Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
File:                     094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json)
Hash identifier:          mCe24fFvR42JQsF0GmleDasP6pJ2M173jbiDwGGB+q8=
Subject key identifier:   63:DF:B4:81:5F:3C:5B:4D:AF:4F:23:46:8B:71:AA:BB:FB:36:5D:0E
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       44D8A517B54B72245507846EC620453F94CA2E1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
Manifest number:          0153
Signing time:             Thu 30 Jan 2025 01:21:24 +0000
Manifest this update:     Thu 30 Jan 2025 01:16:24 +0000
Manifest next update:     Sun 02 Feb 2025 06:24:24 +0000
Files and hashes:         1: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=)
                          2: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: b7c9dQslUURKomYUD0DBm9zPGUXUy4AlkM5DqYDmjR8=)
                          3: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=)
                          4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: efQGExmEhnoXJray3dn6zshoqzcOBC7xZAkaxJJj1q0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d8:a5:17:b5:4b:72:24:55:07:84:6e:c6:20:45:3f:94:ca:2e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Jan 30 01:16:24 2025 GMT
            Not After : Feb  2 06:24:24 2025 GMT
        Subject: CN=63DFB4815F3C5B4DAF4F23468B71AABBFB365D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:c5:20:7a:97:d5:18:1e:1f:bf:d7:92:d1:
                    80:83:0e:00:ae:77:f4:b5:f0:c8:50:a8:f1:db:4f:
                    7c:d7:c0:14:a7:26:6d:62:8b:12:bd:c5:33:6f:5f:
                    e5:b9:93:93:9d:0c:63:99:e9:14:b7:93:6f:87:de:
                    6d:44:fc:a7:df:e1:da:cd:6b:23:ae:fe:00:3b:b0:
                    8f:b8:80:d2:2b:1d:57:2b:c4:27:67:78:c7:96:15:
                    70:f4:78:f9:87:a1:5e:93:ba:14:34:c7:68:c3:27:
                    f4:76:02:7c:ce:2b:2e:b0:50:01:0a:bc:cc:bc:f3:
                    42:1a:23:3a:a7:8e:dc:6a:8a:22:98:c2:8b:45:85:
                    2f:00:b9:9a:fd:bf:9d:84:e1:ce:2c:c8:1f:cf:a7:
                    64:4c:46:fa:82:ed:53:4c:84:71:3d:f4:d9:33:cf:
                    78:65:32:c9:ce:bf:1a:9e:f3:20:0e:1d:20:b2:2d:
                    5c:4e:a9:bc:1e:18:fa:2d:8a:be:8d:bd:ae:e1:b7:
                    11:0e:40:92:4b:7c:8c:1f:89:b7:21:8b:2c:3d:4f:
                    92:6a:79:e8:93:49:24:b9:9e:2b:5d:ea:eb:be:0b:
                    62:4a:2b:08:f6:72:ba:01:fb:13:d6:e9:c2:97:e7:
                    73:25:c9:af:b9:b6:ee:ec:9a:7c:5c:06:b0:ac:43:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:B4:81:5F:3C:5B:4D:AF:4F:23:46:8B:71:AA:BB:FB:36:5D:0E
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:9f:2b:ac:ac:bf:a5:db:80:c8:fe:48:cf:4c:7c:93:9d:
         73:2a:c1:63:d3:55:7e:29:e9:0d:2f:06:90:b5:c6:2b:fc:0a:
         9a:96:24:72:c4:92:a1:73:e6:b0:78:66:00:90:e0:31:1e:99:
         eb:c1:e0:68:1e:93:9d:2e:73:d7:70:47:14:44:ac:e2:d6:57:
         47:fe:1a:7b:3a:eb:6a:ef:2f:b5:dd:94:3d:56:fa:2e:08:f5:
         d4:02:4b:b0:61:4b:18:3a:0a:09:21:87:50:cc:ec:1e:cf:a3:
         d4:fe:44:23:90:08:40:3f:c6:17:cb:d9:94:24:7e:3f:30:19:
         17:9c:35:18:03:7c:89:b8:bd:ae:92:74:ed:31:ed:d3:82:42:
         38:54:77:4e:bb:f8:64:2f:b7:99:a8:9d:11:a4:6f:09:97:0c:
         b9:9c:ca:48:55:6e:45:96:fa:e8:b6:45:30:3c:7e:61:f8:44:
         ff:f7:2f:d0:b4:cd:f9:37:96:87:dc:15:78:6e:85:4f:ad:d7:
         e6:e4:19:e7:72:d4:e9:f9:6f:41:b7:b3:b8:5c:8b:4c:2e:52:
         9e:4f:d2:50:3e:26:06:15:93:16:d7:d1:48:08:1d:82:b1:86:
         0a:01:d2:34:18:94:67:a3:bd:27:f3:76:39:03:f8:25:50:18:
         75:d2:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----