Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
File:                     2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json)
Hash identifier:          PhhmzLwlFwRYz8BLOOn+Qo8Wx/iyiYp1z/TthUVM9J8=
Subject key identifier:   3A:F3:E7:CB:3B:DF:25:0F:A8:E1:82:4E:FB:6E:53:74:11:E7:F4:9C
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Certificate issuer:       /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial:       4E6DE2BDF4CC46CCA01C682B678555FA893A22C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
Manifest number:          BF
Signing time:             Sat 29 Mar 2025 01:21:20 +0000
Manifest this update:     Sat 29 Mar 2025 01:16:20 +0000
Manifest next update:     Tue 01 Apr 2025 03:59:20 +0000
Files and hashes:         1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=)
                          2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: eK74W3Jlx5nNzpcPKU+1j6RMAJ0V28zIyW9irLXBB0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6d:e2:bd:f4:cc:46:cc:a0:1c:68:2b:67:85:55:fa:89:3a:22:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
        Validity
            Not Before: Mar 29 01:16:20 2025 GMT
            Not After : Apr  1 03:59:20 2025 GMT
        Subject: CN=3AF3E7CB3BDF250FA8E1824EFB6E537411E7F49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:fc:43:87:6f:ba:61:40:d5:8d:5b:ef:f8:
                    80:6b:41:82:cb:c0:4b:e8:32:2c:df:6f:e2:a0:27:
                    94:eb:43:dc:73:fd:b0:66:42:c5:90:d2:5e:34:98:
                    18:80:03:aa:5d:46:3f:80:49:41:3f:cf:6b:17:29:
                    b0:93:72:e7:f3:90:c1:ab:b8:48:e0:75:64:4c:51:
                    c4:b5:93:83:df:1b:14:3d:ae:f3:38:67:1e:dc:aa:
                    9e:40:8f:97:41:99:8e:99:4f:28:9b:16:4b:8b:58:
                    64:32:20:f7:f7:a5:b1:70:ff:8a:5d:f6:a7:5d:86:
                    3a:32:70:d8:c2:a7:d2:d8:2a:98:d6:b2:1a:ee:b1:
                    c7:75:d2:8f:1c:28:3f:1b:99:d0:00:0b:7f:9d:e2:
                    ae:06:77:c1:c2:47:33:9c:35:ce:4c:16:43:a9:02:
                    df:5b:68:83:bf:42:2b:c1:05:80:d0:47:7b:72:62:
                    36:2b:1b:6a:89:73:0a:71:23:ae:db:d5:5a:df:49:
                    ab:fd:f0:b0:a1:f2:c4:a3:67:da:ba:0b:b5:57:12:
                    89:57:16:d4:a5:68:af:b4:ec:32:62:c7:af:de:e2:
                    18:70:66:96:ec:ce:fe:db:bd:71:18:b1:75:fd:99:
                    2e:65:8a:6d:86:4b:5c:c0:4c:e0:85:4e:d7:46:9b:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F3:E7:CB:3B:DF:25:0F:A8:E1:82:4E:FB:6E:53:74:11:E7:F4:9C
            X509v3 Authority Key Identifier:
                keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:f2:c9:00:ba:9e:89:1a:3f:42:51:0a:ca:a9:9d:55:c6:
         70:8e:24:30:2f:52:be:78:78:e6:7e:e8:7b:0d:2c:8f:1e:19:
         76:22:60:71:14:e9:94:c3:9e:0b:39:a5:ed:13:13:01:ae:2b:
         f7:ef:52:8f:f4:0f:e1:29:53:ac:ec:f2:97:53:51:cd:50:01:
         22:e0:a1:5f:15:1a:cf:53:d6:12:de:dc:2a:e3:23:ca:a7:3f:
         a4:d1:8b:33:db:48:3b:50:66:15:c7:f8:a5:6e:5a:86:b1:f8:
         8e:3d:19:ef:dc:bd:e7:4c:dc:d9:47:95:af:49:fd:fb:61:f6:
         25:30:c6:6a:ab:fe:9a:d3:cf:1a:28:5e:3a:1d:7d:0c:94:10:
         9b:f2:5d:1b:ac:89:71:d2:4c:97:bb:0a:f6:9c:d1:e8:90:ea:
         0d:c3:3d:53:a5:08:12:ee:5d:f1:32:70:c2:2a:eb:c6:4c:0b:
         bf:38:8f:3b:15:dd:4d:07:9a:0d:18:4c:70:ae:e9:03:60:d3:
         b8:42:3d:22:e6:76:e0:22:df:98:1d:6c:0e:43:40:01:d5:5d:
         d3:22:69:ed:e4:83:b5:9e:6a:e1:a7:b8:18:6e:92:48:e8:b6:
         78:45:8a:da:40:58:18:7e:04:da:6e:a0:04:5a:bb:ee:2b:c1:
         34:fe:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:56 2025 by rpki-client