Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
File:                     821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json)
Hash identifier:          zJL73lnv0TExXuEh3VqfiX8Ni70SA4mDNnEYgvQMiWI=
Subject key identifier:   71:7A:63:F2:86:B0:7D:0C:E1:3D:C3:2D:25:45:5A:DF:B6:36:A0:B6
Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
Certificate issuer:       /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Certificate serial:       426FDF2D7C1510962E78EBFEADC478A2D9C7B52D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
Manifest number:          01F1
Signing time:             Fri 28 Mar 2025 21:31:39 +0000
Manifest this update:     Fri 28 Mar 2025 21:26:39 +0000
Manifest next update:     Mon 31 Mar 2025 23:14:39 +0000
Files and hashes:         1: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: O6mcNqFGUKoXPAXAaTNGJf2XpVfyBv0t3Gtn3V+6lKE=)
                          2: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ncuNmuDMRCz7XEGjG+8p/qjKUpvp2YtlNc4JXvP3iGg=)
                          3: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=)
                          4: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: wiA3P7x0r1LRwpDOpsmSb0vcmO75u92ylb797RbesUU=)
                          5: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: YF6vJXMVtUVK6CmNTZeLfmthP1D0nB1ofgHbuXDKxvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6f:df:2d:7c:15:10:96:2e:78:eb:fe:ad:c4:78:a2:d9:c7:b5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
        Validity
            Not Before: Mar 28 21:26:39 2025 GMT
            Not After : Mar 31 23:14:39 2025 GMT
        Subject: CN=717A63F286B07D0CE13DC32D25455ADFB636A0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:c7:30:cb:1b:79:5e:8e:0a:66:8e:cf:3b:
                    d9:b5:0d:3f:4d:33:4c:cd:d7:7d:4c:ae:62:f3:0a:
                    14:cf:f3:16:a7:a3:06:9d:42:38:0f:be:11:36:be:
                    ad:5f:d3:96:c7:85:3b:c8:2a:bd:d1:cd:62:3f:72:
                    ac:af:75:fd:80:be:d3:93:92:8c:a4:ca:63:6a:8d:
                    14:24:72:51:01:2a:ad:4a:30:b0:79:bf:d3:6a:b2:
                    fc:37:63:23:ae:7a:2a:bc:eb:58:68:53:4a:db:01:
                    d4:88:99:e1:f8:d4:43:92:28:90:6d:aa:cc:aa:d1:
                    17:19:93:6c:85:4a:cb:b1:b9:a4:2c:cf:b7:41:58:
                    cb:f1:68:da:9e:e0:30:a8:f3:b2:a9:36:8a:75:99:
                    c6:1b:a0:6e:81:78:05:a5:eb:a9:25:fb:63:47:ba:
                    60:5b:c6:88:ad:eb:3e:9c:27:59:6a:eb:fe:23:5b:
                    98:48:67:fc:76:55:79:9d:66:a6:28:fb:e5:03:86:
                    14:20:aa:2c:94:ea:93:97:55:3e:3a:8d:21:d1:67:
                    b7:54:8e:1a:21:61:8b:0e:08:e0:35:53:f5:22:c0:
                    ad:43:49:75:6c:a1:00:0b:18:6e:5d:17:68:a2:c5:
                    00:27:58:a6:59:87:2b:a9:79:df:31:8c:e4:94:17:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:63:F2:86:B0:7D:0C:E1:3D:C3:2D:25:45:5A:DF:B6:36:A0:B6
            X509v3 Authority Key Identifier:
                keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:c2:66:78:8c:81:f3:c4:40:2d:c8:3a:e7:83:d3:d2:30:
         29:93:97:cb:bc:f2:e3:f1:4e:38:ae:ef:c3:e4:bf:bd:ff:0b:
         f2:d0:04:f6:e7:95:3f:85:be:2a:d0:95:98:8f:2a:06:00:a1:
         b8:5f:9a:8d:e3:66:91:6f:d8:4c:ec:aa:a3:f2:27:f7:aa:95:
         ad:05:b3:f8:c7:7b:7e:58:3c:59:31:0d:37:39:58:8d:20:0f:
         20:00:5b:0b:f2:ff:27:e9:74:7f:d8:1b:7c:63:8c:d2:6b:c1:
         96:19:c3:54:dd:91:82:9a:32:b7:2a:f9:b4:b3:1f:73:63:87:
         97:1e:45:cf:3a:23:7b:0d:ba:66:76:6c:89:02:23:cb:45:06:
         51:64:0e:6d:8d:68:ca:fa:20:ee:1a:78:40:f1:a1:00:03:48:
         7b:ca:64:2b:52:ad:be:14:a4:dc:87:b1:a2:56:bc:5d:3d:7e:
         3d:fb:d7:81:55:28:ba:8d:fe:b9:90:86:f3:f9:e4:63:27:4b:
         82:53:f2:7e:be:72:fc:e9:55:c2:8a:c4:ea:f5:d2:01:06:3a:
         52:27:32:78:07:30:68:e1:bd:e4:66:f0:60:45:29:3b:51:f4:
         34:98:04:4b:aa:d1:08:ab:6e:52:6b:7d:6b:cf:3e:2a:83:e7:
         e8:c3:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:43 2025 by rpki-client