Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
File:                     AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json)
Hash identifier:          bsHsgaU4GgRx2uRx5hBi1dbWkrHbnNRn0pw5l87qXjU=
Subject key identifier:   C0:C8:F3:EA:CC:CB:60:D3:18:B5:EF:66:21:A5:8D:3B:67:BF:3B:A6
Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB
Certificate issuer:       /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
Certificate serial:       1293E7CFCF6E167A54B5900D920954D15B7B266A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
Manifest number:          036A
Signing time:             Thu 27 Mar 2025 07:41:28 +0000
Manifest this update:     Thu 27 Mar 2025 07:36:28 +0000
Manifest next update:     Sun 30 Mar 2025 16:22:28 +0000
Files and hashes:         1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: hF9hXXB8iA+2l2L+1MIOzldnaMOCrgjLZJVTKusikL8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:93:e7:cf:cf:6e:16:7a:54:b5:90:0d:92:09:54:d1:5b:7b:26:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
        Validity
            Not Before: Mar 27 07:36:28 2025 GMT
            Not After : Mar 30 16:22:28 2025 GMT
        Subject: CN=C0C8F3EACCCB60D318B5EF6621A58D3B67BF3BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:71:86:15:99:b2:da:fa:4d:67:f2:c0:76:
                    01:db:1b:85:3f:0f:5e:3c:45:ee:a3:93:85:df:ea:
                    e1:44:83:55:ba:1e:8c:03:59:f5:76:22:46:c9:9d:
                    6a:ac:21:be:cf:44:29:3d:b3:6d:28:f4:5c:56:91:
                    80:ef:1e:53:a0:6b:ed:7e:07:53:87:60:ec:aa:8b:
                    2c:eb:b4:fc:b2:33:70:5b:70:2e:2d:5f:b5:28:5c:
                    78:b8:71:29:11:31:4a:4e:91:f1:dd:ed:86:1b:87:
                    00:c2:56:3a:72:41:ba:e3:9c:01:82:5d:bd:ff:31:
                    35:24:45:fa:60:92:21:b4:4c:c5:98:94:2c:d0:e8:
                    43:69:03:52:10:a7:99:3c:c4:4e:8f:e9:19:f0:38:
                    9f:99:cd:af:af:d9:98:68:70:9f:72:69:dd:e2:55:
                    37:1e:b0:9c:ae:57:f7:3b:7b:c7:1d:f5:a1:40:bd:
                    42:be:e0:ff:31:e9:f4:aa:4c:f6:bb:ad:09:df:a5:
                    a4:4d:fa:0d:87:70:63:50:98:65:03:66:e2:6d:0d:
                    d1:e2:23:d4:21:f9:15:32:83:f4:9c:5d:d6:33:c0:
                    d9:10:70:03:00:fa:af:90:fb:e3:49:5b:c1:f8:72:
                    15:ad:bd:bb:b0:ff:67:7f:04:fc:f6:b4:b0:e5:d4:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:F3:EA:CC:CB:60:D3:18:B5:EF:66:21:A5:8D:3B:67:BF:3B:A6
            X509v3 Authority Key Identifier:
                keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:55:52:14:4f:0a:e1:5b:9a:41:30:d9:eb:30:a2:4c:05:48:
         7f:b6:1c:6b:da:39:59:8e:f8:cf:1e:bd:c6:a2:5c:df:e4:07:
         33:87:c9:e0:f8:27:a3:dc:18:df:f4:53:18:79:53:d2:c0:f2:
         74:ce:98:72:80:53:af:b0:9e:9c:2a:48:9a:f6:e2:77:e3:03:
         15:9e:14:8e:d5:31:b0:01:a9:94:71:fa:e2:32:08:69:c3:07:
         a5:b8:71:20:c1:4a:71:08:6c:2a:5d:0f:38:c7:9d:9f:36:d2:
         51:42:cf:2b:b8:ac:58:b7:c6:11:c4:29:e8:fd:12:ae:d3:fc:
         68:a8:91:85:31:71:a8:9b:4e:cd:ef:40:08:bb:39:74:2c:90:
         e1:23:f4:db:85:7c:ee:0f:8f:9e:5f:ee:43:df:05:fa:c7:a8:
         dd:36:83:80:0e:57:29:57:d3:df:14:4d:ba:46:1f:7e:e5:f6:
         bf:5e:7a:c3:0c:03:e7:a6:a6:08:fe:85:82:fb:8c:5d:de:df:
         0b:c5:42:8d:8b:30:92:a9:4b:d8:45:b7:cd:db:3e:2e:fa:66:
         a4:22:b9:86:aa:d4:78:83:4a:d7:27:a2:97:24:e9:bd:8b:a5:
         12:c7:d3:3d:3f:e6:17:88:b0:7d:ea:4c:64:6e:53:e2:5d:18:
         2d:5e:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:41:10 2025 by rpki-client