Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
File:                     D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json)
Hash identifier:          KiRxHw0LaUwSzXvB9jlnfnUdVPCebUoAb9CIgBehuzc=
Subject key identifier:   94:E4:FE:34:B6:90:6A:03:53:BE:2D:F5:61:DF:49:A0:ED:73:3C:1E
Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A
Certificate issuer:       /CN=D8D82E797873C8877988A42E5C473D1919238C2A
Certificate serial:       0204948E2D9433263E934C488B621DEAB2C08C04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
Manifest number:          A8
Signing time:             Thu 30 Jan 2025 12:40:49 +0000
Manifest this update:     Thu 30 Jan 2025 12:35:49 +0000
Manifest next update:     Sun 02 Feb 2025 17:52:49 +0000
Files and hashes:         1: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=)
                          2: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: DOw/xgeA806arswGHmACLehysDKexfr9Vq7bZAe8Stk=)
                          3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=)
                          4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:04:94:8e:2d:94:33:26:3e:93:4c:48:8b:62:1d:ea:b2:c0:8c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A
        Validity
            Not Before: Jan 30 12:35:49 2025 GMT
            Not After : Feb  2 17:52:49 2025 GMT
        Subject: CN=94E4FE34B6906A0353BE2DF561DF49A0ED733C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:1a:12:53:60:46:f1:61:5e:34:48:0e:8e:
                    4c:ab:15:fc:e6:bf:3c:57:b1:a0:77:52:b7:1c:ad:
                    69:90:78:0f:ea:a0:bf:5c:54:2e:76:cc:b4:ed:c6:
                    6c:65:3a:0a:17:c9:1d:d2:f5:8b:b9:99:b5:99:b5:
                    cb:d5:59:33:ad:20:1a:e2:45:96:4e:be:13:9b:de:
                    24:91:30:32:16:79:17:23:e8:36:01:ab:7a:c2:a6:
                    cc:5a:28:7e:50:5c:97:92:d9:ac:5a:26:7f:31:67:
                    65:bb:a9:e0:c0:84:0b:38:41:38:5d:db:4e:41:24:
                    63:4f:14:8b:42:c8:59:a1:eb:d2:34:d3:70:ce:bc:
                    18:ff:13:e4:a1:6b:f5:1d:5d:05:6c:bf:d1:a6:17:
                    a8:3e:70:81:d2:16:36:a1:4d:e8:51:e3:3e:dd:42:
                    b3:e4:c5:58:16:11:9b:7f:17:03:d8:8f:d2:f9:cb:
                    00:72:2b:1f:38:80:79:3d:4f:6d:e5:d9:8f:a3:a0:
                    66:87:3c:83:86:47:30:f7:88:58:cb:37:48:06:7b:
                    9f:49:15:7f:b8:b8:79:de:8f:12:5f:17:d5:93:fb:
                    ad:c6:90:d9:15:8f:7b:4c:e7:02:f5:26:1a:7f:a6:
                    5c:0f:b8:c6:46:7f:eb:81:00:13:e3:3b:df:33:c0:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:FE:34:B6:90:6A:03:53:BE:2D:F5:61:DF:49:A0:ED:73:3C:1E
            X509v3 Authority Key Identifier:
                keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:5b:37:fc:de:2f:0c:4a:ad:cf:dd:40:f0:30:94:c3:e0:
         d8:a5:5d:f1:39:49:a6:50:0f:1e:3b:27:00:b2:d4:0a:96:f4:
         28:44:0b:19:75:bc:4b:f3:f9:eb:c1:04:cc:d6:ad:70:2e:70:
         6c:6f:25:1c:70:25:25:c4:62:cc:bf:b5:28:8b:6c:6d:fa:ad:
         6d:21:e8:f8:02:78:50:3a:14:4b:ef:30:e2:cd:33:7e:c5:5d:
         96:86:33:5d:f1:48:fd:9e:6a:e6:7c:17:6e:a3:2c:b1:ae:31:
         af:d9:b8:c8:90:e1:46:e6:a5:8e:1d:bd:17:cb:ed:c2:23:82:
         fc:76:6c:bd:37:e0:c5:1e:ea:44:41:94:84:68:7d:7d:46:51:
         9d:24:72:a5:55:a9:63:8f:c1:45:47:84:bf:1c:c2:5b:23:83:
         20:d1:c7:a1:5f:9c:0c:55:df:6c:72:19:66:d6:d2:aa:70:fd:
         a7:64:f3:c9:21:c0:6d:30:e9:86:b5:78:ac:c3:14:69:9a:d1:
         c1:32:1b:67:10:a2:ce:ce:30:b5:97:10:bc:2b:fe:9e:f5:3e:
         55:b5:ec:fa:48:77:e1:ec:96:3d:33:98:93:93:95:59:07:44:
         dd:23:c1:0a:4c:3f:e7:4e:2d:3b:04:c0:26:de:ce:24:28:42:
         13:ba:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:10 2025 by rpki-client