Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
File:                     1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json)
Hash identifier:          lA7Vqwc/kfsMHEtyB7ptf/kRPkp4N8mt37ilVkxSgME=
Subject key identifier:   E3:EF:8C:25:6F:0E:2C:33:64:B3:8C:8D:33:4D:9C:26:A3:75:C1:8C
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Certificate issuer:       /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial:       411861C2DE3DB4278037E22BA9C3452333C074F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
Manifest number:          01DA
Signing time:             Fri 31 Jan 2025 09:21:43 +0000
Manifest this update:     Fri 31 Jan 2025 09:16:43 +0000
Manifest next update:     Mon 03 Feb 2025 11:12:43 +0000
Files and hashes:         1: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: omQCe9i6UAQabn658NY546AFhSlSDQxwejMwWzEAolo=)
                          2: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: VckbnK/eLgHGiRHsTh6PR+3QwYG+kTofCzgLxjt98Bg=)
                          3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: 132Kizc+R6ps/hT6AogJkCilm9HX7+ORPphZ8hVhLQ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:61:c2:de:3d:b4:27:80:37:e2:2b:a9:c3:45:23:33:c0:74:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
        Validity
            Not Before: Jan 31 09:16:43 2025 GMT
            Not After : Feb  3 11:12:43 2025 GMT
        Subject: CN=E3EF8C256F0E2C3364B38C8D334D9C26A375C18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:33:1e:10:ec:7f:df:1d:f4:95:97:e9:6f:fc:
                    7e:4e:68:89:87:ed:ac:74:25:66:01:0f:1d:82:fe:
                    66:7d:8c:35:b1:5e:9f:f0:e3:9c:47:6a:93:32:f4:
                    e2:f8:43:e9:01:b0:e0:c6:2b:19:ea:bf:3b:4c:84:
                    5a:ea:2e:ba:3d:5c:63:94:b5:44:e9:41:f6:09:bf:
                    9b:ab:9e:d9:14:38:54:7c:08:1b:8c:d5:94:1c:92:
                    32:fa:a2:c0:24:14:ee:81:03:7d:30:ed:df:39:df:
                    2f:b2:a7:58:fb:6b:53:17:8b:dc:31:df:28:2a:df:
                    d0:04:4c:63:84:36:97:48:e5:ea:5c:45:8b:4b:b5:
                    1b:35:84:f7:31:e7:7c:aa:07:fa:48:bd:2f:19:03:
                    e1:b2:4a:af:d7:76:09:90:bf:83:a3:0a:27:78:af:
                    86:de:a4:df:ba:26:3f:51:42:9c:99:2d:64:f7:c3:
                    2b:da:40:9c:d3:41:cc:8d:be:ff:0d:1c:c8:d1:80:
                    e6:5c:d0:36:2d:50:aa:01:be:b1:fd:d0:01:e0:f9:
                    ba:fa:2f:6a:a4:65:78:a4:db:fc:00:e6:75:bf:e4:
                    55:20:05:dc:c5:42:72:25:3b:bd:8c:74:2b:a6:0b:
                    ea:0d:db:90:f0:34:33:4c:e5:b2:a0:b0:4a:72:f7:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:8C:25:6F:0E:2C:33:64:B3:8C:8D:33:4D:9C:26:A3:75:C1:8C
            X509v3 Authority Key Identifier:
                keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:56:ba:1e:0f:11:5f:ca:e2:6a:59:9c:fe:df:4c:17:4b:
         6c:27:49:45:3d:b4:89:4a:0a:df:77:6c:99:93:af:a9:73:6a:
         14:d5:be:95:98:a3:90:b9:5d:f3:8b:06:7d:1e:ff:d4:e3:12:
         d7:05:bc:1c:23:ad:f5:bd:36:33:34:9b:15:92:06:30:da:65:
         c5:0f:65:5b:c2:23:5b:f3:63:b5:25:34:09:b0:95:c3:37:e4:
         9b:0d:6c:9b:91:e5:fc:a1:a6:e7:b1:dc:ed:b8:8b:38:5e:33:
         63:f4:7f:04:84:28:02:31:4a:b6:26:c6:6a:17:4c:8d:39:f1:
         d0:e9:ec:3a:07:8a:5d:78:94:3f:23:45:b0:3a:04:77:b2:68:
         97:51:f9:63:93:7f:ef:32:5a:1b:bd:cc:91:f8:12:46:8b:aa:
         06:24:19:2a:cc:16:0b:b5:c1:ad:ba:8a:d5:fe:91:f4:c5:e9:
         62:7b:8b:09:3c:8a:8f:57:5d:7e:cd:0e:48:2b:9c:91:f2:86:
         b7:33:19:68:0a:4d:81:0f:17:8a:2d:02:40:52:84:f5:d2:b2:
         54:ba:63:bf:93:d3:cd:09:20:82:33:85:4e:db:f6:ba:2c:cf:
         f7:25:4b:a7:fb:6c:4c:ce:e4:bb:82:88:c6:4f:e2:79:78:73:
         d5:e1:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----