Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
File:                     A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json)
Hash identifier:          NNl0Bt9hAAylpFTpc4EMOl6Me41MDLjIYXdgPaL4GYQ=
Subject key identifier:   2A:F7:F6:8C:E5:1A:93:AA:B6:07:6B:BB:7E:FC:AC:01:1E:36:A8:45
Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14
Certificate issuer:       /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
Certificate serial:       1E91FD682E9AED4018E14337B0933B92968AC8A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
Manifest number:          C3
Signing time:             Thu 30 Jan 2025 07:12:04 +0000
Manifest this update:     Thu 30 Jan 2025 07:07:04 +0000
Manifest next update:     Sun 02 Feb 2025 07:20:04 +0000
Files and hashes:         1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: 56ma/pT1q3C4fLSDveKtUnppRN9Y9xsPe/YyTJFUTlw=)
                          2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:91:fd:68:2e:9a:ed:40:18:e1:43:37:b0:93:3b:92:96:8a:c8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
        Validity
            Not Before: Jan 30 07:07:04 2025 GMT
            Not After : Feb  2 07:20:04 2025 GMT
        Subject: CN=2AF7F68CE51A93AAB6076BBB7EFCAC011E36A845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:95:20:5b:00:df:4f:66:a2:f3:0f:75:cd:
                    60:0b:36:36:5b:c2:54:d4:f0:ed:92:fa:55:86:5b:
                    3d:cf:59:f3:49:51:a4:ae:4b:cc:78:c1:13:d3:2a:
                    af:b8:f5:30:3c:bf:3a:35:8c:92:42:0f:4d:5f:79:
                    5a:75:12:ab:b5:1d:30:ae:20:d2:8a:d9:e8:03:c2:
                    4c:85:34:f0:62:34:a9:cf:c4:71:69:c0:e2:8c:27:
                    e4:cb:f8:4e:5e:f7:39:78:2f:8f:47:bc:8a:d4:c9:
                    4d:3c:c1:fd:3a:26:69:44:52:ce:51:07:34:91:d4:
                    af:02:d0:03:2d:75:23:d5:bc:75:84:91:85:8c:07:
                    40:7e:1d:e9:11:ba:f3:8e:3c:c5:53:a3:d1:fc:f9:
                    bf:ae:cb:32:24:5f:1d:0d:13:f8:91:44:5b:54:90:
                    49:6f:34:e9:a6:cd:cd:34:98:c9:ef:9a:d5:46:8c:
                    75:d9:ec:d8:69:6e:b7:89:0f:f1:53:c6:07:99:b7:
                    0a:de:3e:10:83:93:78:9e:25:bb:fe:ac:9d:99:3a:
                    21:a6:a0:0f:ea:50:83:82:30:ec:84:32:e7:41:59:
                    1a:be:43:20:82:6d:13:6c:5a:70:21:76:e8:2a:10:
                    db:61:de:46:05:5d:c0:d6:f9:37:30:fb:a5:db:2d:
                    c3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F7:F6:8C:E5:1A:93:AA:B6:07:6B:BB:7E:FC:AC:01:1E:36:A8:45
            X509v3 Authority Key Identifier:
                keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:81:5b:fe:1b:65:1f:97:b2:5c:56:41:54:0a:b9:89:49:c6:
         a8:7b:8b:18:ed:72:0c:8b:9d:83:e6:d5:6a:7a:30:1c:32:5b:
         a9:8c:40:03:be:1b:62:5b:fb:be:4e:88:0a:61:ab:1a:5a:dd:
         81:9a:3c:82:8f:da:73:97:7c:a5:b7:54:4c:89:da:80:00:ce:
         08:3a:e0:a9:9b:de:d4:f8:8f:58:97:1e:5a:7f:4a:7f:b5:1c:
         f2:38:d8:ab:0f:d9:d6:3b:35:84:f2:9b:ed:4e:6f:5e:f9:1b:
         cc:54:8f:ff:c1:ac:f3:d0:c6:50:0f:c1:e2:69:50:35:e7:5e:
         f0:d4:b9:59:61:cf:64:72:8a:dc:41:e1:5c:a2:d2:ad:a3:2f:
         02:44:1a:40:c3:21:43:a0:73:39:d2:ef:d3:75:e6:1a:60:07:
         d3:10:04:cb:79:2a:e8:bf:a9:eb:af:ac:d0:26:cf:35:87:ae:
         59:e7:7a:ad:a9:da:d2:19:06:39:cf:8f:14:23:c0:31:52:d9:
         66:2f:df:dc:33:2e:6e:b7:f1:86:b1:fa:00:20:10:9e:fc:50:
         4f:4c:dc:77:ff:e7:21:3a:ed:08:ff:1d:00:1e:ad:b9:07:a5:
         0b:76:da:9c:a7:1c:a4:fd:5b:e1:1d:ba:06:b2:c0:58:5d:c2:
         a3:17:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:38:15 2025 by rpki-client