Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft
File:                     5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json)
Hash identifier:          5TOl1cn/xHlWwnao5NdyQpN0CLeVdmQGu03w4wg6b8M=
Subject key identifier:   00:0B:12:34:20:33:BA:27:57:9F:F3:19:22:40:4D:02:BB:02:A6:E6
Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F
Certificate issuer:       /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F
Certificate serial:       62119937CE9A51E464CA5ED5D68DABAA164F45CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft
Manifest number:          01BC
Signing time:             Fri 28 Mar 2025 21:01:51 +0000
Manifest this update:     Fri 28 Mar 2025 20:56:51 +0000
Manifest next update:     Tue 01 Apr 2025 06:03:51 +0000
Files and hashes:         1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: 7k5akgWFcoOZd/r2cppv3HXO1SAATVoqsg2f++mqnTw=)
                          2: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: 2XAzexJLQOX4waw4CBsH2xBSaDQB0lvAFkkrm8ypMCA=)
                          3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: 4R8l0isHcUyVJduHCnM1X/CyA81fBlvPqkqSCrsvVFI=)
                          4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: bSCplJXjwOVVCMiGzugmM6WG+S3f7kGFkCb6IM986a8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:11:99:37:ce:9a:51:e4:64:ca:5e:d5:d6:8d:ab:aa:16:4f:45:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F
        Validity
            Not Before: Mar 28 20:56:51 2025 GMT
            Not After : Apr  1 06:03:51 2025 GMT
        Subject: CN=000B12342033BA27579FF31922404D02BB02A6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:14:5d:c2:db:5a:f5:4c:5e:c4:5a:8b:a0:a2:
                    ce:fb:2d:8d:32:fd:10:9c:e6:70:c4:83:72:a8:4a:
                    44:b4:53:e1:3a:b5:c6:99:37:d8:e6:c3:bc:4d:d5:
                    79:eb:6c:d4:b1:49:fe:ea:3c:a6:46:a3:5e:f4:51:
                    6d:56:94:cf:34:8f:66:c6:4e:c2:49:9b:b1:2f:8a:
                    25:f0:88:65:35:12:bf:35:95:f2:a5:31:79:df:2a:
                    df:09:79:c3:41:5f:03:7d:d0:37:20:d6:94:7f:fa:
                    2c:79:79:73:7f:8e:77:9e:e8:f9:66:7c:45:81:be:
                    dd:1b:f5:43:a2:f6:a3:e9:16:62:e1:d6:68:ef:38:
                    00:f9:fa:09:e9:70:df:1d:b9:6b:22:95:9a:27:59:
                    d7:bd:32:36:dc:b9:08:e9:ef:8b:02:f0:fa:aa:0f:
                    16:5c:0a:11:39:78:0c:18:44:c6:c1:8a:46:6a:66:
                    2e:09:ed:64:49:e5:97:5e:37:43:55:e6:c8:07:ce:
                    cc:68:cb:71:ed:b0:89:7a:ea:bd:d4:64:b7:99:c1:
                    62:fc:82:59:e8:4e:9c:35:04:db:ed:e0:6e:3f:f0:
                    d1:c4:09:54:12:58:59:e5:14:30:9a:b1:02:9c:4c:
                    57:15:fa:6e:46:7e:d3:7f:a0:82:a9:06:e2:1a:b2:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:12:34:20:33:BA:27:57:9F:F3:19:22:40:4D:02:BB:02:A6:E6
            X509v3 Authority Key Identifier:
                keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:fa:29:0e:b5:45:52:d1:0c:42:71:c5:24:d9:8f:8f:e3:
         25:6f:48:0a:a0:8b:d8:3b:ee:31:a9:4b:06:6b:64:e5:db:48:
         32:80:6f:c3:35:3f:ff:80:51:e3:3c:f9:11:40:e1:e5:0b:d8:
         9a:52:51:4c:7b:d6:8d:03:05:62:4e:c9:b6:2f:be:cb:5f:c9:
         7e:65:75:e2:51:8c:0b:92:18:30:a7:de:d4:b8:6a:40:47:a0:
         04:2d:de:d3:94:17:30:b6:df:61:de:f3:aa:5c:51:df:ae:00:
         84:03:63:3e:d7:b0:5a:96:7f:b5:b1:58:9a:be:7e:40:b1:78:
         7b:79:f8:58:7d:89:8f:a5:a7:0e:b1:e3:ee:ec:ee:85:71:67:
         01:d3:09:85:b6:8a:ec:8b:d9:89:25:09:80:e9:7b:fc:e6:79:
         eb:e9:d9:a1:56:b4:98:e2:9b:92:92:38:59:6c:09:0c:69:45:
         93:6d:65:d3:e5:12:e6:2e:36:78:a2:0d:d3:fe:a5:e6:be:a6:
         c2:d0:bf:6f:4b:6c:b4:19:48:97:c4:16:c6:3f:4f:ae:5c:6d:
         a4:1c:5e:b0:ae:90:fb:af:74:78:81:45:c0:16:15:0f:29:65:
         c8:bf:bb:6a:53:bd:9d:ff:40:91:90:f9:a6:cb:3e:b4:c8:0e:
         c1:5f:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:08 2025 by rpki-client