Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.mft
File:                     40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.mft (raw, json)
Hash identifier:          VcwjKQfyks2y23O5fRXjQTF23z9i3rRtYAlWxGLKncg=
Subject key identifier:   76:6B:83:E1:49:98:00:B9:BF:2C:C0:93:CB:39:C3:DE:65:16:B3:F2
Authority key identifier: 40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A
Certificate issuer:       /CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
Certificate serial:       56E2F8D6DD2A1371C9E4DC0776D271244B542184
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.mft
Manifest number:          01A3
Signing time:             Fri 28 Mar 2025 10:41:47 +0000
Manifest this update:     Fri 28 Mar 2025 10:36:47 +0000
Manifest next update:     Mon 31 Mar 2025 20:27:47 +0000
Files and hashes:         1: 40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.crl (hash: WR+DnVB4wl8nAUaozXN/PU20eU6G9vQZSPAjugBmnTQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:f8:d6:dd:2a:13:71:c9:e4:dc:07:76:d2:71:24:4b:54:21:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
        Validity
            Not Before: Mar 28 10:36:47 2025 GMT
            Not After : Mar 31 20:27:47 2025 GMT
        Subject: CN=766B83E1499800B9BF2CC093CB39C3DE6516B3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:5e:f2:98:b5:6c:3c:93:a5:66:12:bf:df:
                    67:ad:32:0d:ee:61:24:e0:73:21:8f:4d:d0:a5:b7:
                    3d:fb:4e:5c:67:d6:69:75:25:f0:2e:df:9f:41:b0:
                    c7:76:03:42:99:02:67:b1:c3:1b:8a:23:4a:fa:91:
                    50:6a:a5:87:27:5d:e9:61:92:96:b2:e7:2c:51:7c:
                    40:70:f2:41:7e:9b:b1:01:6f:e8:ee:63:12:40:29:
                    39:fc:3d:96:0f:49:89:78:ee:dd:c7:74:b2:b2:d6:
                    1f:53:9c:c1:01:a8:9b:f4:6a:98:f0:ce:70:22:67:
                    97:86:df:af:ca:6a:eb:8c:60:eb:25:fa:2e:f6:15:
                    8c:51:8f:2f:0b:b0:a9:0d:10:4d:3e:2b:8c:ae:04:
                    a1:d4:3c:4b:e7:18:7c:72:6a:74:3e:5e:c2:c2:94:
                    4b:6c:15:19:5c:51:fa:ea:e3:14:44:fd:ca:29:b3:
                    b0:0a:bc:8f:7d:a0:31:df:ab:f7:78:48:ed:eb:e8:
                    87:02:12:27:05:71:da:e1:a2:4d:0f:6a:a0:d4:92:
                    a3:e7:1d:57:5a:47:ba:56:80:20:b5:1a:30:f0:ac:
                    3c:bb:da:ec:c3:74:01:17:af:ba:3f:e0:7c:0f:da:
                    3d:b6:44:15:45:f2:e5:dd:c8:b3:b4:94:57:bf:ed:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:83:E1:49:98:00:B9:BF:2C:C0:93:CB:39:C3:DE:65:16:B3:F2
            X509v3 Authority Key Identifier:
                keyid:40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:05:68:77:ae:c0:7b:65:9b:95:c5:51:55:51:d0:80:ff:
         8e:ef:76:28:19:28:cc:6a:1c:75:48:90:70:c8:63:90:55:50:
         ba:87:5c:2d:be:bd:1b:1f:8f:f5:e4:86:f8:68:3e:31:60:c3:
         e0:8d:54:b4:c2:ea:c7:2e:69:4c:4c:b5:a2:d5:88:88:aa:52:
         66:ae:4a:90:6d:37:85:27:e3:fd:e7:2e:4c:72:df:9a:e5:d9:
         12:66:ff:ff:8e:ad:bc:34:62:4f:31:e9:2e:77:9e:d6:de:d1:
         3e:b3:e4:c6:c0:d2:7a:10:0c:05:94:40:43:e3:34:df:b3:4a:
         d2:18:7b:a4:be:6f:d5:df:f5:82:5e:cd:94:d0:86:09:c1:9e:
         a3:72:61:e6:9a:3a:e1:72:05:07:28:81:6e:14:39:4a:b1:13:
         d9:a0:b5:80:19:f5:d1:0b:92:cb:f7:a8:87:03:91:46:9b:38:
         02:7d:a5:94:21:f9:54:d2:29:f8:e2:72:41:a2:f1:56:16:27:
         b4:f7:34:a0:6e:93:bd:9d:b1:af:21:78:d0:af:57:86:54:16:
         d8:21:de:5c:0e:a6:c2:33:8b:3d:71:c9:7a:9a:de:de:ce:5a:
         91:2d:45:29:4a:1d:f9:c9:1d:81:79:43:3b:cc:74:9e:35:75:
         6f:12:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:20 2025 by rpki-client