Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft
File:                     D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json)
Hash identifier:          v/dRfR/yQ/YpmZWq4Q3wYWr7nDbtGqNZzSl2MGgIaPs=
Subject key identifier:   3F:80:E9:70:2C:A2:01:E1:7B:62:3E:7C:69:08:19:55:B8:8F:70:C7
Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23
Certificate issuer:       /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23
Certificate serial:       42C216FE16A3A136F14EDB94086CDD1042DE310A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft
Manifest number:          04A1
Signing time:             Fri 31 Jan 2025 12:31:09 +0000
Manifest this update:     Fri 31 Jan 2025 12:26:09 +0000
Manifest next update:     Mon 03 Feb 2025 19:53:09 +0000
Files and hashes:         1: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iNjcB0kWnopXWaRjUuHXoGmYpnB3R6bix+q7nd5LKus=)
                          2: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: D3QpbLwBuqBnzghQzR94brnrZBQs5SslJENq3gZzkrM=)
                          3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: M8G7fg26FDnNwWV4HPrq23C/br3Zk2rCpobcnxBUCyY=)
                          4: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: TcB6exZ5fMIh2Pj1DybzLtvWDrPMgNPKT1QB62L7KLo=)
                          5: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: 5DrcuSL2kj2578vfxL+VIIRLyXGA+oCNPnvjmoU21cs=)
                          6: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: hQDC9v2yWbYZiHxog5fWu9s3/ZtDVdDk75QTAxXB7es=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:16:fe:16:a3:a1:36:f1:4e:db:94:08:6c:dd:10:42:de:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23
        Validity
            Not Before: Jan 31 12:26:09 2025 GMT
            Not After : Feb  3 19:53:09 2025 GMT
        Subject: CN=3F80E9702CA201E17B623E7C69081955B88F70C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:8a:7c:3d:c1:2e:57:b5:e2:65:ff:6a:8a:
                    27:c3:0e:9a:38:b0:7d:87:5c:b2:d2:9d:90:37:d6:
                    30:f7:8c:1b:6a:86:82:5d:2b:19:13:b1:7c:51:8f:
                    18:ad:6b:69:04:cc:22:a3:7c:c1:8f:a4:94:03:c1:
                    ec:a3:2f:c8:61:ce:7f:d7:94:3f:05:a5:77:69:a6:
                    72:82:f1:d1:28:d5:35:cc:ce:8f:75:35:1b:12:ea:
                    65:28:99:70:e9:f6:f5:22:0f:e3:a9:4b:16:21:cb:
                    32:a6:4b:10:98:c2:d1:e1:41:e8:8a:b6:60:f6:bc:
                    09:4f:39:62:e7:4a:71:27:4a:6c:7e:67:d6:a5:92:
                    dc:c3:6b:e7:bc:c4:65:25:ed:4b:9e:60:ad:b8:f9:
                    92:3d:16:b8:e4:74:87:18:99:6b:a1:80:3e:37:74:
                    e4:f2:fa:49:f8:e5:c7:62:28:54:f0:0d:a8:1f:2f:
                    41:fb:5e:e3:43:6f:85:1e:9c:dd:8e:80:56:7d:82:
                    fb:48:50:a2:d6:32:91:86:c9:fa:10:d4:ef:da:73:
                    12:e3:24:4a:2a:2e:d6:9c:fc:fc:d2:b1:af:f0:96:
                    22:2d:dc:f8:c7:aa:b8:37:9a:40:c8:18:48:29:46:
                    eb:b1:a1:10:14:0f:ca:1b:e7:7c:33:58:12:fb:3a:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:E9:70:2C:A2:01:E1:7B:62:3E:7C:69:08:19:55:B8:8F:70:C7
            X509v3 Authority Key Identifier:
                keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b5:56:5d:75:a1:69:0a:c3:b0:26:8b:84:83:e1:6b:cc:10:
         91:14:f3:d4:21:65:70:e7:13:1f:a6:79:20:12:cf:c8:4c:eb:
         8c:b9:a3:0e:85:3b:9b:db:95:ba:41:ac:e7:cd:c2:d6:b2:8f:
         45:de:26:14:da:0e:3e:b2:68:8e:93:f2:c4:ea:11:b0:05:36:
         8f:14:88:cb:c5:22:89:d7:a3:fd:1f:02:c5:64:18:b2:95:64:
         20:0c:8b:15:f4:41:7b:af:83:e9:cd:03:2d:21:77:28:95:46:
         65:e7:3f:81:30:b2:fa:57:0a:4c:ec:66:bc:a0:8e:23:1b:8f:
         9a:4d:6c:43:e1:da:ff:e9:ad:67:22:c0:bd:df:a8:80:ae:f2:
         3b:40:a9:d8:b5:fb:ab:e3:0e:48:91:96:d6:03:15:3b:3a:50:
         09:e2:05:44:bf:62:73:3e:05:22:32:c5:f6:64:35:df:90:95:
         4c:2f:80:63:f7:34:1c:16:6d:da:9b:f2:e3:9c:6c:3a:51:26:
         2a:31:94:e6:b8:a0:9f:33:7a:57:84:57:d5:64:e6:ff:0c:41:
         e3:6b:3b:3f:ae:1e:06:9b:39:e9:0f:7a:d5:21:5c:cb:11:60:
         c4:9e:b4:d4:dc:eb:eb:ee:da:d7:b2:a6:1c:8b:8b:15:01:cb:
         4d:39:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----