Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File:                     7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier:          ce1gWnaE1SLbGTd1CLSOoDS+IjZ9tLN5PrPkobclk1o=
Subject key identifier:   89:F0:3F:4A:29:A7:1D:55:36:F2:71:3E:9C:17:E8:26:1F:BF:2B:76
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       15A12281CEA7A9FADDE9C9855326F8A06EF889B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number:          D2
Signing time:             Sat 29 Mar 2025 09:32:51 +0000
Manifest this update:     Sat 29 Mar 2025 09:27:51 +0000
Manifest next update:     Tue 01 Apr 2025 13:22:51 +0000
Files and hashes:         1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: yB5baVK+EG7wFKJdTUYSuezENA6foLDJTAFbdnZjL6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:22:81:ce:a7:a9:fa:dd:e9:c9:85:53:26:f8:a0:6e:f8:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Mar 29 09:27:51 2025 GMT
            Not After : Apr  1 13:22:51 2025 GMT
        Subject: CN=89F03F4A29A71D5536F2713E9C17E8261FBF2B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:ef:63:75:77:a8:2e:dd:13:ea:7f:23:6b:
                    49:a3:9c:82:55:80:23:d9:22:44:e6:71:59:f1:d2:
                    8d:39:37:03:35:28:27:31:4c:bf:a7:b6:42:84:22:
                    0b:16:1c:e2:fe:79:1a:c3:31:36:dc:da:62:c9:52:
                    43:19:d1:70:e3:45:d6:f6:91:37:50:4f:c7:7b:77:
                    95:06:46:a4:4f:4e:a7:a0:48:b3:cf:ca:cc:c8:b4:
                    bd:48:cf:7f:bc:3f:fa:40:af:05:61:64:af:3b:97:
                    fb:ca:84:53:7d:fc:bf:ed:a2:3d:d2:3e:3a:e3:e0:
                    f1:78:05:67:a9:6d:73:95:a4:d8:d9:91:41:6e:08:
                    1d:64:f3:03:ec:92:7c:0c:a7:6c:22:b5:c5:97:36:
                    f3:6b:f9:f0:3c:4f:38:e8:59:cf:f5:ac:aa:86:6b:
                    6f:e8:58:11:7c:f6:79:7a:1f:5e:10:8f:ad:21:0f:
                    bc:f8:2b:83:fe:9c:ae:62:1d:77:3b:f8:a1:3f:14:
                    14:3b:20:21:4c:10:1b:47:4e:17:2c:f1:f7:32:f2:
                    d6:81:c9:71:02:bc:cc:b9:72:9f:a4:a8:4a:70:a2:
                    6e:61:b6:08:32:cd:e2:57:91:00:68:ee:03:40:f8:
                    8b:5c:24:f1:e4:2a:ae:53:f2:25:1b:57:ac:71:2d:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:3F:4A:29:A7:1D:55:36:F2:71:3E:9C:17:E8:26:1F:BF:2B:76
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:55:91:16:38:47:74:be:3a:6f:92:2b:37:95:77:f3:5d:
         74:89:70:4f:d5:ec:ad:82:e6:c6:85:7e:10:b8:5f:cf:d5:c1:
         0e:7b:a5:bf:14:0c:1f:1a:5a:97:ce:87:87:c6:e8:69:b2:e6:
         5d:87:5d:a2:84:33:3c:45:0f:17:5c:de:11:ea:f1:05:b5:99:
         6e:b8:ca:33:e6:0b:f6:65:aa:5c:ff:98:03:0d:3e:60:c3:58:
         1c:f8:ee:10:7c:6c:07:1e:66:4d:c5:56:9e:05:57:1a:b8:96:
         3d:30:c7:c8:a6:28:b0:eb:04:53:39:d8:2a:cc:39:5e:af:4e:
         93:21:8b:6d:47:fc:f2:a9:e6:ee:12:1f:a6:ac:25:ee:82:45:
         9f:f9:d6:d5:ec:7b:66:0b:6e:46:6e:9c:2d:de:58:33:98:03:
         3a:26:49:15:19:15:3c:58:bf:6f:fd:0e:c0:0f:08:97:94:2c:
         df:56:28:e5:29:08:64:f4:54:1a:c2:1f:40:cc:cc:9a:b8:b4:
         29:a8:f7:43:04:a2:ec:dc:66:f4:de:31:56:aa:2d:02:38:08:
         d6:49:6c:4a:3d:0f:a2:68:9f:9e:60:08:76:ec:0c:ce:20:e8:
         b2:01:7c:c2:02:7e:a0:1d:0a:16:5f:aa:48:dd:05:8a:c4:a6:
         10:fc:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:16 2025 by rpki-client