Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
File:                     D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json)
Hash identifier:          RDTsL+8RdNLW/ob/hlurPLwvAWLAIyqTJL/b1MEr8Lw=
Subject key identifier:   98:BA:3D:18:49:63:5C:9F:D0:71:9C:E1:A9:00:C8:58:F5:81:44:2F
Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9
Certificate issuer:       /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
Certificate serial:       4D779B791AF680C964E239C58C31E7707E43FADE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
Manifest number:          0126
Signing time:             Wed 29 Jan 2025 13:01:39 +0000
Manifest this update:     Wed 29 Jan 2025 12:56:39 +0000
Manifest next update:     Sat 01 Feb 2025 19:02:39 +0000
Files and hashes:         1: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: CbfMbvCgPCsp7ZQ9aoMHssBn1O1PksH5eTy9mzohs/M=)
                          2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: TLz1yxR5ee4b/e3IDYBKYGMjTfF/qSNOhivvoOQ0IN4=)
                          3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 2KlFaCiGH4FvI5KYZUM/LwzVbKMH9o1Jq6U1bpkh8OA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:77:9b:79:1a:f6:80:c9:64:e2:39:c5:8c:31:e7:70:7e:43:fa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
        Validity
            Not Before: Jan 29 12:56:39 2025 GMT
            Not After : Feb  1 19:02:39 2025 GMT
        Subject: CN=98BA3D1849635C9FD0719CE1A900C858F581442F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:c9:25:d0:26:1b:24:a0:e5:67:4e:4d:db:
                    da:5e:09:1e:83:01:9b:b9:a2:18:b3:b3:90:47:f0:
                    05:1a:20:d9:c4:e0:5a:7a:22:48:50:87:1e:0d:84:
                    0b:b6:3a:5b:3c:19:1d:75:64:1d:37:8a:ff:c3:7e:
                    b4:55:ce:f5:ba:16:97:dc:cb:9f:73:bd:82:df:95:
                    7d:63:18:41:c7:ac:05:27:50:0e:e2:0d:da:af:be:
                    85:e8:2b:c0:0d:34:27:7f:97:fd:7a:09:d3:04:5e:
                    5b:2c:d7:c1:37:02:d3:6f:09:92:9f:25:90:3f:d8:
                    d1:88:0c:23:60:8c:71:17:0a:64:1c:41:f1:aa:91:
                    79:3b:5c:a2:f1:77:46:57:1d:c4:c9:2e:63:af:93:
                    b8:c1:ad:48:13:33:98:d3:63:79:d3:ee:fc:f5:0f:
                    0f:80:d7:41:fe:2a:2b:b8:2a:8e:93:ad:bf:3a:62:
                    34:64:aa:a9:28:39:b8:18:42:b0:95:fe:b2:08:39:
                    46:1a:fe:82:54:01:ac:b7:69:52:91:9a:cf:0a:02:
                    de:7a:49:ab:f5:4b:4a:be:b8:4b:7f:a4:c8:ef:95:
                    c5:cc:61:d5:89:ba:f1:f0:f1:e6:d6:7c:c4:3c:94:
                    75:a5:9f:3e:d2:9f:1c:4a:b6:f7:91:db:0e:46:e1:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BA:3D:18:49:63:5C:9F:D0:71:9C:E1:A9:00:C8:58:F5:81:44:2F
            X509v3 Authority Key Identifier:
                keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1d:cf:10:da:86:a5:77:4d:8a:25:a3:16:09:cc:84:2c:2e:
         ea:78:5f:c7:b9:4a:9a:70:10:d7:5b:b9:1f:b8:0e:97:58:3d:
         f2:6e:cd:d2:19:5f:e0:bc:06:7b:ff:13:a7:81:ea:89:fb:55:
         0f:83:17:71:03:46:b6:6d:38:83:e4:5c:54:f6:40:54:76:52:
         4e:4b:6e:d7:26:19:20:a6:b5:03:52:ce:a0:51:bd:65:d5:48:
         bd:a3:9e:e9:7a:a2:70:af:9d:c2:b8:f1:97:66:62:5b:15:c8:
         6c:91:72:f6:48:b3:f2:26:51:51:29:b3:3b:41:a9:fd:e8:49:
         77:68:7e:80:1b:59:35:df:cb:0f:81:8d:f8:39:90:56:17:bc:
         8d:75:72:5e:4c:57:5b:ea:fe:d9:b9:32:00:f0:d7:e6:74:f8:
         9c:e6:16:e8:d6:08:38:b0:e1:96:75:ec:74:64:00:98:f2:e5:
         29:2a:14:2a:a0:be:90:95:13:ba:2d:fa:bb:7b:ab:15:7a:7c:
         a0:20:e5:85:a0:7a:ad:d0:e8:5b:90:f6:d3:f6:ea:1d:d6:c2:
         f7:e2:2d:21:af:aa:71:ff:04:af:95:48:8b:6c:5c:00:58:39:
         55:a6:a6:47:8e:25:05:30:7d:fe:58:14:de:ff:09:93:23:72:
         b2:d7:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----