Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft
File:                     357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json)
Hash identifier:          fSzpX8oWI/xZDrcxk2RUms132b0aaH234uF1RisLstA=
Subject key identifier:   12:8A:8E:6A:85:0A:05:22:8F:88:32:47:5B:82:E2:C8:E3:C3:05:D9
Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B
Certificate issuer:       /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B
Certificate serial:       1227A5E6EA9FCECD66BD947FDC5611417C77EF13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft
Manifest number:          027F
Signing time:             Thu 30 Jan 2025 23:30:03 +0000
Manifest this update:     Thu 30 Jan 2025 23:25:03 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:03 +0000
Files and hashes:         1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: 3J6hvxgEVqyD6OymkoX4wg6aPVnMQfStqRhmiYMuRiY=)
                          2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=)
                          3: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: V4NlJvJxANYgBszezxXxK83IGlFixlUiTnHX5oP/Byk=)
                          4: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:27:a5:e6:ea:9f:ce:cd:66:bd:94:7f:dc:56:11:41:7c:77:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B
        Validity
            Not Before: Jan 30 23:25:03 2025 GMT
            Not After : Feb  3 04:00:03 2025 GMT
        Subject: CN=128A8E6A850A05228F8832475B82E2C8E3C305D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:42:b6:7e:e0:d1:ab:eb:e4:70:4b:e8:dd:
                    ae:2f:c0:5d:a6:ba:f7:f8:1f:03:b1:2a:cd:17:6e:
                    5f:c9:82:8d:1b:c0:b3:45:20:87:42:fc:c5:f6:5a:
                    41:3d:f6:83:18:d4:9c:f2:7f:e9:d3:b4:bd:74:42:
                    a5:7f:56:1e:8c:42:0d:57:16:be:1a:a0:6d:1a:35:
                    2a:c3:86:44:56:42:46:94:93:37:44:5d:f1:9b:fd:
                    6e:1a:0e:cb:2e:73:83:2e:85:43:2d:34:28:1f:73:
                    04:e7:e8:2b:2f:e1:78:6c:f5:ac:d2:d7:dd:2f:8a:
                    21:f8:5b:1b:e7:6d:73:f7:6e:f0:2a:b6:39:f6:12:
                    9e:bc:04:3a:d4:c0:a6:67:d5:32:e5:8d:34:36:86:
                    65:02:be:8a:f7:75:7a:53:33:dc:6f:e6:15:3a:af:
                    0e:13:58:c5:b2:2f:c8:83:ab:0c:cd:01:d6:42:47:
                    8c:63:b9:ea:49:e1:27:61:78:e5:a4:bf:d7:96:56:
                    17:cf:48:8a:82:2e:ff:2a:ec:91:08:9d:5a:0c:0d:
                    e6:05:29:d5:8e:c3:76:5d:42:71:ef:4a:90:7e:5a:
                    03:bb:05:bf:c9:57:e8:ea:36:90:50:b4:74:92:ad:
                    da:3f:94:6e:71:c1:38:7f:c5:9d:5b:a9:c4:27:b4:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8A:8E:6A:85:0A:05:22:8F:88:32:47:5B:82:E2:C8:E3:C3:05:D9
            X509v3 Authority Key Identifier:
                keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:11:3e:d0:c3:e2:62:18:1c:d6:d1:54:f4:95:36:df:63:
         4b:f4:e1:bd:33:cd:92:5e:3b:62:e0:a3:c5:6e:74:aa:7a:ea:
         f1:5d:c2:9a:a4:8e:ba:de:4d:e3:5e:4d:a1:47:1b:ec:63:1a:
         66:dd:7f:4c:dc:5e:0c:1a:6f:7c:98:c5:24:a2:8c:a0:d2:d0:
         78:4f:0f:0d:97:4b:9c:50:a3:1c:72:50:f0:8e:5a:75:a4:b8:
         b8:5f:54:7e:2e:c1:cc:1b:4e:68:cd:51:d3:02:c2:33:31:20:
         fb:06:fa:17:46:fc:ab:43:52:3c:d7:0b:7e:f1:26:ac:fe:9d:
         b4:a6:d0:16:95:d3:3e:d7:e1:1d:fe:62:22:cc:47:eb:6e:38:
         de:c3:14:ba:b9:f8:35:84:43:25:84:d3:7a:eb:45:4a:52:26:
         bb:b8:a0:cb:4c:24:2d:f0:f6:37:22:32:2b:d0:04:ec:aa:f2:
         b1:bf:b9:fd:4e:9a:d8:ef:5b:5b:c0:12:1c:4d:d2:88:a9:45:
         71:35:10:aa:e0:ac:17:4e:60:d9:c7:24:4a:e0:7c:af:7f:bb:
         a2:be:19:68:63:06:d1:07:b2:61:c1:0e:a5:e4:35:a2:d4:a9:
         4c:af:dd:86:9a:53:91:92:91:5e:07:6d:47:49:58:b4:e5:78:
         b4:de:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:49 2025 by rpki-client