Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft
File:                     1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json)
Hash identifier:          N8PA0DshGu0VZVijF6iuGKx9fHuZAR5zGDe7B9i3Je8=
Subject key identifier:   F0:DB:78:68:85:C0:C7:7F:02:1E:EF:BE:EA:92:9D:79:29:57:3E:DA
Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED
Certificate issuer:       /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED
Certificate serial:       41D6FC1F777D289D57FED774F723CD5DBCB26B36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft
Manifest number:          04C0
Signing time:             Fri 28 Mar 2025 10:30:02 +0000
Manifest this update:     Fri 28 Mar 2025 10:25:02 +0000
Manifest next update:     Mon 31 Mar 2025 14:38:02 +0000
Files and hashes:         1: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: RhRB8C4MI3i1rvMFcRHBhimcmjNXXD7GwiVd8iJ+S5M=)
                          2: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: 5sv2BLrXUR7pP0OPvmvfvyofoGM5DTSkOAndTrP63eU=)
                          3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: 3PS0oz/pScPQzie5Mti3z4hmWgtkSmXElwu/lAFPvxo=)
                          4: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uDKGCmtuAh53SMb+C/Ryy+REf5CV1In4kTPm6c1f6Xc=)
                          5: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: WidEb5Qk7hi5vGeR2fyuZGCUmZH1CLGfw5gxZCIPVm0=)
                          6: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: cb1+UtU0B63HE5/QKD2FCjn1IpWHPQJZXXC6USKJKHE=)
                          7: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: imJTliY28qNv1lKNAZDzzIlAGldGiVIuuxF6gl7nan0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d6:fc:1f:77:7d:28:9d:57:fe:d7:74:f7:23:cd:5d:bc:b2:6b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED
        Validity
            Not Before: Mar 28 10:25:02 2025 GMT
            Not After : Mar 31 14:38:02 2025 GMT
        Subject: CN=F0DB786885C0C77F021EEFBEEA929D7929573EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:c4:49:a8:f8:a6:c0:d2:ed:6c:7e:32:85:
                    36:01:18:43:cd:31:40:13:43:b7:61:73:9d:04:02:
                    53:b6:0e:86:ea:ec:85:cb:af:7a:1d:7b:f8:ad:2e:
                    be:cc:58:12:83:19:97:81:80:d8:18:8e:6d:24:7d:
                    30:2a:41:be:1c:e6:fd:b5:0e:38:4f:f0:03:32:cc:
                    da:60:72:38:6d:c5:56:5c:3d:e1:cd:5f:04:7b:6c:
                    b4:0a:b7:b0:e2:59:57:d7:df:29:11:bc:32:a2:f9:
                    ff:73:a7:fa:79:73:6a:44:d0:d4:97:c7:ca:0c:76:
                    27:40:77:e3:4e:ad:c1:0b:74:a9:28:a3:63:a0:af:
                    6f:df:8a:1f:49:cc:0e:1c:f0:62:92:24:b6:d0:e8:
                    b4:5d:23:b4:6a:b0:ec:17:13:4d:5f:9d:63:f2:a8:
                    8f:94:70:33:c0:38:52:0b:00:ee:95:7d:4b:e2:d4:
                    68:2c:a9:8d:5c:f3:21:47:46:2c:78:31:20:93:b4:
                    50:06:eb:25:b7:61:28:94:81:3d:31:66:e9:18:6d:
                    05:2b:0c:c9:f0:14:9c:25:46:28:58:9a:e8:4c:65:
                    75:14:d4:29:6c:e1:82:c4:68:57:a1:59:09:30:31:
                    32:32:00:d4:7d:b0:92:a8:78:46:a8:5d:5d:60:59:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:78:68:85:C0:C7:7F:02:1E:EF:BE:EA:92:9D:79:29:57:3E:DA
            X509v3 Authority Key Identifier:
                keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:e8:d8:1c:87:d3:e3:e3:92:15:29:d1:59:7a:5a:84:b0:
         cd:dc:b3:86:8a:0f:57:3c:4d:1a:d1:14:6b:08:32:42:1a:82:
         dc:e6:92:1c:01:b0:4f:51:f5:8e:50:c4:59:5f:9e:e8:00:5f:
         77:0e:f3:99:c1:af:58:28:d2:5c:34:b6:b9:bf:c5:64:f7:e5:
         a6:ea:63:42:b1:ca:19:8e:c1:17:62:72:e1:11:bb:19:a3:3c:
         2b:94:4b:23:a3:e7:d5:38:95:8c:e9:cd:c7:06:e7:5b:f5:5b:
         fd:e7:3f:80:5c:d8:e5:3b:f4:3b:2f:28:b5:81:2e:b1:8b:e1:
         7a:e8:a1:a2:17:c2:55:6e:5f:ab:e4:d7:44:94:8b:64:ea:95:
         84:c1:cf:07:f6:53:b4:32:e4:7e:d6:34:93:26:9d:f0:0d:b1:
         f8:50:ac:a8:d3:4f:15:fa:c6:c7:b3:11:4e:3b:96:af:20:b8:
         c3:a1:2c:1d:38:bf:8b:68:84:aa:a6:ff:12:14:af:99:00:44:
         59:ef:58:80:f8:83:bb:66:d3:5b:a0:77:62:22:cc:07:17:61:
         3c:1d:fe:6c:c6:5c:cd:75:5a:a9:c2:26:67:79:4c:ff:bb:73:
         91:4b:de:14:0d:46:5f:63:5d:59:b0:0e:01:05:f3:10:73:ca:
         ea:4d:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:46 2025 by rpki-client