Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          R4cWTA0JmzHbpv9nOehe5S/B97KKqIfQ8HnVTiiayHk=
Subject key identifier:   3F:0F:73:6B:46:FE:EA:23:79:60:0B:E5:C4:FF:9E:CF:37:F3:24:C6
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       0FC758303C61979BF0DA80C3CDDC5693DC9A8FBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          01D3
Signing time:             Fri 31 Jan 2025 03:41:07 +0000
Manifest this update:     Fri 31 Jan 2025 03:36:07 +0000
Manifest next update:     Mon 03 Feb 2025 04:34:07 +0000
Files and hashes:         1: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ckyPU+dOc2DPyymdMy/gds0ZvQT1LlPymVaytADGQCs=)
                          2: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: 9AgM/Fc/trfBx80xVB31YmDWKQHoLWDjrj5feQPz0y4=)
                          3: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: MzKgSqALIjMd9pw7UwySp3twGwQgGA4Pp2Zp+VNAmFs=)
                          4: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: jq0e805LfMnkdfWLKacSRG7Ij32XtfUPAgDbV/aAs+8=)
                          5: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: n/aQfG9wLO5g9qQFIQyNfECT7hJtuJJEIN3qk2lINOg=)
                          6: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: cotwBZV4fpeK93CI+xCpGvEhPESCOQnDsG0stYfaSUg=)
                          7: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: TRkbIk0+FrV+K3gHGX1NOEP/Zf828r6e2rZtJ22y8NM=)
                          8: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: zvgnMY8wPSXc3mzVu3a1CGAGczTfjSmy5MA1FfiX5lU=)
                          9: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: eE3XQXL5yxYICxpW4xLR89CNbidQvABOBnQ5o39erVY=)
                          10: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: OwGVX4uDsFx+BfSDv1qnIHIR7bY2X0pI7Wmkb/eOX/M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c7:58:30:3c:61:97:9b:f0:da:80:c3:cd:dc:56:93:dc:9a:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jan 31 03:36:07 2025 GMT
            Not After : Feb  3 04:34:07 2025 GMT
        Subject: CN=3F0F736B46FEEA2379600BE5C4FF9ECF37F324C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:35:d1:af:4d:ea:f5:a0:bd:a9:69:3d:28:
                    f1:ed:64:28:e0:48:2d:82:7f:24:a2:23:6a:ba:24:
                    45:41:64:0e:60:bf:67:86:e5:3a:ea:dc:86:00:bd:
                    a1:3a:d9:63:cc:17:df:45:f4:45:5a:59:77:7d:7d:
                    ac:72:97:b0:9b:65:73:fb:5b:c3:8b:d1:91:8c:30:
                    76:f3:e8:02:ad:01:02:55:70:53:d9:6a:f4:0f:d9:
                    7b:fa:8f:62:9c:81:e2:66:68:62:86:9d:03:21:b5:
                    db:8c:33:6e:7b:49:23:14:4f:de:e7:ad:37:02:54:
                    39:81:05:b1:b0:26:22:e2:62:68:02:45:67:00:b2:
                    66:25:c4:64:04:46:c3:94:e4:39:a6:b4:a9:36:3d:
                    1d:02:23:3a:57:d6:b2:af:3f:a6:fe:03:9a:f2:0e:
                    4d:8e:4d:e6:a3:6e:c7:04:ac:23:47:de:a6:f9:0e:
                    62:b2:27:d1:4b:40:f3:77:51:3b:15:b9:19:ff:d1:
                    69:4c:4d:26:a5:63:ef:a4:30:e4:c1:be:d3:bd:ee:
                    f7:52:35:ca:05:c4:12:a1:8c:55:ea:fa:0a:b7:0c:
                    1f:eb:70:cb:78:c9:72:aa:59:78:5a:0c:25:dd:bf:
                    3a:c0:96:c0:57:95:2c:78:38:84:4c:39:67:91:85:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:73:6B:46:FE:EA:23:79:60:0B:E5:C4:FF:9E:CF:37:F3:24:C6
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:40:0d:12:22:21:e9:53:30:79:18:a3:42:a0:68:54:97:
         fc:40:33:15:06:c7:b5:c8:5e:e3:52:f0:7b:37:25:2e:0e:85:
         50:78:00:5e:cd:30:62:37:e3:c7:da:81:6f:7c:54:bb:fa:28:
         fc:5a:bf:24:89:af:24:8b:42:1a:e7:df:ba:2e:be:fb:27:b2:
         28:d2:3b:f1:12:06:ac:32:38:8e:50:6d:21:30:db:4c:76:db:
         09:5e:a9:8f:11:f5:0d:1e:ed:b2:da:44:cd:a3:45:3e:35:d7:
         8a:c3:ce:a0:bf:f1:f2:1d:0a:a2:50:28:e2:dd:85:b6:35:ef:
         56:34:9a:4b:5a:0a:b4:7a:ad:3f:63:ce:af:4b:36:06:6e:7c:
         bd:51:24:3d:5c:a6:10:ff:0d:f0:a7:fa:20:81:c1:ef:21:48:
         e7:f1:ab:ff:70:56:85:62:cb:3c:2e:24:67:e4:fa:35:e0:c5:
         7b:e0:2e:25:ed:e1:45:3c:39:ee:42:e4:8f:e3:f8:dc:45:02:
         64:3b:57:4e:27:ec:c3:c7:9e:27:17:18:24:a1:d8:35:da:f6:
         d4:63:5a:1c:b1:fa:35:15:19:1d:fd:04:44:e3:f4:3b:d0:b4:
         51:17:fc:c0:00:a1:6e:e7:fe:da:d1:65:a2:02:40:44:6e:6e:
         bb:95:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:03 2025 by rpki-client