Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
File:                     AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json)
Hash identifier:          ekQCUfy4QDVs54YnXoGrNrC9DqUS9q26GXGtf4+Y0rw=
Subject key identifier:   37:A7:C2:8D:CB:D3:79:05:B7:83:E7:E3:B7:CE:A6:05:5D:97:7B:5B
Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
Certificate issuer:       /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Certificate serial:       174730F92435C965F91330641741345B085CB856
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
Manifest number:          036E
Signing time:             Fri 28 Mar 2025 23:22:07 +0000
Manifest this update:     Fri 28 Mar 2025 23:17:07 +0000
Manifest next update:     Tue 01 Apr 2025 00:49:07 +0000
Files and hashes:         1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: YqczU6bQBvNn/PqPGhZHBI0QfeXXY75kYY4Qo2VDwac=)
                          2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:47:30:f9:24:35:c9:65:f9:13:30:64:17:41:34:5b:08:5c:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
        Validity
            Not Before: Mar 28 23:17:07 2025 GMT
            Not After : Apr  1 00:49:07 2025 GMT
        Subject: CN=37A7C28DCBD37905B783E7E3B7CEA6055D977B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:16:9e:d2:1c:73:81:b4:09:c4:a2:af:5f:
                    e5:61:e0:24:9c:a0:6e:e6:f1:a5:74:ce:e7:67:ab:
                    b6:57:56:28:6e:a3:37:93:ee:56:df:fa:f4:07:55:
                    a8:e5:79:a0:96:18:46:1d:29:bc:5c:78:a2:35:21:
                    24:f0:09:05:be:1b:28:af:bd:fc:a1:af:b7:f9:0e:
                    cb:88:82:5c:ab:4b:00:23:b9:b0:ea:c5:4f:ed:1c:
                    62:47:c4:51:6f:a6:52:f5:bd:31:38:70:ce:f2:52:
                    d8:23:b0:a9:d9:3d:12:ff:22:08:60:93:fa:30:b7:
                    0c:25:f9:22:ec:81:36:d6:d7:cd:b4:2d:83:bc:8a:
                    03:ce:06:76:de:46:53:a1:b3:38:bf:8f:c8:fa:71:
                    ef:8f:9d:ed:19:1a:0c:51:ee:6f:85:de:56:62:30:
                    a1:8f:1d:f3:1b:0e:3e:53:21:8f:31:8c:b6:2c:39:
                    ed:91:44:5e:be:53:13:3a:9a:9c:43:7c:96:94:4d:
                    56:74:51:1e:8b:54:f4:77:e8:5d:55:fb:09:32:51:
                    df:15:4f:45:19:48:d0:15:08:8c:75:95:94:e4:ae:
                    ad:08:3d:48:47:1b:ea:d9:01:44:4a:e7:93:75:fe:
                    fc:93:46:01:78:e3:39:86:a6:a2:07:b7:11:d5:de:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A7:C2:8D:CB:D3:79:05:B7:83:E7:E3:B7:CE:A6:05:5D:97:7B:5B
            X509v3 Authority Key Identifier:
                keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:de:09:f9:28:c7:7f:76:54:78:d7:25:7e:c0:f8:8d:1d:
         a7:33:67:99:78:ff:a0:e8:6e:2f:a6:4d:c2:3b:36:e5:3a:d0:
         03:dd:71:bd:0a:9a:54:1c:94:86:f6:4c:e6:64:cd:4d:92:9d:
         42:d4:e3:47:6f:b6:73:a8:a9:6b:a5:23:01:80:2c:ec:17:e8:
         28:74:cd:95:36:c4:63:eb:85:8f:41:21:63:f2:fa:8e:c2:87:
         be:b2:7d:18:55:39:d2:3a:77:14:7d:78:c4:f7:eb:ad:a9:85:
         9f:a2:50:ae:69:89:fc:e2:15:dc:a2:ab:fd:4f:c9:dc:5e:13:
         a5:e1:83:f6:73:2b:78:7e:2e:74:26:cf:a6:18:7f:32:6a:d5:
         9e:da:cc:b2:d2:78:37:e8:2f:a9:af:6b:4e:67:28:b0:50:02:
         39:d0:72:c4:52:84:84:24:4a:ea:a2:71:2f:52:ef:ac:ad:af:
         be:d8:3b:c6:69:30:1a:9f:98:51:01:9f:a3:7d:d9:b0:c3:88:
         cf:0a:21:3a:ad:4a:71:a8:e4:5f:4b:6d:23:a0:76:8f:d5:49:
         ae:94:81:e7:33:3b:30:29:e3:8c:d9:f7:91:5f:aa:44:62:d1:
         28:0c:35:a0:3c:35:6f:4d:07:4c:bc:e8:26:24:78:00:5c:50:
         fb:e7:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:49 2025 by rpki-client