Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
File:                     AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json)
Hash identifier:          wsH2Te6ibMMXG4ZbC7C4QXnptSOthYWKAmoSdgOq/IQ=
Subject key identifier:   A2:5C:8E:39:A1:33:E6:63:72:BD:AD:7C:C7:C3:01:BD:E8:A1:24:BC
Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
Certificate issuer:       /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Certificate serial:       17457D62DAB30414A2FBFBFAE83A6078BC308F0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
Manifest number:          04BA
Signing time:             Thu 27 Mar 2025 17:31:08 +0000
Manifest this update:     Thu 27 Mar 2025 17:26:08 +0000
Manifest next update:     Sun 30 Mar 2025 22:54:08 +0000
Files and hashes:         1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: RULPjGQOhO2NnW/Uutpf38hIT15dm3aEUOJrH7FaGA0=)
                          2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: PHUFI70Yd8/eQH1IB5Bqra7jl3oU7toK/ScFCZQ9jng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:7d:62:da:b3:04:14:a2:fb:fb:fa:e8:3a:60:78:bc:30:8f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
        Validity
            Not Before: Mar 27 17:26:08 2025 GMT
            Not After : Mar 30 22:54:08 2025 GMT
        Subject: CN=A25C8E39A133E66372BDAD7CC7C301BDE8A124BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:cb:ad:11:22:3e:63:db:60:e5:f8:6f:cc:
                    1b:16:4b:46:0a:50:f2:1b:12:59:94:f8:f6:5c:64:
                    42:8a:f3:d3:ba:1f:fc:58:f0:a6:d2:53:82:3c:60:
                    06:e3:fa:b0:c4:55:40:83:05:6e:63:3e:d8:c8:af:
                    c9:1b:f3:5a:53:da:d1:77:40:b8:dd:77:0f:1d:a0:
                    82:87:74:f7:4d:e2:df:ca:ad:eb:60:99:e8:8b:48:
                    9c:0c:b9:3d:d2:b5:85:87:7e:38:ce:12:c7:e0:4c:
                    8e:69:28:6b:1c:a6:d8:a9:b6:01:a5:35:50:96:c8:
                    04:a7:6e:06:86:0f:38:94:3f:97:cd:cd:e9:a4:ba:
                    da:69:3c:7e:d7:70:ba:b8:1c:76:13:a7:56:a7:c1:
                    7e:ff:aa:ff:95:f3:f6:2b:4f:a8:0a:f5:74:bc:66:
                    85:8c:7c:0b:5f:76:e1:8c:e0:f7:1e:bb:5a:86:47:
                    fd:88:4c:1a:be:5a:b0:48:a7:b1:a1:96:78:38:c0:
                    0a:f9:34:2e:77:43:70:b0:ba:df:94:ef:ab:32:00:
                    6d:d0:2b:f2:06:5c:5e:73:af:f5:44:e3:eb:37:82:
                    ee:c0:45:79:3d:00:23:5a:62:96:26:58:03:98:0a:
                    ce:5b:6e:97:ea:3d:f9:87:74:c4:e8:3d:01:f6:f8:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5C:8E:39:A1:33:E6:63:72:BD:AD:7C:C7:C3:01:BD:E8:A1:24:BC
            X509v3 Authority Key Identifier:
                keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8b:a6:14:f6:bc:23:e7:36:e2:12:91:b6:9d:4c:46:c2:19:
         c2:66:4c:54:6f:01:0e:c2:45:48:6e:e3:d6:04:bc:f9:a9:64:
         cc:dd:33:f5:2e:41:7e:4a:b4:51:c2:d8:90:10:fd:22:37:5b:
         f1:c5:a8:46:06:d9:75:e6:74:a9:d8:88:ed:71:90:5c:c4:32:
         de:51:a8:d2:f3:06:8a:ba:1a:73:76:32:bf:e9:cd:a8:08:5d:
         4e:35:ab:37:ab:f8:34:d1:d0:8f:e4:a3:59:40:fd:a3:3b:82:
         aa:87:81:3d:65:d9:de:60:49:8d:9a:ba:12:31:b7:90:e3:60:
         26:92:25:6e:91:b2:65:00:c0:7c:7c:16:1d:6b:c2:84:52:60:
         1c:3b:db:2d:fd:a8:f9:7b:1c:bc:aa:e4:10:65:af:a3:df:3c:
         80:7c:86:10:25:04:bb:21:1e:3c:96:ba:e8:40:ee:b8:0e:5a:
         0d:d6:24:43:ef:51:c0:15:4d:d6:b1:0e:af:25:47:5f:96:d0:
         1b:0e:0e:0a:01:4a:7e:db:8d:45:fa:37:b7:f3:cd:72:dc:d1:
         86:8c:6c:9b:7d:c0:a3:75:38:59:a1:30:48:b5:f4:e5:75:d5:
         90:75:4f:ea:e4:24:5d:11:8b:a1:86:7f:01:e7:38:df:53:24:
         c5:dc:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:51:23 2025 by rpki-client