Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
File:                     4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json)
Hash identifier:          AILwOfI2bAGTkK1EllcRQuugA5H1B1poVVtzmPhFcAM=
Subject key identifier:   8A:6B:FC:75:0B:A9:29:17:CA:73:87:FD:8C:17:D4:07:34:F7:99:B3
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       386BD95E8737763FBFD7D05983631D7ED6FF6108
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
Manifest number:          0252
Signing time:             Fri 31 Jan 2025 03:41:36 +0000
Manifest this update:     Fri 31 Jan 2025 03:36:36 +0000
Manifest next update:     Mon 03 Feb 2025 11:26:36 +0000
Files and hashes:         1: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: ndKwf+Y9pTZO9KjhK3EB4suXEVEUU5noyfVbWsYTKuk=)
                          2: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: lGXR2Wpu8IDN2pNkxSbwTjWM9jR4WvwgpXwqEoDU+yU=)
                          3: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: p/OyeHnQLqEcLHtHTH65x3M+Id9XtJUL3KIOQxHaIQQ=)
                          4: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: T0S3XWw9Baqkmd7KJ7AtPtxo+F+4ds2xVtqReHnZLaQ=)
                          5: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: j19CwC6oXE1xABc49ApOJzMUCOc8ikXJ4kRD8QJoOQA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6b:d9:5e:87:37:76:3f:bf:d7:d0:59:83:63:1d:7e:d6:ff:61:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Jan 31 03:36:36 2025 GMT
            Not After : Feb  3 11:26:36 2025 GMT
        Subject: CN=8A6BFC750BA92917CA7387FD8C17D40734F799B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:a9:8e:b4:3a:5c:68:ea:31:d0:1a:75:6d:
                    db:55:46:40:ce:39:82:36:41:68:53:83:c3:86:b3:
                    58:1d:17:6c:95:97:eb:b9:7c:45:2e:fe:50:ee:c0:
                    f8:63:4d:44:bb:71:26:ea:33:2e:e2:42:f0:80:fc:
                    d5:85:30:8e:55:94:12:f7:76:20:f1:aa:91:8b:62:
                    5c:4d:f0:87:11:1a:ef:7f:ca:b0:0a:f0:c3:52:f4:
                    c2:1b:1e:42:95:d2:58:e2:6e:72:0f:57:48:2d:bf:
                    0b:9a:ae:1f:73:cd:c0:b3:d0:2b:37:ae:b4:b7:87:
                    d7:26:b8:42:d6:0b:c8:95:3a:52:56:08:88:e1:dd:
                    f8:9b:9b:57:4c:5b:e0:7c:aa:c8:26:41:3b:51:fa:
                    0f:81:1f:3c:5e:ba:75:45:f3:db:2e:64:ac:6e:e9:
                    6a:81:ac:2b:de:8a:4d:61:b1:0d:f9:c2:c2:dd:47:
                    b2:2d:e9:bb:24:70:da:b1:a0:8f:c0:81:2b:df:0c:
                    d7:4a:59:4c:ab:6a:4c:d6:81:42:47:84:c9:bd:df:
                    ce:48:40:41:71:25:9a:b2:0a:79:c9:b1:93:81:81:
                    ef:0a:83:bd:07:59:ab:9b:d0:bf:a3:0b:42:7c:00:
                    9e:82:d5:42:4e:a4:a8:2d:69:c2:33:21:25:12:7d:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:FC:75:0B:A9:29:17:CA:73:87:FD:8C:17:D4:07:34:F7:99:B3
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:8a:33:05:90:d9:d6:6f:5e:f6:3b:2d:a7:0a:18:4b:f3:
         ef:d9:20:cf:40:3b:05:d9:72:c2:db:e2:85:12:a8:c0:8f:ff:
         e7:52:70:08:2a:d8:b1:7d:97:ea:4f:36:62:5a:95:2f:18:23:
         27:9f:cd:58:2f:d1:f6:6c:c4:66:ec:19:53:fb:c1:4c:d2:a4:
         7a:77:f1:90:52:67:11:6a:aa:2e:f8:21:13:49:6e:87:35:2d:
         a4:90:d9:30:da:20:a6:09:ea:c7:0e:ec:22:0e:58:1d:cf:a9:
         99:7e:e2:29:79:29:4f:e6:62:f3:1c:bd:7f:eb:5d:73:e0:68:
         ae:93:c2:9b:3d:7b:1a:25:05:65:c3:67:4b:61:be:7c:04:67:
         7b:64:08:c0:2d:3f:3d:94:1e:45:7d:a9:58:c9:d3:22:66:cc:
         d4:95:22:6c:67:bc:a9:72:f6:15:ac:6c:1a:21:9c:14:bb:33:
         fd:cd:e9:9e:9b:eb:96:4d:63:ac:dd:f0:06:c7:a0:56:b8:de:
         f6:5d:14:34:85:28:4b:90:19:9b:29:d0:5d:98:17:4b:c3:ed:
         bc:3e:64:48:52:fd:8b:03:1b:c1:ea:f6:a1:5d:0d:ac:ca:33:
         af:b3:b4:50:3e:3d:09:49:1a:56:98:17:cf:7a:42:dd:81:5d:
         dd:4f:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----