Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
File:                     687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json)
Hash identifier:          FoI9fNH8mdtxGpxU2nKpYXIwHwsEnVJDSAzqdEKNPVY=
Subject key identifier:   71:FC:18:E6:0F:AD:C9:E9:69:E4:65:71:AC:C7:60:84:17:2C:52:BF
Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C
Certificate issuer:       /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
Certificate serial:       509AE737FBF59B793A2FD5830C3254C361B5CF18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
Manifest number:          033D
Signing time:             Fri 28 Mar 2025 20:21:30 +0000
Manifest this update:     Fri 28 Mar 2025 20:16:30 +0000
Manifest next update:     Tue 01 Apr 2025 08:20:30 +0000
Files and hashes:         1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: tSzBp2wFqGvwHe+ZxKCEZWj+nBENPb7hQOt2WQP9TWs=)
                          2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: DS0hCq0koHOBoxtvccNH1QeGGPeh5jNq/29MUNxhn+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9a:e7:37:fb:f5:9b:79:3a:2f:d5:83:0c:32:54:c3:61:b5:cf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
        Validity
            Not Before: Mar 28 20:16:30 2025 GMT
            Not After : Apr  1 08:20:30 2025 GMT
        Subject: CN=71FC18E60FADC9E969E46571ACC76084172C52BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:41:70:31:c1:2c:35:da:13:ca:69:de:6f:
                    4f:77:bf:b0:51:dd:ae:49:c8:37:f8:52:59:8b:ce:
                    58:09:a4:c0:a1:ee:b3:ac:f0:c9:81:2d:5f:04:0e:
                    e2:63:ad:7e:77:5c:65:d8:82:59:62:fd:dd:d9:18:
                    53:41:e3:6a:f1:c1:2c:56:b0:63:63:95:cb:5e:d0:
                    3a:c4:df:34:3e:73:24:19:3d:79:89:ba:ad:5b:08:
                    46:74:4f:df:31:60:32:32:93:03:89:a4:34:00:31:
                    09:82:5b:b0:a3:03:93:35:6b:04:bd:17:5a:47:ad:
                    9e:cb:3a:be:b2:cd:b3:ab:4f:2c:2f:5d:d7:61:24:
                    7e:d7:d5:f9:32:ab:ec:31:22:f3:f1:00:1b:29:bc:
                    2f:15:d3:36:20:78:2a:35:c4:4d:95:d7:5d:4e:5c:
                    00:3d:c6:88:ce:d3:b0:44:86:4b:a3:6b:a1:77:f8:
                    e8:74:30:e2:ec:31:15:fb:51:80:1e:89:38:99:a9:
                    c8:15:ce:cc:a2:90:ea:29:03:a9:c9:88:11:e0:07:
                    8f:ff:0a:6e:fc:f2:e7:38:c7:a5:ac:9c:a8:9a:2a:
                    5b:61:6d:1d:01:f8:5f:36:68:9d:ea:13:8e:98:cb:
                    77:f3:18:20:fe:ec:24:c5:10:70:7e:19:c1:57:2c:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:18:E6:0F:AD:C9:E9:69:E4:65:71:AC:C7:60:84:17:2C:52:BF
            X509v3 Authority Key Identifier:
                keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:f9:cd:51:d1:e4:f6:23:4a:f7:60:b7:bf:3e:12:10:6c:
         48:06:45:f7:0a:2e:79:64:e9:44:2c:92:d3:bb:85:7a:b7:08:
         8f:37:cb:78:5b:d6:ad:47:5a:b5:da:19:f6:3d:81:8e:9b:08:
         d7:22:55:fe:02:27:e1:46:1d:28:2f:79:de:04:3c:00:34:22:
         54:f1:82:eb:fc:06:65:5c:c2:6a:0a:1a:89:f1:53:0f:52:48:
         cc:14:38:99:77:11:de:08:da:69:b3:0d:4d:bb:f4:08:2e:b9:
         85:c9:87:a6:67:2a:6f:44:d7:87:33:cf:61:20:bf:6c:c2:65:
         ed:54:da:2f:da:dd:b9:08:33:a6:a4:e9:91:f3:bd:6e:55:22:
         ff:e3:f4:29:0b:b9:14:a8:47:5c:5a:b1:19:58:b9:16:f1:ba:
         34:3f:5d:44:1f:98:f1:6d:27:47:ce:93:aa:28:c6:1d:85:f2:
         e1:cb:8b:d4:83:4c:cd:d4:2d:7b:09:24:4a:a5:f9:bc:f3:f3:
         83:2d:0c:95:f6:da:be:56:75:17:be:fb:04:dc:35:12:6c:be:
         61:54:76:5f:46:b9:fe:5c:ce:c5:09:e1:4c:b5:ff:be:49:fb:
         fe:82:7b:fc:f4:ea:99:f9:92:5d:29:2e:48:c6:0a:3e:7d:e0:
         17:c3:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:40 2025 by rpki-client