Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
File:                     053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json)
Hash identifier:          292CCSLCd0JLyivzTJwmx17vlh5v6E484cLTUg4Zo+Y=
Subject key identifier:   CB:4D:13:52:B7:FE:20:8B:A8:5A:72:7C:21:C1:68:80:AB:91:C9:62
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Certificate issuer:       /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial:       7DF3F24BDCA8163C441CE103AB6F9D2B7045287D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
Manifest number:          0104
Signing time:             Wed 29 Jan 2025 16:42:05 +0000
Manifest this update:     Wed 29 Jan 2025 16:37:05 +0000
Manifest next update:     Sat 01 Feb 2025 23:29:05 +0000
Files and hashes:         1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: IFF8MMQl7QrAWHNWN8IJDvMcW+S+e7mDZB2ax29c+ck=)
                          2: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: 5CmXXNzMnjfbPUr6PXdytY2CTAhgwTVuyzm5SXwASyU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f3:f2:4b:dc:a8:16:3c:44:1c:e1:03:ab:6f:9d:2b:70:45:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
        Validity
            Not Before: Jan 29 16:37:05 2025 GMT
            Not After : Feb  1 23:29:05 2025 GMT
        Subject: CN=CB4D1352B7FE208BA85A727C21C16880AB91C962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:49:70:5b:5d:8c:ee:f5:fa:3a:92:bd:f2:
                    f2:a8:69:3f:9f:48:1a:f5:19:4f:0e:fb:b2:f7:bf:
                    d4:c8:8a:2d:b6:af:ea:75:7c:f4:26:b0:8c:7f:c2:
                    70:30:0a:2f:8e:0a:3c:fb:2d:13:4c:71:61:81:e5:
                    0e:04:6f:e8:38:46:c9:7b:67:7b:20:a6:42:7e:98:
                    74:8e:81:32:51:0d:cf:c1:3a:0b:d0:00:74:25:28:
                    cb:f2:e0:4c:a2:66:55:0c:ad:c7:00:a5:18:61:0a:
                    11:32:82:fd:82:3d:ec:76:0f:86:27:34:b0:d0:e8:
                    6c:18:ba:ae:a7:31:ec:1a:f1:1a:62:fe:07:2d:0d:
                    1c:09:da:aa:9c:d5:a1:1a:f7:34:58:30:db:51:eb:
                    e2:42:da:f1:db:f2:f2:d9:6f:81:6c:9b:29:0d:0e:
                    9f:c2:d1:e5:da:fb:ca:35:43:ae:ca:d1:11:f1:dc:
                    bb:5e:17:91:6a:79:bf:25:13:57:6c:22:02:5f:90:
                    d3:52:35:9b:cf:4f:8e:e6:3b:d2:af:d0:d8:bf:e8:
                    6d:23:3b:08:a7:c4:23:83:1c:e0:43:c2:e3:13:3c:
                    4d:75:93:81:43:0d:49:1c:b6:c8:40:dc:ac:92:a1:
                    36:1c:84:23:6e:f8:ef:dc:c4:37:fa:5a:36:57:13:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:13:52:B7:FE:20:8B:A8:5A:72:7C:21:C1:68:80:AB:91:C9:62
