Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft
File:                     523EE387D3C00A87B7E355ABF1EE524AADF74148.mft (raw, json)
Hash identifier:          djiImp4XdKcTkgCEviuOjTXNOfe17Wv8cnm9duBkcqM=
Subject key identifier:   DC:F7:45:D3:8D:91:9D:5B:D6:91:20:05:6B:C5:27:11:C0:1F:D3:50
Authority key identifier: 52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48
Certificate issuer:       /CN=523EE387D3C00A87B7E355ABF1EE524AADF74148
Certificate serial:       65BE4717C5C2027B1F59B65C7292E98E31B256D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft
Manifest number:          04A3
Signing time:             Fri 31 Jan 2025 17:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:54 +0000
Manifest next update:     Mon 03 Feb 2025 21:41:54 +0000
Files and hashes:         1: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: S+MMrSxkm+20Gx180EdlH1YNBkEDPrj8PEBtJ4+Q9J4=)
                          2: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: cZVBXXGJKiJCT/zUIwExIpoODQYqK0TgIQSfYHzcYPg=)
                          3: 523EE387D3C00A87B7E355ABF1EE524AADF74148.crl (hash: Hc5ZaYSgfaZmPD1IaSijkrhBUaqljmkvIaHaVKIAIn8=)
                          4: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: UWqkjfovjwl/QKGqzpJlq4xcCareXuzDyb/5yleHEFU=)
                          5: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: QEq8jNx2qgo9wFvMjpQwwTDlq5Z+M7FLAg6t2ZLkWJY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:47:17:c5:c2:02:7b:1f:59:b6:5c:72:92:e9:8e:31:b2:56:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=523EE387D3C00A87B7E355ABF1EE524AADF74148
        Validity
            Not Before: Jan 31 16:55:54 2025 GMT
            Not After : Feb  3 21:41:54 2025 GMT
        Subject: CN=DCF745D38D919D5BD69120056BC52711C01FD350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:e2:44:66:1c:a7:18:36:15:d3:e6:bb:75:
                    e7:f8:1c:6c:25:b5:7f:9c:3b:ea:1d:f6:54:92:76:
                    12:c9:fe:37:60:85:73:21:5a:df:ff:a4:a9:86:a9:
                    69:ac:1e:9c:85:70:c7:7f:48:06:b3:54:a9:9f:56:
                    65:50:04:11:d0:a4:05:a2:e6:89:1e:e7:2e:0e:51:
                    6e:c2:06:32:06:87:74:07:da:ce:ed:85:60:20:66:
                    66:23:06:a6:c4:d2:3b:18:d8:bc:a6:d3:22:a6:e3:
                    a9:d2:09:5b:c6:48:2b:76:24:b8:da:c4:d8:6c:d5:
                    76:aa:ea:65:4f:09:f9:22:c7:f4:c6:9a:e4:99:0d:
                    f8:01:75:3c:0c:fb:46:76:01:ed:19:50:87:f1:4c:
                    0b:b6:a3:bd:f1:8f:ff:ab:86:f1:41:b2:d2:78:67:
                    2e:5a:31:68:c6:a6:fc:6a:0c:c3:db:b4:21:12:a3:
                    39:25:9f:ec:d5:36:bc:55:73:72:0d:aa:00:4d:db:
                    9a:ec:68:8c:c8:4f:06:d3:f6:40:9e:d1:32:15:96:
                    6e:c6:6f:c0:ea:09:d0:b2:66:bd:34:19:04:a6:bf:
                    70:3b:1e:93:9a:45:9a:e5:80:d5:5b:9f:e6:d8:e5:
                    0d:3f:79:06:dc:bb:82:28:dd:cf:cd:55:b9:0e:e2:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:45:D3:8D:91:9D:5B:D6:91:20:05:6B:C5:27:11:C0:1F:D3:50
            X509v3 Authority Key Identifier:
                keyid:52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:31:4b:1a:f4:6b:46:59:5a:3a:01:ea:f5:dc:6a:d5:7a:8a:
         99:d8:34:5e:ca:bd:ab:77:3e:e3:6a:c1:8c:b4:28:52:4e:6c:
         27:d2:14:0a:3d:a7:75:96:79:3d:2a:c3:45:33:f7:79:00:95:
         fc:ca:8c:40:37:bd:3d:b4:d8:74:d3:a0:8c:2b:12:e3:14:5c:
         10:88:eb:4d:da:65:6b:fd:ac:87:ec:fa:45:c2:28:a2:7d:be:
         94:d7:eb:25:4d:9f:35:9d:ff:5b:f7:27:6b:5f:1e:9a:07:c3:
         82:5f:90:bb:4a:a8:fc:9f:84:67:c0:af:27:e6:7f:a7:4f:a5:
         d9:fe:51:55:bf:d4:eb:15:a5:09:70:5d:16:b5:24:1d:29:52:
         f6:a5:93:16:ab:4b:98:3e:57:d0:c4:26:b9:b0:ee:0a:4e:51:
         8d:7d:b5:6d:38:63:83:9a:45:0e:fd:83:b8:26:04:94:46:cc:
         a1:63:b7:6c:ce:b2:57:ed:99:a2:69:0b:fc:66:1b:bc:61:54:
         82:60:c8:77:00:b2:6c:61:85:73:07:b2:0e:f9:cd:90:fa:8b:
         e2:82:57:2b:3d:29:48:8d:e9:77:1f:9e:98:5a:76:ad:e8:57:
         c7:88:f1:ea:c7:85:69:0a:1c:bb:2f:67:6d:22:18:13:f9:da:
         be:4a:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----