Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
File:                     308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json)
Hash identifier:          arcMhKuzXvp2h0rodq/o+GDR31uVUd62Cx+jHCeAskE=
Subject key identifier:   49:9A:86:F8:7A:23:BC:E5:99:47:49:99:46:44:96:23:F6:4F:21:62
Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4
Certificate issuer:       /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
Certificate serial:       629A07ED7A0CA097A875E8ADCE774BA122BB8FAF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
Manifest number:          8B
Signing time:             Fri 28 Mar 2025 05:21:47 +0000
Manifest this update:     Fri 28 Mar 2025 05:16:47 +0000
Manifest next update:     Mon 31 Mar 2025 12:21:47 +0000
Files and hashes:         1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: SbqmU50Nz64vEk85KWblqfSW5HuAEanG1AXQoiju35s=)
                          2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: 06Cec8xVPiYb0c70fqAa/HVAsGAHQ3+T6hqXoF+BqVw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9a:07:ed:7a:0c:a0:97:a8:75:e8:ad:ce:77:4b:a1:22:bb:8f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
        Validity
            Not Before: Mar 28 05:16:47 2025 GMT
            Not After : Mar 31 12:21:47 2025 GMT
        Subject: CN=499A86F87A23BCE59947499946449623F64F2162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:f6:8c:49:b1:d4:80:46:00:df:09:df:88:
                    1c:e2:d2:1a:64:ee:53:01:6e:a1:6f:ca:65:3e:f0:
                    a1:ba:ac:2e:f2:fc:ed:ac:fd:88:4a:ab:4d:88:ff:
                    62:01:cb:bd:b7:60:84:e6:ab:55:90:a6:f5:e5:52:
                    3d:0f:c7:6f:8f:7e:87:e4:d9:bd:9c:5a:06:2b:a1:
                    bb:be:07:97:e8:ec:4b:59:57:75:63:27:ef:3c:d8:
                    bd:f4:b7:4a:29:9e:68:30:94:50:a0:6c:ff:1e:ff:
                    bd:74:97:bf:74:8b:6a:04:19:cb:3d:a2:63:55:71:
                    66:8b:04:e5:27:a0:53:bd:08:42:0c:8c:5d:cd:83:
                    c2:ec:52:29:12:58:f9:d5:5b:04:b4:2c:f7:6f:14:
                    64:6a:5b:05:b6:88:1d:40:5f:f7:4a:00:06:c2:6e:
                    a4:4a:74:e4:ad:e4:4a:3c:07:21:e3:f3:d5:62:32:
                    33:02:b6:c1:f5:4b:2f:9f:23:d0:22:81:f2:e8:04:
                    5f:45:3d:ec:d2:c6:1c:31:9b:4d:5f:58:ed:58:31:
                    69:c6:d9:3d:9b:81:c1:78:07:48:34:2a:99:28:a2:
                    99:bb:30:52:1f:33:ea:d4:c8:b3:0f:60:fc:fe:3e:
                    c0:1d:90:93:ac:6d:53:00:42:84:f1:94:f3:47:d2:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9A:86:F8:7A:23:BC:E5:99:47:49:99:46:44:96:23:F6:4F:21:62
            X509v3 Authority Key Identifier:
                keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:92:c9:50:54:2a:07:fd:05:42:b6:03:23:90:02:da:3c:
         29:1b:be:b0:63:b4:7b:2a:88:59:9e:de:99:67:69:4c:72:46:
         93:ff:c4:40:4f:42:b1:40:ec:e5:bc:68:89:e4:24:b0:cf:04:
         54:11:12:c5:97:8f:17:6c:45:34:55:ce:34:e5:30:36:a9:e1:
         e3:1e:be:05:30:73:f0:94:2c:40:2d:02:6f:5f:83:71:10:18:
         39:19:da:3f:ac:91:22:b5:ec:8c:41:7b:8a:4d:30:50:03:43:
         d6:0c:9b:e5:eb:1c:5b:12:93:05:2a:3d:9f:19:11:3a:35:85:
         f0:e7:4e:01:48:ab:c5:05:55:f4:9c:f2:df:99:59:65:f5:41:
         9e:75:0d:55:a9:3b:c8:68:0b:32:e4:4a:46:0a:cb:79:b4:f9:
         80:47:08:cf:7e:49:2c:42:c8:8b:c1:e4:87:16:a7:8b:42:62:
         36:2b:55:3b:3f:ea:45:7d:59:c1:b0:48:76:a5:5b:f1:d9:23:
         85:ff:6c:88:1e:03:e3:d3:7c:8e:ed:5c:ec:59:3f:44:29:dc:
         86:94:a3:f1:d6:48:d9:8d:16:32:60:3a:3b:60:18:3a:d9:ce:
         bb:18:1b:e1:62:8b:05:f1:3c:26:74:e0:05:9f:e8:3e:01:a5:
         0a:d5:b5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----