Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
File:                     FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json)
Hash identifier:          CuooWWUSSbp7iWEH+wOpeuiOL7u7TUFR0P4EbhfWjB4=
Subject key identifier:   4E:61:58:00:13:0E:F1:DA:BE:2F:97:2C:FB:09:E1:2B:7C:E9:81:BF
Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE
Certificate issuer:       /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
Certificate serial:       1A2DC2AEDE8CB79CC3FA49515CC18D6CA769D3A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
Manifest number:          04A4
Signing time:             Fri 31 Jan 2025 16:02:08 +0000
Manifest this update:     Fri 31 Jan 2025 15:57:08 +0000
Manifest next update:     Mon 03 Feb 2025 20:32:08 +0000
Files and hashes:         1: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: dFOcQHFB8jGrS5cmAjYieFkOd5ofFrNihywU02Os5xY=)
                          2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: xYvlr5pZjidZLbV3xWDKr9GCYRZmkQJEpxTWLCj2OY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2d:c2:ae:de:8c:b7:9c:c3:fa:49:51:5c:c1:8d:6c:a7:69:d3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
        Validity
            Not Before: Jan 31 15:57:08 2025 GMT
            Not After : Feb  3 20:32:08 2025 GMT
        Subject: CN=4E615800130EF1DABE2F972CFB09E12B7CE981BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:85:f7:15:dc:72:09:9a:23:a3:59:f8:36:
                    6d:6e:53:35:bc:93:2e:ee:b0:2b:17:f2:63:c7:80:
                    ed:b9:c7:c9:42:84:83:ce:3b:30:0b:02:24:24:38:
                    c0:45:73:63:c0:f9:31:ae:31:31:12:69:0d:c8:40:
                    4b:19:d7:cf:9d:36:f6:7d:c5:22:ea:1d:dc:fb:15:
                    67:72:f7:c3:93:7b:4e:f4:c9:a3:90:96:89:15:f0:
                    a0:91:82:90:6d:b2:e5:18:20:18:d7:fb:fa:bc:b8:
                    c0:b5:46:d4:a2:c3:bf:26:1c:5d:0c:7c:ab:91:b9:
                    09:41:1a:77:35:96:72:0e:8e:45:39:4a:24:18:5f:
                    9d:ed:db:23:a3:11:83:9c:5f:e2:12:c5:81:b5:62:
                    0a:eb:dc:5d:e2:bd:8e:7f:5e:87:eb:c9:db:f0:f3:
                    ac:30:1a:14:0a:48:20:c4:6a:d2:6d:b0:c2:a2:ad:
                    4a:c8:08:a1:dc:70:50:17:1a:31:c1:a0:3f:50:34:
                    27:ca:ed:cd:03:99:93:9f:30:2d:42:f8:47:47:0e:
                    f0:d2:d8:1b:ea:ac:87:57:2c:5a:85:5c:b2:0a:bb:
                    48:5e:97:d7:5f:ea:73:71:d1:03:6b:ec:30:e4:12:
                    4e:61:f7:42:10:01:84:fe:a7:99:df:12:f2:0c:35:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:58:00:13:0E:F1:DA:BE:2F:97:2C:FB:09:E1:2B:7C:E9:81:BF
            X509v3 Authority Key Identifier:
                keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:49:d7:cc:a2:96:7b:1d:e0:6f:1b:15:82:47:29:b8:2c:
         16:46:6a:dd:07:d8:58:8e:05:eb:de:4c:0a:a2:10:65:63:6f:
         e3:de:35:5c:b4:34:44:fe:d6:fc:23:cf:a6:d3:9d:98:ac:74:
         c8:d3:f9:e1:48:16:10:cd:9f:8f:79:64:59:46:a7:03:d3:27:
         2e:fb:86:f8:f6:ff:b2:ad:55:ba:3d:f8:e6:bc:2e:e2:02:75:
         fb:ad:ab:e2:62:f4:7a:ab:a4:fd:13:92:ac:3f:8c:b6:e6:5e:
         07:44:fc:cf:5b:59:76:19:8e:00:d6:40:aa:fc:4f:aa:19:23:
         2a:d1:9b:5f:db:3b:d9:f4:c7:71:34:f7:b1:c3:8f:50:bd:89:
         51:68:20:92:85:c5:34:78:c7:df:ea:ee:f4:d3:61:61:57:f0:
         4a:bb:47:23:e1:64:cf:0d:42:a7:f8:ba:fa:57:ee:0f:0d:28:
         fc:6e:0f:73:c3:31:b0:60:d8:d4:b3:76:e2:48:78:5d:59:6c:
         49:91:1f:78:b4:6e:13:ec:49:67:aa:c2:25:de:b1:09:85:dc:
         23:81:53:e8:e1:b4:fa:3b:4a:5f:14:2e:8b:6b:c8:45:6e:a1:
         61:ef:74:24:25:f6:be:c9:e1:9c:b2:7c:fa:fe:2d:c5:df:30:
         98:79:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----