Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
File:                     A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json)
Hash identifier:          WEnocl5nePqk/TaNnOqxH595QZXLt46HJk9mH71jYPo=
Subject key identifier:   66:B2:FD:0A:E1:B3:4C:32:99:B6:77:43:BA:15:9B:04:D5:DB:AB:7D
Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F
Certificate issuer:       /CN=A385F006CB4A332AED2E94013E7482A62617F17F
Certificate serial:       1F82758E72D7C8B39A6BD6693E502B21A16DAE90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
Manifest number:          031A
Signing time:             Fri 31 Jan 2025 18:01:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:56:26 +0000
Manifest next update:     Tue 04 Feb 2025 03:49:26 +0000
Files and hashes:         1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: TvsZgxlaJcqAXngiObcKPB6k+a5DNdJK4lQnQDkOUbg=)
                          2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: qAzvuU29q9dqwW1nnoYiFHHnro3Pl/PA/S48Yp+jOV8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:82:75:8e:72:d7:c8:b3:9a:6b:d6:69:3e:50:2b:21:a1:6d:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F
        Validity
            Not Before: Jan 31 17:56:26 2025 GMT
            Not After : Feb  4 03:49:26 2025 GMT
        Subject: CN=66B2FD0AE1B34C3299B67743BA159B04D5DBAB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:b6:11:5b:19:d2:c3:c6:4e:35:c5:83:59:
                    ca:73:34:ef:8e:ae:93:0b:ab:cb:a2:31:10:62:e2:
                    29:08:75:84:b9:8c:22:f5:7a:14:49:a1:37:76:d5:
                    58:d3:49:e2:e1:c5:bd:3b:01:c8:4d:5e:4b:9c:2f:
                    f0:e5:9b:ef:dc:b6:b1:8d:50:0f:9b:1e:00:2a:27:
                    bf:e7:a3:37:8c:b1:0f:86:0c:2c:4b:bf:6c:49:08:
                    9c:93:a8:9c:c1:20:0d:8b:ed:6f:de:f4:0c:67:18:
                    21:11:d1:10:49:c6:ca:14:f1:09:ce:c5:c2:10:db:
                    3a:0c:fd:a0:52:55:45:d0:02:50:50:86:c0:0f:0c:
                    f6:48:0d:3c:b8:61:f5:fb:d6:4c:2f:c6:77:a9:dc:
                    f7:e1:3e:74:5c:a8:60:fe:14:5e:df:aa:0e:9c:af:
                    18:a8:8e:b8:43:cb:00:a7:cb:3c:a8:37:21:78:93:
                    4d:dd:95:71:3d:71:36:a5:ac:42:ff:5c:2c:c1:61:
                    b5:51:64:cb:9e:59:67:6f:ce:0e:a8:9d:1a:d4:eb:
                    78:52:f3:ed:7b:65:90:5a:d1:b6:33:d1:0d:e2:54:
                    c0:cf:f6:aa:fa:44:15:97:79:6a:83:0a:18:75:bf:
                    af:7b:5a:18:30:ed:49:5a:ad:f5:6e:80:93:a9:44:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B2:FD:0A:E1:B3:4C:32:99:B6:77:43:BA:15:9B:04:D5:DB:AB:7D
            X509v3 Authority Key Identifier:
                keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:a1:bf:f4:12:d8:d9:84:a7:58:19:1a:76:77:4c:e8:10:
         f2:fe:11:f2:54:a3:b4:3f:07:e3:02:02:18:d9:af:b9:98:b0:
         71:33:31:b5:45:6f:fb:07:41:1b:7a:3c:30:ed:c3:53:9c:0b:
         01:e8:bd:d4:9f:25:b9:f4:56:21:a7:fd:b5:cd:f0:2b:58:81:
         69:c5:d9:bd:75:70:fa:4b:6e:4c:a3:f2:af:83:d8:b4:65:83:
         e4:38:bb:0b:99:61:8d:0e:5c:2f:8a:df:89:e9:bf:d7:57:ed:
         9d:57:e6:19:4a:12:d0:9e:9f:6a:5b:9e:fa:61:23:b9:4a:88:
         eb:25:2d:1c:ea:48:c3:23:bb:91:1c:c4:a7:fb:36:e4:17:78:
         b3:ba:fb:82:f6:11:48:99:46:96:8a:ab:d4:63:d9:39:7b:f3:
         5e:2d:56:77:ed:81:5f:f9:bc:15:c0:f9:f9:fb:c0:4f:5e:85:
         92:18:c3:cb:ca:1f:0f:2e:10:d7:52:60:22:13:9b:68:52:83:
         65:86:38:68:86:3a:34:84:fd:a9:4a:b7:4d:4e:34:21:56:bb:
         a6:b2:49:b3:db:50:53:74:3f:e6:39:c3:7f:a2:74:48:85:4e:
         00:64:39:1d:d6:59:fe:24:88:3e:7b:ef:6c:8a:d3:7c:e1:9e:
         42:4e:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----