Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
File:                     03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json)
Hash identifier:          /7KtcC5FOjZX8HSMKwz1QqlT2X/Qd7U9l0tFTzcau84=
Subject key identifier:   E8:24:39:61:00:A8:4E:70:CB:FA:83:1B:7F:7A:E7:33:89:40:8C:F0
Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
Certificate issuer:       /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Certificate serial:       2F730764AC60B47A751ED4F61A06600FD1F27544
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
Manifest number:          0322
Signing time:             Fri 31 Jan 2025 06:30:55 +0000
Manifest this update:     Fri 31 Jan 2025 06:25:55 +0000
Manifest next update:     Mon 03 Feb 2025 12:01:55 +0000
Files and hashes:         1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: D1oTnNhgCKhlyJ3cW8vY+L+pUIeYkyHgdFvyp1x9BkU=)
                          2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: NKXup27OqOBSLgrurMFCCNSz709oADuMPJCkOGy9SSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:73:07:64:ac:60:b4:7a:75:1e:d4:f6:1a:06:60:0f:d1:f2:75:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
        Validity
            Not Before: Jan 31 06:25:55 2025 GMT
            Not After : Feb  3 12:01:55 2025 GMT
        Subject: CN=E824396100A84E70CBFA831B7F7AE73389408CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:a8:c0:7a:87:38:ee:dc:fe:6d:d6:dc:9e:
                    d0:b2:33:ea:c1:52:12:a6:66:f7:dd:e0:49:79:e7:
                    16:5b:1f:f5:32:00:1a:9a:4a:c6:3d:7e:f0:b1:72:
                    5c:cb:b8:c8:7b:87:99:d1:46:10:90:c6:dc:95:42:
                    6b:5f:a7:e5:bb:6e:01:f2:c9:be:8a:9f:4a:81:23:
                    47:30:95:fa:1c:61:43:bf:3c:c9:94:65:ca:69:44:
                    26:5e:22:95:80:4a:2f:ba:c0:07:0f:38:c3:64:f1:
                    29:f6:4b:05:85:70:c0:64:05:45:21:40:93:9d:45:
                    03:2d:0f:56:49:aa:fa:e2:e5:df:8b:36:7d:50:3e:
                    a5:a1:2d:75:85:48:8c:5c:a3:df:a0:ad:27:08:f4:
                    ca:e9:c9:ae:35:13:21:f6:40:eb:1a:d4:fe:cc:ef:
                    e9:fb:c6:e9:7e:86:3e:74:04:8d:4b:36:36:cd:72:
                    13:3f:1e:a0:02:77:4c:dd:a4:18:23:5a:ff:98:d7:
                    bd:ac:a9:1a:de:ca:6e:d6:3f:7b:65:b4:fc:ba:99:
                    ad:b2:13:b5:f7:9c:8c:c4:b9:42:54:8c:7e:11:98:
                    e8:b9:82:5d:50:14:74:c7:65:32:72:21:3d:e6:82:
                    b8:1c:69:8e:ad:36:d6:59:d1:62:1d:97:2b:a5:4f:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:39:61:00:A8:4E:70:CB:FA:83:1B:7F:7A:E7:33:89:40:8C:F0
            X509v3 Authority Key Identifier:
                keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:8b:f6:02:2f:e8:6c:8d:6d:3e:98:c0:ff:8b:6d:01:3f:
         81:d8:6a:75:6b:1d:e0:05:08:2c:bb:a5:09:3b:64:a8:ac:df:
         d5:3d:f4:07:15:9a:da:cb:8e:46:54:4e:24:d0:a3:1d:16:77:
         bd:51:8f:ce:82:b8:4e:73:92:63:da:68:ca:86:2f:02:8c:8c:
         2c:51:00:e0:f8:96:4d:22:46:91:9f:73:1d:d0:83:d2:87:83:
         07:9f:a3:a9:30:4b:6e:4a:e0:ce:e1:bc:ed:d7:79:df:95:81:
         eb:e3:e1:cc:23:40:b2:bd:83:6a:2c:f1:d8:12:b0:2d:50:d2:
         84:d9:77:60:9b:44:0e:d3:8f:e5:5f:7a:07:ef:e8:1f:41:a6:
         08:7d:ea:9a:06:85:9d:8e:42:16:0b:8e:ca:2d:e8:69:a1:c9:
         d1:39:e9:08:4f:bf:93:88:ac:83:d1:ba:08:b7:1f:e4:74:f5:
         cc:16:14:05:dc:b1:f0:4d:09:0b:3f:97:d0:2b:a9:75:6a:9f:
         2d:ed:0f:bd:7b:20:76:9b:78:24:a9:6e:44:40:3d:7c:82:bb:
         0a:b5:e8:f6:af:74:31:37:3c:15:f1:a4:f1:b9:44:80:b3:40:
         be:af:ac:54:e2:03:cf:0d:2c:44:6b:1b:26:84:c3:34:62:cd:
         06:f5:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:40 2025 by rpki-client