Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
File:                     D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json)
Hash identifier:          RD5bdpv+CGfFqMdWBqb6skDFJqZrQp8dsPCjqGQAGy0=
Subject key identifier:   71:A6:EE:6D:7A:2D:07:4A:86:BB:84:46:FD:2C:E3:55:C2:1F:22:6A
Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29
Certificate issuer:       /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
Certificate serial:       798E8806CD8FEB446126B8D1E388C738EC766483
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
Manifest number:          0316
Signing time:             Thu 30 Jan 2025 20:42:08 +0000
Manifest this update:     Thu 30 Jan 2025 20:37:08 +0000
Manifest next update:     Sun 02 Feb 2025 23:22:08 +0000
Files and hashes:         1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: si3UT934/NRLgAYON+Ujh8e+UMIufqsEHNO6+x+2+uw=)
                          2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: f07bcKHBA8MDQf3nWxgJvnM8ufXhtXvo8dZJtImrXLE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8e:88:06:cd:8f:eb:44:61:26:b8:d1:e3:88:c7:38:ec:76:64:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
        Validity
            Not Before: Jan 30 20:37:08 2025 GMT
            Not After : Feb  2 23:22:08 2025 GMT
        Subject: CN=71A6EE6D7A2D074A86BB8446FD2CE355C21F226A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d0:90:14:30:75:b2:0b:bd:9a:aa:ca:c5:e3:
                    8d:87:f2:82:00:c6:51:f3:82:a5:08:de:1b:4a:c7:
                    a6:e0:40:26:f3:00:cf:4f:fd:14:65:b9:63:fe:83:
                    cf:5e:21:98:08:d9:3e:74:5d:c7:b1:7b:32:9b:cf:
                    92:72:fc:11:1d:46:fc:31:ff:42:7d:7f:58:22:18:
                    95:ed:cc:d2:ad:d1:da:a1:13:c5:a9:b0:d2:e9:f7:
                    4a:f9:bc:8f:25:58:7d:36:a9:3c:23:a9:64:04:e7:
                    90:4f:97:09:d3:a7:c8:51:d5:ae:2d:09:30:c2:bb:
                    eb:ac:58:0c:43:e1:de:5c:36:be:ef:9a:8b:70:b4:
                    6d:ba:c7:97:7e:b8:ef:41:ef:d7:97:04:d6:3e:40:
                    6e:b4:75:78:50:ca:18:2a:b3:73:33:d7:dd:2c:bf:
                    7d:4c:f1:17:e8:fc:f7:0b:98:ba:8b:71:b4:15:18:
                    1c:5e:34:23:e0:88:01:dc:17:1e:88:e2:c6:48:1b:
                    ef:f6:28:01:72:d9:4a:21:d3:9f:e7:ba:cf:ff:2d:
                    6e:d4:87:ff:74:93:e5:3b:a2:14:d9:3c:3b:a4:aa:
                    09:ee:f8:ee:9f:22:97:65:e4:8b:bb:cd:07:8b:71:
                    c4:d9:38:3a:08:09:31:bb:60:b8:a2:51:28:c7:08:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A6:EE:6D:7A:2D:07:4A:86:BB:84:46:FD:2C:E3:55:C2:1F:22:6A
            X509v3 Authority Key Identifier:
                keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:92:8f:28:94:a8:65:94:fa:ee:06:bc:82:60:7d:db:a4:a9:
         55:ba:33:c0:2f:a9:68:67:2f:36:18:ad:49:b5:c6:83:ca:13:
         43:67:9f:5b:20:fb:02:73:e6:38:ec:3b:a7:ed:d7:f0:f5:fa:
         a4:42:73:ff:61:15:ae:cb:fa:bd:68:8c:4d:4b:ee:bb:bf:2d:
         4d:a9:51:b3:3a:e9:e3:3a:38:05:78:03:80:13:38:f4:3c:c0:
         8a:6d:b7:a8:ca:b2:e7:89:80:d9:1a:fe:23:7f:3a:69:64:fe:
         3f:90:82:1a:aa:a2:7c:76:b0:6c:69:f3:a8:df:b5:92:bc:a4:
         9c:2d:8b:54:b9:5f:ce:f8:9f:ea:b7:28:7c:bc:f9:27:25:52:
         75:38:a2:13:d5:6c:7b:47:58:fa:22:ed:68:ce:4c:a2:cb:32:
         f2:fa:75:3b:98:58:81:8e:c3:ab:53:0f:c1:85:94:0a:04:10:
         e6:41:62:fc:a0:4c:4e:d9:e7:5f:c7:34:20:19:96:46:f8:a0:
         d5:84:c9:06:75:13:f2:3e:07:2f:bc:54:f5:7a:32:93:9f:f6:
         40:46:1d:0b:ff:f6:06:5d:13:78:e4:03:25:1d:9b:72:ab:7a:
         56:d7:a5:b2:11:62:d8:35:8b:cf:ae:3a:23:b6:be:d1:2b:39:
         52:97:ed:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeY6IBs2P60RhJrjR44jHOOx2ZIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD
ODkwMkIyOTAeFw0yNTAxMzAyMDM3MDhaFw0yNTAyMDIyMzIyMDhaMDMxMTAvBgNV
BAMTKDcxQTZFRTZEN0EyRDA3NEE4NkJCODQ0NkZEMkNFMzU1QzIxRjIyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50JAUMHWyC72aqsrF442H8oIA
xlHzgqUI3htKx6bgQCbzAM9P/RRluWP+g89eIZgI2T50XcexezKbz5Jy/BEdRvwx
/0J9f1giGJXtzNKt0dqhE8WpsNLp90r5vI8lWH02qTwjqWQE55BPlwnTp8hR1a4t
CTDCu+usWAxD4d5cNr7vmotwtG26x5d+uO9B79eXBNY+QG60dXhQyhgqs3Mz190s
v31M8Rfo/PcLmLqLcbQVGBxeNCPgiAHcFx6I4sZIG+/2KAFy2Uoh05/nus//LW7U
h/90k+U7ohTZPDukqgnu+O6fIpdl5Iu7zQeLccTZODoICTG7YLiiUSjHCP8VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcabubXotB0qGu4RG/SzjVcIfImowHwYDVR0j
BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC
OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw
MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk
ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky
RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAASSjyiUqGWU+u4GvIJgfdukqVW6M8AvqWhn
LzYYrUm1xoPKE0Nnn1sg+wJz5jjsO6ft1/D1+qRCc/9hFa7L+r1ojE1L7ru/LU2p
UbM66eM6OAV4A4ATOPQ8wIptt6jKsueJgNka/iN/Omlk/j+Qghqqonx2sGxp86jf
tZK8pJwti1S5X874n+q3KHy8+SclUnU4ohPVbHtHWPoi7WjOTKLLMvL6dTuYWIGO
w6tTD8GFlAoEEOZBYvygTE7Z51/HNCAZlkb4oNWEyQZ1E/I+By+8VPV6MpOf9kBG
HQv/9gZdE3jkAyUdm3KrelbXpbIRYtg1i8+uOiO2vtErOVKX7f4=
-----END CERTIFICATE-----