Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
File:                     3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json)
Hash identifier:          2t8mbSOBH309We0520G2xjsMRInmWBW0NNI4whBEV3A=
Subject key identifier:   39:BA:CA:16:38:42:3B:3E:04:C2:7D:B1:D3:11:73:A7:EC:1B:43:4F
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Certificate issuer:       /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial:       3835A68FBB20405CCC94F26636408E9F3F1D237B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 01:11:19 +0000
Manifest this update:     Fri 31 Jan 2025 01:06:19 +0000
Manifest next update:     Mon 03 Feb 2025 05:08:19 +0000
Files and hashes:         1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: n4gQN5rvCLUZJkkMte4Wkxmnk9dXkGGWPCCR31tQ0Pk=)
                          2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: uJ4UndaAGVEWTS0CGBzHtyefGbyYsYBo80wyV0nM7O4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:a6:8f:bb:20:40:5c:cc:94:f2:66:36:40:8e:9f:3f:1d:23:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
        Validity
            Not Before: Jan 31 01:06:19 2025 GMT
            Not After : Feb  3 05:08:19 2025 GMT
        Subject: CN=39BACA1638423B3E04C27DB1D31173A7EC1B434F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:03:27:53:6d:7b:a5:fa:92:79:20:61:b2:
                    5d:38:78:62:ae:8f:65:e9:f5:7a:ce:f9:f3:de:f8:
                    4d:f0:49:1d:de:48:d4:b7:1e:d9:2e:c6:d4:cf:6b:
                    e8:6a:8b:2c:03:37:43:20:a5:11:1b:f7:7a:9b:ba:
                    3e:ba:85:6b:02:f1:a7:c9:eb:7e:1d:f3:58:47:8e:
                    60:9f:f8:d3:79:94:f6:5c:8c:12:37:a6:eb:c0:25:
                    a4:a4:67:f3:b8:ff:09:1a:a2:39:31:ab:3a:b9:30:
                    18:87:a6:1e:55:2a:72:04:8a:27:05:90:ca:ff:c2:
                    d5:bd:25:ae:40:9d:b5:e0:c1:06:1b:e0:b7:92:fb:
                    99:74:9c:39:a3:e2:92:44:72:71:8f:5d:ac:d4:4e:
                    fb:27:4d:dc:e0:90:d6:1a:f5:48:28:2e:bd:a9:84:
                    9b:36:c2:77:6c:15:6e:dc:16:c6:54:91:36:05:0f:
                    25:68:62:b8:84:71:1b:01:d6:50:6b:f4:33:2f:6b:
                    66:50:13:63:46:f5:4c:14:14:54:2a:d7:f7:69:0c:
                    85:30:e5:9f:c3:d9:7c:ae:0b:71:fe:d5:76:44:dc:
                    95:46:fb:c3:11:2e:e9:0e:52:82:f3:99:70:4c:d7:
                    e7:0c:f9:80:8d:ae:a2:45:7b:eb:30:2e:a2:d3:18:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:CA:16:38:42:3B:3E:04:C2:7D:B1:D3:11:73:A7:EC:1B:43:4F
            X509v3 Authority Key Identifier:
                keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:ab:18:cc:94:48:fb:63:e6:70:51:49:8b:9f:25:c0:cb:
         5c:74:9e:76:a7:83:37:a8:31:40:58:f6:a4:9f:a0:79:b5:78:
         50:66:28:ae:ea:dd:b1:3c:98:8c:28:80:1b:c5:d8:07:53:19:
         6c:6d:75:3e:fd:52:83:a3:56:94:bf:c2:08:ed:5e:84:26:6b:
         ab:9a:ea:d1:4c:ee:ee:c5:b0:62:98:68:1c:a0:9b:1d:76:ac:
         53:f6:8a:c9:d1:3d:2a:ee:ef:ff:95:ed:74:ce:52:29:27:40:
         cb:47:54:ae:3f:b2:04:48:50:9e:96:c0:fb:ff:d5:15:0b:99:
         74:c2:ab:ca:15:2f:15:e0:60:33:a7:2c:00:5c:2e:aa:00:84:
         d9:e1:20:45:ea:c2:7c:8a:b2:93:b6:b9:17:17:55:f2:c3:d0:
         84:70:23:4e:f1:80:1f:00:75:18:de:d8:b5:4d:e0:56:9e:0b:
         2c:42:c5:d6:4b:a9:d2:80:06:34:f7:e0:2d:0b:ed:09:54:47:
         4b:17:a7:0b:6a:44:90:51:ca:7e:23:87:a4:90:61:ff:db:03:
         cc:ea:14:1d:20:59:e0:cf:d6:35:71:e5:81:8e:93:e0:ae:57:
         89:0b:65:7d:59:08:58:ce:f7:f6:4c:c6:d8:12:4b:93:26:b7:
         12:de:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:38:16 2025 by rpki-client