aa:
                    ed:29:34:77:06:b6:c6:c6:c0:c7:48:f4:62:21:07:
                    93:77:bc:82:9d:46:67:2f:7a:42:7f:df:f5:7a:12:
                    3c:60:f7:91:b0:e1:72:fa:02:72:d1:eb:96:29:9c:
                    a8:64:5f:e5:a9:d0:47:2e:6c:9e:cc:9d:32:93:95:
                    83:2e:a4:76:20:80:7d:0e:5e:5a:b0:9c:80:c5:80:
                    b4:ab:f1:03:6a:89:3b:09:a1:04:0f:31:df:91:01:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:4A:7E:60:03:01:12:72:5A:AF:F2:82:3D:41:E7:DC:4D:8D:46
            X509v3 Authority Key Identifier:
                keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:5b:40:c9:19:48:21:c6:81:cd:db:ce:7c:36:70:76:bf:
         f6:55:97:b9:47:f0:12:59:6f:d3:76:60:4d:51:cd:9a:9a:f0:
         8b:10:45:02:a8:d3:19:5b:14:88:ee:5d:33:c9:c4:10:ee:23:
         b6:fd:55:52:d8:63:59:88:cf:47:d0:ef:99:44:e2:9a:93:1c:
         ed:d7:f6:f3:36:1f:ff:53:80:1a:93:7b:f8:bf:a2:1d:94:d5:
         32:e8:7c:d9:ca:8b:7e:5f:65:00:99:5a:e9:44:f4:b7:29:a7:
         88:81:80:72:cd:1a:19:7c:70:2a:59:82:6b:be:48:34:ae:3a:
         da:ad:73:1f:04:96:57:c3:68:9a:fa:41:a5:a1:2e:b2:03:82:
         47:e0:97:ce:fc:ee:b6:1c:fc:88:66:77:bb:3f:db:ba:43:05:
         29:88:14:ee:c2:a1:ab:9d:41:34:75:b4:d0:d9:39:51:84:d3:
         64:4a:34:51:e3:ac:72:09:55:53:db:7a:a7:68:5e:76:1d:77:
         da:e4:2a:7a:b0:23:8e:20:a5:99:23:cb:a5:f6:bc:12:72:d3:
         92:59:b9:a6:b4:bc:af:b4:20:5f:1a:8d:8f:c9:75:8e:74:ee:
         19:d8:47:a8:d1:94:54:59:32:fb:64:a9:6e:e9:35:87:6f:8c:
         cc:1f:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:13 2025 by rpki-client