Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
File:                     3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json)
Hash identifier:          xpjO39/XHdH8kf0R9HTYbWKBuLxOdGHaILVHSqVB1dY=
Subject key identifier:   FA:10:5A:31:9D:A5:0E:A7:EC:DC:27:A5:11:4E:04:26:97:AE:ED:CE
Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64
Certificate issuer:       /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
Certificate serial:       19DAC1FDADFA1698D6FEC8C0D41FA005D259B9B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
Manifest number:          83
Signing time:             Fri 31 Jan 2025 08:02:12 +0000
Manifest this update:     Fri 31 Jan 2025 07:57:12 +0000
Manifest next update:     Mon 03 Feb 2025 11:51:12 +0000
Files and hashes:         1: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: UmEBU3Sgynao9lbw1JJMUo4viflFWrDSm3vbkMs9u64=)
                          2: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: VlPySr1z7+TkmzqDg9LkNmufmjg7AcW+Dqxto5/JHQ0=)
                          3: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: ArXTOYnm1P+DtxvOZZotGhqpOCXfX/Bv4u7RE7ppZGQ=)
                          4: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: RP7rUocoC3D/j1TwADshI6ZpMeqAmaI5nGcmRaAlwtE=)
                          5: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: dHGjsmtyNiK8srSzYwGL3Hg8o303N6ZWYYsYI6Ez2Y4=)
                          6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: y0Ec6JrQKxzntUk48Us/rCX52IJwb03iB7KaQZ7Fux0=)
                          7: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: NVHsn6xcnGPEYPmwwXLF9Ee2xqv4swX+J8kRowDTzVU=)
                          8: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: j723330t5HqOygH+H8v1U5Uzuu1AL2o3VsbiS6jglbY=)
                          9: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: n84lQxFjMaL3Y9UQU8GKoerRQT4fOqmo8MdPg5kVYsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:da:c1:fd:ad:fa:16:98:d6:fe:c8:c0:d4:1f:a0:05:d2:59:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
        Validity
            Not Before: Jan 31 07:57:12 2025 GMT
            Not After : Feb  3 11:51:12 2025 GMT
        Subject: CN=FA105A319DA50EA7ECDC27A5114E042697AEEDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:a2:70:ed:28:b0:16:8a:1c:f3:19:9c:40:
                    0d:c3:25:4d:b1:1b:d4:c7:62:14:cc:aa:d8:ba:56:
                    59:f9:68:59:16:5a:69:33:9a:65:49:ab:50:dc:8e:
                    5d:77:48:e7:e0:ae:aa:7e:79:40:63:91:43:1f:71:
                    d3:73:56:94:ce:2a:d3:8d:a8:9c:c8:1b:1b:7e:3e:
                    47:c3:29:e1:71:28:1c:32:45:c4:88:0c:64:7b:b3:
                    00:2a:93:d9:53:e2:5e:e9:ff:6a:0b:4a:66:56:32:
                    04:05:2f:3b:34:5c:13:31:eb:df:b2:b9:74:5c:81:
                    44:fc:2e:65:25:24:7e:8a:5f:3c:6c:54:85:96:20:
                    3c:ab:5d:2e:bb:1a:71:2e:95:40:86:93:93:9f:cc:
                    95:63:c7:c9:d7:ec:f0:03:36:4d:80:2f:93:45:0d:
                    72:3f:ae:fd:db:2d:53:5e:b3:ca:18:0f:b6:1e:79:
                    b7:eb:e6:95:32:c9:14:2b:5b:fe:1f:3b:b0:73:8c:
                    4b:c1:f2:ff:8b:71:0e:8a:e9:f0:86:73:09:53:7a:
                    3e:d7:9d:eb:22:0f:3b:1b:9a:09:26:8a:c9:46:ae:
                    98:d9:16:f9:b7:2e:9d:fb:f8:5d:f2:07:19:f2:00:
                    8b:38:8b:9d:6f:22:19:58:b0:33:4f:5a:f9:c3:ed:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:5A:31:9D:A5:0E:A7:EC:DC:27:A5:11:4E:04:26:97:AE:ED:CE
            X509v3 Authority Key Identifier:
                keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:94:27:f6:57:ad:4a:f1:89:4e:0e:4e:3c:e5:bf:ac:50:f0:
         f2:d8:c4:42:65:14:3f:9a:36:0b:a9:1f:d5:f2:de:f4:33:c7:
         af:43:26:af:3d:20:fe:7f:10:a1:89:8b:c8:ca:4f:bd:43:d3:
         82:a3:0f:c3:df:09:81:72:e6:f3:30:cb:65:2e:bc:4f:70:4a:
         9d:d6:f5:07:e3:1c:06:4c:75:65:c3:f0:7e:77:91:2b:93:35:
         71:17:61:12:72:fe:a2:a2:6d:1f:39:82:d1:94:45:71:66:65:
         1f:5f:f5:d0:04:f0:3f:df:f9:1b:40:d7:2b:02:24:9d:d9:7e:
         a7:ff:35:39:33:6e:4c:cd:91:2e:98:06:37:99:ed:f9:a7:ed:
         5a:d4:f8:8d:94:d4:c7:91:94:eb:a9:fc:f7:bf:56:a1:a5:9f:
         aa:21:65:b9:94:3a:5c:47:cb:a4:0a:88:9e:54:ca:3b:c7:1c:
         36:55:ce:f7:ee:58:06:19:e6:25:36:ba:14:4e:51:bb:d7:bc:
         96:7e:b4:e0:ee:12:80:7f:fd:b6:03:1c:14:8e:31:af:97:7f:
         ce:83:aa:df:85:c3:3f:f3:e1:83:7f:65:84:35:ca:85:bf:fb:
         23:47:a9:61:30:ae:9c:6b:77:d3:3b:73:51:33:a6:a0:b2:10:
         ab:80:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:56 2025 by rpki-client