Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
File:                     21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json)
Hash identifier:          CpNeuFfzXfTIAPFK7stxhD/J260nCcDsbES1WZiey3g=
Subject key identifier:   4F:F1:DB:D3:AD:9A:6D:A1:2B:95:D3:65:C9:10:19:D9:87:0E:6E:32
Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
Certificate issuer:       /CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Certificate serial:       2FAF284256C530DDB291D9DEA4899B866B649CC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
Manifest number:          01C5
Signing time:             Thu 27 Mar 2025 13:41:42 +0000
Manifest this update:     Thu 27 Mar 2025 13:36:42 +0000
Manifest next update:     Sun 30 Mar 2025 21:10:42 +0000
Files and hashes:         1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: C8t9BtN5KlJ3bUH4bqi/VMlzj5ErpPJwL7kVguMrvB8=)
                          2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:28:42:56:c5:30:dd:b2:91:d9:de:a4:89:9b:86:6b:64:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E
        Validity
            Not Before: Mar 27 13:36:42 2025 GMT
            Not After : Mar 30 21:10:42 2025 GMT
        Subject: CN=4FF1DBD3AD9A6DA12B95D365C91019D9870E6E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:21:71:a9:5c:68:bc:40:39:93:cb:a0:d8:
                    cb:71:94:36:53:43:a7:bb:b4:9b:fa:33:a8:7a:56:
                    94:ab:06:ea:b1:c5:b3:9c:6b:32:a0:df:17:9d:e8:
                    be:50:d0:03:12:81:7d:2a:ea:32:a7:d3:30:7c:c8:
                    a1:22:9a:0a:25:35:21:d0:29:c6:e4:21:f6:b9:1c:
                    c2:85:a5:8a:c8:61:8f:90:09:c7:8d:f0:7b:14:70:
                    17:65:55:97:e1:db:db:1d:c6:62:6a:f5:7a:ab:3c:
                    a4:a6:ad:8b:5e:99:32:d2:6a:2c:9d:84:ea:4d:63:
                    cb:d2:22:ff:4c:22:35:94:81:c9:11:74:1e:62:f7:
                    17:0b:3c:c9:fd:d0:ca:11:df:1e:a4:68:66:6e:af:
                    e7:ce:64:03:4f:18:93:96:89:cb:6a:72:a2:da:2e:
                    2f:b0:60:4e:64:f0:0f:ae:f3:30:ef:c5:64:c6:ff:
                    00:a7:ba:58:95:85:b2:d9:36:aa:8e:18:56:cd:81:
                    69:d2:89:68:ff:fe:c4:e6:a5:6a:c5:a1:c2:f8:0b:
                    21:19:24:1e:3a:af:d9:c5:ba:84:68:a0:46:80:a3:
                    cb:8a:82:8e:bb:58:69:2a:ef:df:01:83:53:68:4d:
                    ab:60:a4:13:a9:cd:bb:3f:f3:8c:b3:9d:e8:e8:93:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:DB:D3:AD:9A:6D:A1:2B:95:D3:65:C9:10:19:D9:87:0E:6E:32
            X509v3 Authority Key Identifier:
                keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:69:6b:2a:31:21:63:4e:1d:cf:6a:99:a2:0d:a4:39:95:
         8d:6e:a3:f8:6f:17:c8:2f:0f:21:3c:3c:3a:89:cf:a9:0f:72:
         42:39:11:8b:b2:80:ab:9c:c7:b5:90:b5:5b:50:10:21:01:c4:
         da:03:ec:13:31:06:06:4d:0b:c2:58:e0:08:2c:e6:bc:87:81:
         70:ee:20:ea:6c:f3:6a:25:ea:93:6b:78:35:85:0d:82:4f:ae:
         bc:7a:d1:6d:c5:bf:02:23:9b:bf:c5:31:f7:3e:82:69:71:d8:
         63:96:e9:e9:ec:92:e8:0b:91:39:c5:d2:7d:0c:66:7a:c3:65:
         f5:f2:dc:d9:32:b2:30:bb:76:bf:3b:17:98:ea:bf:9f:b3:00:
         93:90:9a:ee:dc:01:ab:9c:5f:e6:69:fb:08:30:0a:4c:62:78:
         ba:c1:1a:c1:08:87:61:27:ee:1f:5d:d5:f0:9b:43:29:da:a6:
         53:bc:cd:38:d2:98:b9:14:5a:63:5c:b8:e8:55:38:d1:d7:5f:
         6f:d5:e5:66:a4:09:8c:cf:2e:b0:76:e1:bc:5a:06:54:df:82:
         af:05:2c:19:07:c7:32:80:10:93:5b:29:3a:3c:9d:d2:7d:99:
         a8:1d:07:37:6e:a7:ab:af:e3:9d:84:b7:70:d5:7b:57:07:98:
         6b:02:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----