Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
File:                     5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json)
Hash identifier:          NYNN2TCMbQ1ycS3v+nNE3iS892SMDWVybUlln1gg4jM=
Subject key identifier:   70:EA:E4:E6:29:BA:E7:3C:0B:D9:8C:F5:BF:1C:B4:B4:55:39:36:AC
Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
Certificate issuer:       /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Certificate serial:       0BD4F8A419B00983EFB9360BC978302904F842DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
Manifest number:          017B
Signing time:             Thu 30 Jan 2025 00:11:06 +0000
Manifest this update:     Thu 30 Jan 2025 00:06:06 +0000
Manifest next update:     Sun 02 Feb 2025 06:03:06 +0000
Files and hashes:         1: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: qln4Vk3LqPuSEAyfEFKIbrl7uM6MoBml3amcry/eX+k=)
                          2: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: 8AjTeHuDgGT0QiqXo22K3yaeDAr9BaBDooQ7NY6mhqg=)
                          3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: lGN1rdaCl5aXrposBbXJyZDSRAHwOJHZSSN67w6M/PQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d4:f8:a4:19:b0:09:83:ef:b9:36:0b:c9:78:30:29:04:f8:42:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
        Validity
            Not Before: Jan 30 00:06:06 2025 GMT
            Not After : Feb  2 06:03:06 2025 GMT
        Subject: CN=70EAE4E629BAE73C0BD98CF5BF1CB4B4553936AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:e7:09:11:d1:ac:25:c4:7c:bf:dc:7b:0f:
                    2e:6d:d1:55:1b:44:74:ec:04:d3:46:16:d2:53:26:
                    1a:4d:06:97:71:81:9f:ad:1e:fb:49:ec:5f:43:7e:
                    2d:64:18:a9:c5:59:68:dc:dc:64:55:62:ab:52:b6:
                    a4:a7:ad:b8:00:7d:2b:d5:4e:5d:a1:62:d0:7f:9d:
                    c1:8b:d3:cf:2d:4c:9a:37:b2:de:68:36:73:26:b5:
                    c7:4b:dd:f4:51:2a:2b:de:a1:53:5b:78:03:5d:f3:
                    26:a4:cd:9d:f8:49:b5:33:a5:ff:88:2e:37:dc:8e:
                    73:6f:78:8e:34:07:31:75:8c:79:98:00:ec:7d:fd:
                    dc:a5:5e:72:49:ee:8d:46:d9:f6:7d:4a:4d:25:a4:
                    e1:59:b9:eb:a2:f5:42:85:a0:d6:eb:15:ea:f7:2f:
                    f3:b7:55:a6:d4:3b:59:82:ea:2f:f9:b2:af:6c:2c:
                    21:99:84:a7:73:08:84:19:70:8a:0c:e7:2e:98:ea:
                    b7:7f:83:86:33:2f:d8:a9:cc:d6:06:e8:0d:4b:92:
                    4f:ce:3f:cd:50:d1:25:2f:48:1d:eb:b8:d6:56:23:
                    61:54:b6:e7:48:b5:b4:ba:49:78:8e:d8:8e:7a:90:
                    e7:3f:15:81:2d:68:ab:a6:29:64:42:c4:8a:54:73:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:E4:E6:29:BA:E7:3C:0B:D9:8C:F5:BF:1C:B4:B4:55:39:36:AC
            X509v3 Authority Key Identifier:
                keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:91:35:c0:b9:9f:cf:20:ec:bf:0b:23:c9:17:36:48:82:
         9b:fd:24:80:77:a4:88:b0:ee:6f:fc:a2:f3:89:1f:31:0e:0a:
         c7:26:79:cd:cc:20:fb:f3:a6:74:8d:4c:fd:ed:07:b0:d2:03:
         2f:27:75:ff:67:3a:f6:e9:a1:58:d3:f2:f5:81:b1:99:bb:05:
         a9:5f:6f:c0:58:b6:57:44:a2:8e:e2:09:3e:62:c5:e7:7c:68:
         27:b0:1d:74:0c:34:93:a9:b8:6e:53:99:e6:7a:13:e8:0b:10:
         7b:f7:ab:5b:d9:15:fa:c5:c0:29:59:a2:ea:2b:b3:cd:61:fc:
         22:60:12:0d:88:a3:49:83:f1:7f:25:13:4d:ad:5d:22:27:19:
         01:dd:c0:09:7c:50:47:4d:d0:b8:91:09:bd:63:7b:58:22:93:
         e9:3d:55:07:59:fb:9f:b6:cc:62:4d:90:69:28:a1:fc:2c:4c:
         9d:46:bd:86:a0:42:26:53:82:40:4a:e5:ae:9f:87:47:92:1e:
         c3:e3:47:64:b5:32:a1:87:2a:91:de:86:03:56:97:b9:ac:1a:
         6f:13:c6:f6:c3:8b:66:04:0d:04:5d:e3:40:6c:f5:a1:ea:e5:
         05:82:e3:39:8c:64:e6:d5:09:ce:57:7d:74:ae:4d:62:59:85:
         db:bc:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----