            X509v3 Authority Key Identifier:
                keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:23:24:39:19:94:65:21:17:03:54:b1:ca:95:b4:43:f8:c1:
         19:f7:c9:82:b2:eb:56:8f:cc:75:30:ae:60:f3:69:ba:bb:b2:
         ce:ec:82:f2:76:c6:e4:e6:70:0f:cb:d5:8a:4b:c1:ca:bb:87:
         1d:b7:db:bc:39:64:49:92:f8:b9:78:ea:f4:20:3e:af:7f:3d:
         ab:f2:86:66:47:83:a1:70:34:7f:91:4b:16:77:f6:55:a1:48:
         99:14:1f:dd:2b:5b:cd:b2:77:86:ac:5b:49:f7:75:6e:e7:9c:
         cf:27:72:4d:cd:a3:19:ca:73:5a:0d:62:bc:e6:4b:e4:55:3c:
         a0:d8:d6:40:35:ed:a8:89:cd:f3:7e:f6:a4:4c:02:37:84:40:
         a9:63:8e:e4:cc:75:2a:f0:15:7c:9b:c6:4c:8f:b0:81:62:6c:
         2d:5f:c6:b1:f8:cd:ca:cb:82:e2:2d:18:10:16:86:72:39:58:
         44:24:24:71:b5:91:3f:4d:7a:0c:e6:f1:04:27:82:e6:e9:9e:
         dc:76:76:86:cd:45:16:dc:5a:c9:59:6f:13:77:9f:5c:5e:5f:
         24:3a:ce:a0:c5:c2:db:70:27:b1:1d:db:0b:7b:31:5e:0c:f2:
         59:7f:13:d2:48:15:6e:39:99:fd:16:55:0b:0d:e7:80:5f:75:
         bf:f8:07:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUffPyS9yoFjxEHOEDq2+dK3BFKH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdD
M0U3NDY0ODAeFw0yNTAxMjkxNjM3MDVaFw0yNTAyMDEyMzI5MDVaMDMxMTAvBgNV
BAMTKENCNEQxMzUyQjdGRTIwOEJBODVBNzI3QzIxQzE2ODgwQUI5MUM5NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTklwW12M7vX6OpK98vKoaT+f
SBr1GU8O+7L3v9TIii22r+p1fPQmsIx/wnAwCi+OCjz7LRNMcWGB5Q4Eb+g4Rsl7
Z3sgpkJ+mHSOgTJRDc/BOgvQAHQlKMvy4EyiZlUMrccApRhhChEygv2CPex2D4Yn
NLDQ6GwYuq6nMewa8Rpi/gctDRwJ2qqc1aEa9zRYMNtR6+JC2vHb8vLZb4FsmykN
Dp/C0eXa+8o1Q67K0RHx3LteF5Fqeb8lE1dsIgJfkNNSNZvPT47mO9Kv0Ni/6G0j
OwinxCODHOBDwuMTPE11k4FDDUkctshA3KySoTYchCNu+O/cxDf6WjZXEzhjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy00TUrf+IIuoWnJ8IcFogKuRyWIwHwYDVR0j
BBgwFoAUBTCE2I0yz/WR28vzEJuRN8PnRkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NDA3OWJlZi03ZjdkLTQzY2QtOTI3Zi1kNWNmNTlhMGIwZmIvMC8wNTMwODREODhE
MzJDRkY1OTFEQkNCRjMxMDlCOTEzN0MzRTc0NjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5QjkxMzdDM0U3
NDY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNzliZWYtN2Y3ZC00M2NkLTky
N2YtZDVjZjU5YTBiMGZiLzAvMDUzMDg0RDg4RDMyQ0ZGNTkxREJDQkYzMTA5Qjkx
MzdDM0U3NDY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANEjJDkZlGUhFwNUscqVtEP4wRn3yYKy61aP
zHUwrmDzabq7ss7sgvJ2xuTmcA/L1YpLwcq7hx2327w5ZEmS+Ll46vQgPq9/Pavy
hmZHg6FwNH+RSxZ39lWhSJkUH90rW82yd4asW0n3dW7nnM8nck3NoxnKc1oNYrzm
S+RVPKDY1kA17aiJzfN+9qRMAjeEQKljjuTMdSrwFXybxkyPsIFibC1fxrH4zcrL
guItGBAWhnI5WEQkJHG1kT9Negzm8QQngubpntx2dobNRRbcWslZbxN3n1xeXyQ6
zqDFwttwJ7Ed2wt7MV4M8ll/E9JIFW45mf0WVQsN54Bfdb/4B6I=
-----END CERTIFICATE-----