Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
File:                     A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json)
Hash identifier:          ZEnuRnsbyoFogJ7qPsesZXN5ZdXMBQk4hQgT8vF8JJ8=
Subject key identifier:   6C:BF:97:A2:16:15:B3:7A:FA:63:2D:74:80:40:AE:9E:F2:76:EC:63
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Certificate issuer:       /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial:       2DD4A70FD3EE10C00BB0FF0AFEDA79F94FE10D85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
Manifest number:          02BF
Signing time:             Thu 30 Jan 2025 13:31:09 +0000
Manifest this update:     Thu 30 Jan 2025 13:26:09 +0000
Manifest next update:     Sun 02 Feb 2025 23:27:09 +0000
Files and hashes:         1: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: gB4EZJoHK905CwR/L43FWO/EADXfayVlG7nyunRWHhU=)
                          2: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 7M6efsLhqxjG1H0m8nrpYOTdTc1BnME2E5kel00NXYw=)
                          3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: 8aTJRu9foQFYsb9vuOMv9v2Z6K/Xnx4JbU5S1Q47rNw=)
                          4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: 04XRabDVfE4dREWxVqPX68ogqw6CjteNT+yHxPoaMWA=)
                          5: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: G7lojFR6xjF9+TpY2hZrIC41SHd9F/o33Aya04PbcSY=)
                          6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: lPotcf7YU+xOCDeuMjZ1tnsipDHrIbOt+27H0Jh76mQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d4:a7:0f:d3:ee:10:c0:0b:b0:ff:0a:fe:da:79:f9:4f:e1:0d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
        Validity
            Not Before: Jan 30 13:26:09 2025 GMT
            Not After : Feb  2 23:27:09 2025 GMT
        Subject: CN=6CBF97A21615B37AFA632D748040AE9EF276EC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:c1:9d:11:0d:1d:50:b1:24:2b:37:4d:11:
                    b4:3d:29:5e:aa:8f:8a:af:5b:8b:53:f4:df:88:93:
                    b6:97:6a:d0:d7:ce:fc:02:13:57:59:94:39:e6:ad:
                    a1:69:0f:13:fd:90:99:ba:6f:5b:b3:ba:8c:0f:3b:
                    6d:ee:ce:a4:c2:e2:c4:93:24:37:5a:f2:cc:0c:ca:
                    0f:8f:75:50:f5:24:69:17:0f:bc:cc:59:9b:eb:43:
                    12:97:a7:ce:22:c8:b7:84:4d:24:b2:8d:5e:f0:58:
                    a5:30:fc:f2:17:d7:d1:5e:9c:ae:cb:41:31:72:44:
                    cb:98:08:00:a7:14:f2:88:1b:f5:c6:93:89:df:3b:
                    77:f9:eb:4f:e9:7c:dc:f0:87:bf:0c:10:d9:f2:76:
                    94:63:2f:8f:7a:1b:ce:0e:7f:5a:76:81:1a:ab:2d:
                    80:0f:56:e1:20:b9:df:bc:5c:00:e0:a8:e8:07:c6:
                    4a:a9:d5:c5:ff:36:aa:fd:7e:74:ad:0d:93:05:15:
                    5c:1f:e8:cc:c2:d6:69:1c:fd:ec:04:9c:d3:eb:ec:
                    5e:95:f2:4b:c0:4d:f4:06:88:da:73:25:78:f4:d3:
                    6f:48:28:00:44:c1:3b:84:51:d7:18:08:42:a3:5e:
                    b0:63:2e:e8:7d:0e:51:26:6a:4f:5f:28:27:e7:a6:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:97:A2:16:15:B3:7A:FA:63:2D:74:80:40:AE:9E:F2:76:EC:63
            X509v3 Authority Key Identifier:
                keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:44:52:d5:c5:cf:a3:91:78:d6:48:e4:02:84:91:b3:c4:1d:
         0d:f1:be:0e:8a:c4:0a:1e:96:2c:49:05:25:44:68:f8:50:d5:
         0e:74:74:a0:ec:17:83:ac:9e:9d:83:fb:c3:c9:d5:4a:0e:f4:
         d9:56:d2:13:b3:17:e8:64:37:c3:18:11:29:1f:d2:b8:96:d7:
         7f:3a:d7:b7:3b:03:7b:91:fc:0f:e4:48:4a:72:b5:3c:80:51:
         dd:be:10:64:eb:79:1f:bb:57:a6:e2:d3:31:5d:99:3c:0c:e6:
         5d:a3:d9:5c:7a:af:48:62:9c:ca:9e:f3:61:d9:24:c8:ae:c2:
         ec:c5:e6:02:46:6a:e3:4e:0e:17:17:80:ff:f4:03:2e:ba:cc:
         0f:5f:e5:a2:ac:55:78:8f:85:1a:91:39:fd:34:0b:e6:95:99:
         80:7c:36:12:4a:0f:5a:20:84:bc:15:45:e6:5b:7e:b8:c2:39:
         2c:b4:7c:ab:2e:44:46:cb:97:96:6f:1d:2f:97:4a:dc:61:8b:
         e7:9c:98:15:e9:ab:32:4c:d2:fe:83:d9:3b:f1:10:a1:c7:9a:
         81:e9:b5:30:67:08:fe:14:28:d8:65:e0:28:26:5d:de:c7:75:
         9c:60:92:ab:97:2b:b0:74:ec:4f:c7:78:6d:68:70:67:d9:f2:
         96:90:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----