Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File:                     8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier:          p1HyOCge+2i3Fxg/drTbByd8KKihokWQ+RppY6+56V4=
Subject key identifier:   FC:35:C5:C8:5C:96:3C:E9:9C:FB:E2:4D:CB:0B:1A:22:BB:DF:6E:63
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer:       /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial:       73F2A6384A6F22D2CD62F974E6091E1730CD220A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number:          0245
Signing time:             Fri 28 Mar 2025 11:42:03 +0000
Manifest this update:     Fri 28 Mar 2025 11:37:03 +0000
Manifest next update:     Mon 31 Mar 2025 22:16:03 +0000
Files and hashes:         1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: UmYKQ5Z4LM/fjQGgk5G3WdXfh8Y2pOt5GR9u/YGuhD0=)
                          2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:a6:38:4a:6f:22:d2:cd:62:f9:74:e6:09:1e:17:30:cd:22:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
        Validity
            Not Before: Mar 28 11:37:03 2025 GMT
            Not After : Mar 31 22:16:03 2025 GMT
        Subject: CN=FC35C5C85C963CE99CFBE24DCB0B1A22BBDF6E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:67:c9:d8:91:d6:77:da:97:9e:79:b4:12:
                    5a:38:eb:58:3d:28:f3:f7:78:9a:73:05:27:11:3c:
                    3a:9b:74:f3:a8:2a:95:b7:8b:8d:90:a0:1e:bf:da:
                    0e:95:ba:43:fd:c8:a4:29:e8:44:22:75:41:d2:bd:
                    58:2e:fc:f0:68:08:c5:7b:8c:92:aa:a4:ab:3b:db:
                    d8:6f:e2:6f:45:68:0c:9f:f4:a9:f0:06:0c:8b:f3:
                    f5:0d:93:27:40:7d:e3:89:1f:da:55:bf:10:a3:07:
                    c6:f9:43:ae:a0:00:55:ee:d5:c9:00:d7:d5:82:56:
                    47:70:da:02:00:ab:86:5e:ad:b9:51:e7:30:73:0e:
                    b9:7d:2c:f1:3a:41:99:ee:41:b2:fe:df:d8:09:cf:
                    d1:f3:b0:af:51:c3:b2:f6:77:2e:24:6c:ea:a2:f8:
                    f6:b9:19:e2:fe:94:29:c7:61:de:25:47:ba:73:34:
                    a8:4e:43:b9:fb:2f:57:be:3a:e9:3f:2c:e2:20:76:
                    c4:49:5a:65:ef:72:8c:f3:95:73:94:6d:64:50:29:
                    4b:84:95:e4:61:63:46:e0:6d:e9:85:be:e6:d6:29:
                    e6:67:c3:79:68:29:f3:d7:df:8e:32:3d:1c:0f:70:
                    d6:b1:48:13:63:33:2a:12:23:57:ff:ba:6b:cd:b7:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:35:C5:C8:5C:96:3C:E9:9C:FB:E2:4D:CB:0B:1A:22:BB:DF:6E:63
            X509v3 Authority Key Identifier:
                keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:98:71:7f:96:31:52:84:7d:37:12:59:59:57:0f:91:41:
         33:7e:9e:e1:f2:e5:9b:48:e2:87:bb:78:7a:50:90:81:9b:dd:
         cb:be:ff:dd:5f:f0:e3:e6:36:30:05:89:66:6d:73:d2:4e:98:
         85:78:93:ea:90:1a:8a:b1:6e:24:4d:aa:79:02:95:8c:1c:2c:
         eb:94:4c:34:76:2e:6c:f7:f4:91:aa:54:fc:86:55:17:97:cd:
         19:3f:53:84:7d:51:96:3c:10:6d:45:e0:f6:74:4d:8b:68:41:
         23:d1:34:7d:92:7d:ad:93:70:54:b1:eb:43:44:f3:e9:35:2a:
         84:da:31:39:d1:0a:ec:9c:16:d0:e8:e7:fa:a0:89:4f:38:63:
         48:09:9c:9a:74:54:9f:11:e3:b5:bf:16:05:87:8a:6f:82:aa:
         50:af:17:4a:91:42:64:58:a8:c9:a7:07:18:88:62:d1:a5:a9:
         94:3a:ad:53:4d:2e:9b:be:77:e8:50:bb:6d:c9:73:81:c7:f5:
         d9:bc:27:c2:85:42:05:d0:7f:d3:59:b5:b5:c3:c2:f1:bf:54:
         1c:56:d5:2a:b9:12:ee:aa:0c:fc:8e:3f:d3:4d:02:a7:b7:3b:
         5e:4d:5a:42:93:0d:41:f2:19:2d:49:c3:28:82:b5:1b:e9:84:
         1c:28:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----