Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File:                     940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier:          tNis9p9Bpj8eQRdfOBpZ+Q7pTfnB/oKGpc1O8FMkzqc=
Subject key identifier:   0E:5F:05:59:03:7D:DD:DE:09:5A:EC:31:59:B8:75:4B:94:3C:45:C4
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer:       /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial:       3AF33050777AEB7293F5CF4019A4CC1D0BEB3290
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number:          0135
Signing time:             Thu 30 Jan 2025 02:40:41 +0000
Manifest this update:     Thu 30 Jan 2025 02:35:41 +0000
Manifest next update:     Sun 02 Feb 2025 10:49:41 +0000
Files and hashes:         1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=)
                          2: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 0wZZxkbo6MIyGFZCUlAzzb88m+mQcDkrTSB0tb/Qcf8=)
                          3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f3:30:50:77:7a:eb:72:93:f5:cf:40:19:a4:cc:1d:0b:eb:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
        Validity
            Not Before: Jan 30 02:35:41 2025 GMT
            Not After : Feb  2 10:49:41 2025 GMT
        Subject: CN=0E5F0559037DDDDE095AEC3159B8754B943C45C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:b7:2e:f1:6c:c2:bc:14:d7:16:78:d4:ee:
                    d2:51:c7:16:e5:c7:a8:dd:35:60:e2:65:02:00:c4:
                    d0:13:b1:50:28:ca:dd:27:6d:10:66:a3:63:30:6d:
                    86:38:7e:d3:f3:27:a7:aa:88:4f:a9:21:94:2c:f9:
                    d3:7c:15:44:42:55:08:2d:72:a3:29:37:14:64:18:
                    ff:ed:82:fc:33:87:f1:16:d1:25:07:5a:18:15:9d:
                    50:98:6f:2f:f7:39:a3:0d:a1:63:2d:9e:73:fe:2e:
                    dc:53:f5:f7:a4:e6:d2:ed:b5:6d:ad:92:74:7b:44:
                    34:64:69:17:2b:ed:9f:22:53:fa:89:18:a8:a4:19:
                    fd:6c:39:a5:49:ca:85:ac:91:87:be:7b:0d:43:f4:
                    a5:44:9a:99:13:b8:9b:72:aa:00:7f:4a:fc:d0:9f:
                    b3:43:74:27:4a:34:28:cd:69:28:1e:8c:ef:4a:2d:
                    a4:94:cb:07:ce:7d:e0:b9:1f:47:df:e9:67:92:e1:
                    00:05:6f:e6:3d:10:96:9b:f8:d8:7e:da:c8:40:8d:
                    06:77:6b:ae:65:36:f9:c1:06:6d:66:fd:fc:59:af:
                    bc:67:93:44:bd:a1:ea:7a:82:60:ac:1c:5e:06:80:
                    a2:c9:ab:fc:c6:a9:0b:14:5a:f3:b2:f3:07:74:62:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5F:05:59:03:7D:DD:DE:09:5A:EC:31:59:B8:75:4B:94:3C:45:C4
            X509v3 Authority Key Identifier:
                keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:41:65:7c:15:e5:2e:bb:26:4f:b3:67:c1:47:aa:7c:3f:77:
         25:1d:f6:75:a4:f8:3b:74:19:29:29:1f:a7:40:4d:05:2d:a0:
         b0:38:55:55:6d:e5:1b:fe:ad:20:2d:9c:1e:28:1a:44:95:98:
         c8:4f:a8:32:f6:b7:ff:e2:01:8b:04:21:dd:f8:01:1a:54:2d:
         c0:90:15:5c:80:d7:01:27:ac:09:e1:9c:62:38:1d:18:b4:24:
         c5:9b:d4:fd:ed:4c:f1:0a:72:02:cd:a0:1e:9e:f7:b9:8c:7a:
         08:1c:27:99:04:2a:03:21:e6:a4:38:e2:27:2d:b5:8f:55:52:
         8c:94:ad:e4:bf:da:a0:af:e9:ce:79:41:4c:29:d0:8b:86:12:
         67:97:5d:e8:9f:c9:f6:cf:e2:55:27:76:f4:32:91:15:f9:0a:
         9f:53:8b:2b:9e:e7:88:a5:fa:0c:a7:bf:a4:fe:4d:de:95:89:
         6e:de:ba:76:87:f5:77:33:3a:53:70:05:00:8f:c3:b4:ae:c5:
         db:f6:fb:1f:39:de:84:0a:69:ce:fb:90:29:b4:6a:e6:b9:d6:
         ac:ec:48:30:06:84:7a:2d:ac:7a:5b:08:c1:53:38:59:d1:81:
         83:4c:a7:41:62:5c:e3:db:46:75:01:4c:0f:45:85:1f:e5:e1:
         b3:36:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----