Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          +rQ8XUQYDvn1+Tw1cHz583a/A73xKysRcxn1E7Qflnw=
Subject key identifier:   E3:2C:0A:3F:6F:74:20:9C:25:7F:B2:63:CB:66:CE:9D:8A:BE:30:AE
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       2CA8C2BEF914784E9019F6F3348059970E0DCE23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          011C
Signing time:             Fri 31 Jan 2025 10:40:55 +0000
Manifest this update:     Fri 31 Jan 2025 10:35:55 +0000
Manifest next update:     Mon 03 Feb 2025 13:13:55 +0000
Files and hashes:         1: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: iTOGXrpbMeNc55/3DoD+VDgZo5uJSgIixPQ4Fa5DV8c=)
                          2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: Aee1Gbvr0vnI5GFSyf+LnZ8/t7rv6DOLKw6Sm7B4cvg=)
                          3: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: StKm/EBjyCtOBBqyOJASJhUXfaj5Ik+i6XQwhkj3F9Y=)
                          4: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=)
                          5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: y4CphY2Eja4IBmaWSAMBzGabm9Rl4RkxNrghgS2laKY=)
                          6: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: PNswnDB59dy0WIKijBxTcNq2tOLHRD7Xyj3sC7yk3sw=)
                          7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: mY9nGHKi7YFpk7+fwd7/qH+h6ARI4z2zuLTwZFPNXjI=)
                          8: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: eK1jGLRRaHT6tm3PxKicstKAC4/6NyngXA1JL6iVffU=)
                          9: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: 8F7fiU7vGe9Vc51zIc4bJZmRh9Cp4cIynPTyrqXxjiA=)
                          10: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: rMCEoNf1wNtL9Xq0GiwFXvxNeoAWHkOBKr6mSPuhUTo=)
                          11: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: GkqP1tBJ/9agxHYe5ncZgwuG8VITyEYL/kjDUwj5Bhk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:c2:be:f9:14:78:4e:90:19:f6:f3:34:80:59:97:0e:0d:ce:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Jan 31 10:35:55 2025 GMT
            Not After : Feb  3 13:13:55 2025 GMT
        Subject: CN=E32C0A3F6F74209C257FB263CB66CE9D8ABE30AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:70:83:ea:8c:3d:c8:54:1a:a9:04:5e:6c:
                    bc:05:da:84:23:5b:d6:41:2b:22:39:de:38:a7:d7:
                    4f:85:17:9c:41:79:bd:1e:b2:46:33:49:6f:1b:37:
                    23:b8:14:da:e0:cd:40:05:6a:d5:85:c6:5c:f4:c8:
                    35:32:a6:14:01:48:26:30:9c:51:2c:4b:be:80:e6:
                    7f:68:59:37:be:ed:e0:9b:4e:d5:ef:28:00:a8:8f:
                    e3:7f:5e:5b:85:bf:87:00:e5:3e:13:70:94:e2:22:
                    46:29:e2:15:c7:77:ce:fe:44:7d:dc:ea:34:36:50:
                    56:68:d5:f9:86:2f:cf:f0:ee:93:31:96:c0:47:41:
                    ce:88:b2:83:87:36:ef:1e:5e:15:a9:0d:b7:62:16:
                    80:ca:4e:6d:fb:de:0e:99:83:13:4a:0c:28:e0:bf:
                    0a:22:22:63:de:ee:e2:15:40:44:97:c0:ad:e6:4c:
                    2d:b7:21:34:75:62:cc:7d:d2:62:88:3d:f6:c5:67:
                    62:19:96:2d:ed:77:d2:b6:20:73:44:20:08:ee:df:
                    74:2a:f9:6a:9a:33:0b:e8:77:e2:85:f1:b7:1f:74:
                    61:94:f0:03:41:7a:b7:4a:4d:3d:c6:63:bf:b9:e9:
                    50:68:fe:cc:86:51:9c:05:77:b1:33:8c:ae:d3:83:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:0A:3F:6F:74:20:9C:25:7F:B2:63:CB:66:CE:9D:8A:BE:30:AE
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:36:4d:e2:5b:3c:4a:9e:72:db:59:e1:85:e8:6a:2a:c2:18:
         7d:8c:30:19:c4:56:5b:e9:cf:3a:0c:ff:3d:2a:80:a1:ad:0a:
         bf:90:5d:17:d3:63:51:45:d1:76:63:85:ca:46:9f:8b:7a:63:
         e7:c8:f9:73:9e:fb:23:60:68:3c:20:92:06:bc:dc:2c:49:82:
         e8:5d:fd:da:ad:a9:55:74:0e:e5:48:ea:c0:32:64:64:1f:b6:
         29:41:6b:d6:11:7d:94:9a:cf:90:20:08:aa:8d:3a:43:3b:f6:
         e3:ef:ab:3a:ea:22:b4:1f:9b:7e:a0:d1:e2:5b:14:18:7c:f3:
         52:08:d3:c5:3a:cd:ec:5a:b6:79:5e:28:46:31:86:e9:19:09:
         0f:07:11:35:fd:aa:7a:56:88:98:db:54:cb:d2:b3:72:86:81:
         48:c6:08:72:12:14:e1:96:a5:25:b7:20:a7:6f:06:eb:a0:f3:
         4a:ac:35:30:b5:45:b8:b7:5e:8a:6a:36:7b:7a:52:04:23:52:
         81:51:c5:59:e0:6f:66:6e:69:08:08:73:a6:1f:20:c2:c9:c7:
         69:76:b6:38:16:9d:10:46:93:38:2e:10:53:48:80:f8:94:64:
         60:60:9a:e4:69:28:3f:53:71:31:0d:cc:85:97:f6:bb:68:8f:
         c9:f4:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:22 2025 by rpki-client