Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
File:                     04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json)
Hash identifier:          4jzKOq8gJnMBEIqt0uLmuKZTNM3OJpPu6ijWdNDMkDQ=
Subject key identifier:   A2:A3:6E:44:CD:0D:0C:84:A3:31:40:9A:75:55:CB:74:B8:B5:32:B1
Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00
Certificate issuer:       /CN=04D3D2E060243AD917D4F682922E4A805EDE3300
Certificate serial:       75DCA9C96C4BEF005BE3341E4F64B45828428B34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
Manifest number:          8D
Signing time:             Thu 27 Mar 2025 18:31:52 +0000
Manifest this update:     Thu 27 Mar 2025 18:26:52 +0000
Manifest next update:     Mon 31 Mar 2025 05:53:52 +0000
Files and hashes:         1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: YOfV9l8mIphWSX9GO2VG6QOcO1lYY9wjqJShR8OC/dU=)
                          2: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: /J4qwElze/bQ2HOvKHKpbauyy3nIBEQmoLrnIDKLWb0=)
                          3: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=)
                          4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: +xp5CBmiGk+3MDPz5SJknSR5c8G2IL4u3rctyixyt48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:a9:c9:6c:4b:ef:00:5b:e3:34:1e:4f:64:b4:58:28:42:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300
        Validity
            Not Before: Mar 27 18:26:52 2025 GMT
            Not After : Mar 31 05:53:52 2025 GMT
        Subject: CN=A2A36E44CD0D0C84A331409A7555CB74B8B532B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:40:c2:54:2b:10:e3:83:cb:96:68:a7:71:
                    37:56:b8:50:1f:b5:66:bc:7c:16:95:b6:8d:66:04:
                    82:67:9a:3c:37:5c:ed:58:ab:fb:0c:0b:2c:15:2e:
                    15:25:6d:9d:c9:27:93:15:3f:53:f5:a0:f6:c1:13:
                    af:d9:6a:1c:77:f0:f9:98:85:c7:1f:65:67:d3:5b:
                    c3:23:e9:a4:8b:6e:7c:78:d1:63:09:0d:3e:fe:ff:
                    f0:e9:df:3b:bc:f2:b6:aa:a0:11:6e:78:ec:de:2a:
                    66:e4:09:50:4d:a1:d6:4b:10:14:2f:22:e4:9d:2d:
                    fd:dc:08:92:83:41:37:15:5e:66:26:01:88:5d:99:
                    4d:f4:45:88:d7:ab:a4:23:8e:69:b6:46:64:f7:d2:
                    14:4f:61:95:72:93:aa:1e:c9:16:e5:88:61:28:54:
                    3b:f5:9f:9a:02:0f:23:c1:67:0b:52:2a:67:3d:70:
                    a7:76:c1:73:9c:d4:b4:5d:14:a8:58:99:d4:6f:e5:
                    d7:0e:49:e3:94:5f:e4:cd:f4:f9:c6:fa:49:fc:ee:
                    87:77:5b:a9:0d:31:2c:af:b3:b8:0a:62:2d:4a:c8:
                    32:22:b6:e5:80:ec:56:7b:c4:e3:56:e4:85:e8:39:
                    42:85:79:f0:97:73:fa:24:a1:c4:6d:97:95:b5:95:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A3:6E:44:CD:0D:0C:84:A3:31:40:9A:75:55:CB:74:B8:B5:32:B1
            X509v3 Authority Key Identifier:
                keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:85:9b:56:c1:4e:c6:67:76:90:7d:4b:b4:e1:f5:f6:0b:ca:
         15:92:97:09:c1:9c:84:fb:f3:e7:3b:29:df:86:44:cc:eb:3d:
         78:95:03:af:3b:16:3f:7a:74:73:06:48:59:7b:7e:91:85:a0:
         8d:d0:9c:55:89:c3:a8:a7:31:dc:2b:dd:a6:84:5a:b5:ea:80:
         84:7a:56:a6:5d:56:0d:f5:ee:83:51:c9:6a:13:90:21:88:82:
         e3:1a:f7:fc:2a:d0:24:dc:db:de:d6:37:83:29:19:0f:e5:7c:
         0a:20:1b:e6:10:3e:ec:94:02:4e:14:f2:ed:06:7b:a5:0b:5e:
         f7:5b:0b:d8:32:61:8b:18:18:9a:c9:22:5f:95:b7:57:4b:b9:
         06:8b:da:c7:35:8b:d8:ee:bc:5d:6e:d3:e4:cc:27:27:c6:5e:
         57:51:e3:95:d1:af:d2:ac:f2:7e:ed:42:fe:c4:b1:85:5d:f7:
         4e:4d:b4:0d:4a:31:bd:7a:4e:1b:e7:15:49:99:c8:f0:ea:60:
         7c:83:34:81:f9:c5:20:6d:81:37:fe:4e:8d:a8:d6:f0:ff:e0:
         a9:6e:aa:ad:ce:e0:85:85:1e:14:29:cf:fb:a3:fd:16:60:d0:
         3a:d4:07:86:2a:77:54:c2:5f:f3:c8:4e:c4:31:5d:bb:00:31:
         4e:f8:0b:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUddypyWxL7wBb4zQeT2S0WChCizQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1
RURFMzMwMDAeFw0yNTAzMjcxODI2NTJaFw0yNTAzMzEwNTUzNTJaMDMxMTAvBgNV
BAMTKEEyQTM2RTQ0Q0QwRDBDODRBMzMxNDA5QTc1NTVDQjc0QjhCNTMyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2UDCVCsQ44PLlmincTdWuFAf
tWa8fBaVto1mBIJnmjw3XO1Yq/sMCywVLhUlbZ3JJ5MVP1P1oPbBE6/Zahx38PmY
hccfZWfTW8Mj6aSLbnx40WMJDT7+//Dp3zu88raqoBFueOzeKmbkCVBNodZLEBQv
IuSdLf3cCJKDQTcVXmYmAYhdmU30RYjXq6Qjjmm2RmT30hRPYZVyk6oeyRbliGEo
VDv1n5oCDyPBZwtSKmc9cKd2wXOc1LRdFKhYmdRv5dcOSeOUX+TN9PnG+kn87od3
W6kNMSyvs7gKYi1KyDIituWA7FZ7xONW5IXoOUKFefCXc/okocRtl5W1lURpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoqNuRM0NDISjMUCadVXLdLi1MrEwHwYDVR0j
BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw
MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF
MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3
M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB
ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIiFm1bBTsZndpB9S7Th9fYLyhWSlwnBnIT7
8+c7Kd+GRMzrPXiVA687Fj96dHMGSFl7fpGFoI3QnFWJw6inMdwr3aaEWrXqgIR6
VqZdVg317oNRyWoTkCGIguMa9/wq0CTc297WN4MpGQ/lfAogG+YQPuyUAk4U8u0G
e6ULXvdbC9gyYYsYGJrJIl+Vt1dLuQaL2sc1i9juvF1u0+TMJyfGXldR45XRr9Ks
8n7tQv7EsYVd905NtA1KMb16ThvnFUmZyPDqYHyDNIH5xSBtgTf+To2o1vD/4Klu
qq3O4IWFHhQpz/uj/RZg0DrUB4Yqd1TCX/PITsQxXbsAMU74C1Y=
-----END CERTIFICATE-----