Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
File:                     A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json)
Hash identifier:          Ba1aeQGLO9Ij49kguMOK5NDhbNObCZOG2VJWfCar6XU=
Subject key identifier:   DA:BC:F9:61:77:78:D7:6D:5F:07:AF:74:AE:26:D3:4A:82:01:1F:08
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Certificate issuer:       /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial:       24005E90F37F97D48E679DDE78EC7DAF7C89D1F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
Manifest number:          0328
Signing time:             Fri 28 Mar 2025 08:40:01 +0000
Manifest this update:     Fri 28 Mar 2025 08:35:01 +0000
Manifest next update:     Mon 31 Mar 2025 13:32:01 +0000
Files and hashes:         1: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: O1NUarEkRm8kPfjm/pIKjr0iyWds0yFbzgOQjvgkRyA=)
                          2: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: /FuNiX8aBaUKsrhlS4LNq38rAQU5hjbqhOsWkRWgtz4=)
                          3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: PuTtZPjHW4X1RyAiqWfAslz+ptXSdct78NWuGBO+Yxo=)
                          4: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: zcJ9lbUlTPvPW7kmC3pvFlTVptxPLT8EztV47DQtwfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:5e:90:f3:7f:97:d4:8e:67:9d:de:78:ec:7d:af:7c:89:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
        Validity
            Not Before: Mar 28 08:35:01 2025 GMT
            Not After : Mar 31 13:32:01 2025 GMT
        Subject: CN=DABCF9617778D76D5F07AF74AE26D34A82011F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:8e:af:7a:74:64:92:50:6b:09:74:d4:a6:
                    c6:e0:af:89:13:a7:c1:7c:0f:b6:71:ab:c4:48:7c:
                    8e:66:9c:4a:f7:c9:cc:06:f4:a3:f3:26:e0:7f:c1:
                    e9:79:00:2c:86:71:07:e6:6f:5c:87:b9:99:c7:d5:
                    54:e0:16:0a:8b:96:4b:b4:6f:09:08:bc:be:2b:58:
                    3b:50:77:59:08:f3:4f:c8:32:22:8c:a7:03:c1:f5:
                    f8:87:ec:76:83:75:3a:4f:68:bb:ce:d9:48:3c:85:
                    4e:23:64:ec:8d:b4:99:07:0e:5d:4f:84:6f:ca:6e:
                    8e:c7:f6:d0:4b:af:7f:fb:1e:49:20:99:eb:d5:c3:
                    08:6f:f9:86:09:b1:85:ca:39:4d:d3:e0:7b:4b:84:
                    42:98:0b:11:e7:3b:c5:ce:09:29:5d:81:87:86:7c:
                    6e:72:bd:eb:c0:48:7e:b9:91:20:9e:cb:2c:ff:13:
                    86:a9:4a:f2:97:7e:c4:c0:70:ba:a1:b7:c5:9b:82:
                    16:ef:a9:9c:ec:bd:eb:46:c3:7b:fe:41:49:21:7c:
                    9e:e6:a2:ef:0f:9a:01:d0:24:a2:dc:76:b8:6f:f2:
                    22:3c:09:34:3f:bb:14:69:09:76:5e:9d:59:48:52:
                    08:90:31:79:cc:c5:ac:53:c0:11:18:1e:88:68:a9:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:F9:61:77:78:D7:6D:5F:07:AF:74:AE:26:D3:4A:82:01:1F:08
            X509v3 Authority Key Identifier:
                keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:04:d5:4a:cc:0f:82:ad:02:ed:a5:a5:32:22:4f:bb:20:a6:
         c3:84:d0:51:2d:02:56:cb:e2:3f:19:69:aa:ad:6c:2d:a3:4b:
         fa:16:ec:e5:46:be:47:0e:fd:f1:df:46:73:d6:7e:e5:ee:11:
         ae:8f:4b:3b:a6:28:f0:97:9f:76:49:c0:c4:3f:ed:90:f6:da:
         99:88:81:c6:1f:7b:2e:d0:5e:5a:78:f7:76:57:ea:a9:c3:d7:
         9b:38:21:82:76:d0:80:64:fd:f6:59:69:2d:d0:1d:52:f1:53:
         3b:e0:13:17:b5:4e:28:d7:90:2c:33:6d:e5:10:25:96:76:2e:
         de:33:81:31:ae:d3:54:38:05:c2:53:bc:2f:ff:26:d9:90:d2:
         09:44:95:da:b8:99:a6:5d:41:95:06:d7:bf:77:58:72:ae:b3:
         3b:f8:18:91:91:74:44:d1:ac:72:2e:f1:bb:25:0c:b9:9d:49:
         b7:05:5c:1f:2a:21:7a:16:b8:96:11:dd:0d:96:c3:29:93:c2:
         f5:d2:d2:8a:ca:b6:e3:80:12:5a:05:fc:81:0f:6f:69:6f:7e:
         04:bf:ce:14:00:4d:43:d0:2e:ea:51:83:fe:50:3f:5c:58:c6:
         d8:15:c7:ba:19:f1:3b:57:1a:4a:ae:bf:8e:e3:db:fa:97:38:
         fa:64:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:27:50 2025 by rpki-client