Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft
File:                     CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json)
Hash identifier:          bAItVP8pswkf1I0cUrKPWnHA8Itke+UBesAJkC6Jak8=
Subject key identifier:   EA:F8:65:8B:86:96:55:75:17:09:42:7E:6F:E4:D4:A7:54:EA:22:A4
Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C
Certificate issuer:       /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C
Certificate serial:       65A21B673189A7B03B009A6BF6C54092933C28F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft
Manifest number:          53
Signing time:             Fri 28 Mar 2025 01:22:18 +0000
Manifest this update:     Fri 28 Mar 2025 01:17:18 +0000
Manifest next update:     Mon 31 Mar 2025 04:35:18 +0000
Files and hashes:         1: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: tkJIbJP1JALpHlYv/loDAxwXETx6UyPD0WeJy4D5W5U=)
                          2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: LDJv6wYx3HsP5pbUhXvKMJKGJv2fMd2X2nhqPoeeYwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:1b:67:31:89:a7:b0:3b:00:9a:6b:f6:c5:40:92:93:3c:28:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C
        Validity
            Not Before: Mar 28 01:17:18 2025 GMT
            Not After : Mar 31 04:35:18 2025 GMT
        Subject: CN=EAF8658B869655751709427E6FE4D4A754EA22A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:bb:b9:a6:50:89:91:9b:0d:90:cd:7b:3b:
                    41:db:89:61:97:08:84:03:9b:96:21:32:c9:b1:e3:
                    90:66:25:2d:46:1e:6c:50:3b:01:b1:23:f5:3a:21:
                    a5:23:73:18:8c:26:81:aa:01:13:ed:22:2f:6d:a0:
                    8a:8f:3d:3f:f9:e6:40:4e:ab:ad:62:e0:a4:9e:e4:
                    01:68:16:62:16:5f:90:30:83:f1:cf:16:4b:e6:9b:
                    a1:dd:b0:92:fe:44:ff:ac:d4:31:7d:fb:68:86:f0:
                    78:52:99:f4:8e:9f:28:08:ef:57:40:73:48:73:fb:
                    ee:f9:b3:e6:ae:47:f8:d2:50:c7:52:6a:7f:f8:b9:
                    12:79:dc:94:54:ab:5a:9a:66:0f:d8:89:ff:6d:de:
                    ae:8a:cd:52:83:df:fe:5b:c7:9f:36:19:ec:e1:d8:
                    fd:8e:55:a9:dd:9f:79:9d:b3:f0:1d:98:1d:8a:5f:
                    43:d0:43:03:ee:7c:4a:75:0a:d9:57:c5:04:ed:d9:
                    57:5d:d1:9c:fa:2f:18:b0:f9:14:86:79:cb:62:09:
                    d2:d6:0b:29:c9:63:96:e3:85:a5:bb:d9:a9:9d:a2:
                    a5:62:0e:7c:ab:82:20:62:cd:c8:dd:74:43:51:08:
                    12:d8:d5:33:72:b8:fa:6f:f3:f6:41:22:27:e7:17:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:65:8B:86:96:55:75:17:09:42:7E:6F:E4:D4:A7:54:EA:22:A4
            X509v3 Authority Key Identifier:
                keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:3a:0d:11:0d:20:50:92:fa:97:34:e0:50:ba:66:0f:0a:
         d7:fb:95:d9:04:11:7d:fb:96:27:69:b5:d5:0c:e4:7b:04:76:
         7a:7d:e4:f5:08:b2:4a:5c:2c:d3:f4:e3:aa:fe:88:c9:8e:8c:
         6d:9c:20:41:48:71:f8:f4:b2:2d:f9:91:fd:ac:33:41:22:55:
         d7:fc:e9:6f:5a:76:d7:e7:4a:4e:f1:d1:5d:35:da:62:89:e4:
         7d:83:9f:fb:7d:7f:25:e9:23:69:46:f9:b5:62:52:50:2c:d8:
         50:e8:f7:a3:d8:fa:21:bc:b5:a9:93:9c:2e:f5:6d:da:20:18:
         08:4b:b2:fd:2f:56:de:f7:b9:42:9b:55:bf:c0:fa:d3:4b:c2:
         bc:f7:14:af:15:bf:1a:48:f2:06:4b:da:51:1c:41:b7:91:fc:
         df:7c:63:91:a1:f1:d4:f2:de:1c:40:a8:0a:d6:b3:14:af:ba:
         db:3d:c3:70:6e:e8:7c:ab:c8:b7:ef:56:00:d5:1a:e8:a2:f7:
         02:d7:14:8d:de:e1:11:34:69:57:8c:0c:a4:bc:11:79:a5:08:
         ef:68:d5:bb:21:ee:6e:66:49:63:d9:2c:9b:10:ce:bc:f1:8e:
         5f:d5:bb:d6:e9:25:cf:02:9a:2d:68:9a:75:52:28:81:79:d4:
         be:21:e2:94
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZaIbZzGJp7A7AJpr9sVAkpM8KPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE
MkU1MDQzQzAeFw0yNTAzMjgwMTE3MThaFw0yNTAzMzEwNDM1MThaMDMxMTAvBgNV
BAMTKEVBRjg2NThCODY5NjU1NzUxNzA5NDI3RTZGRTRENEE3NTRFQTIyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8obu5plCJkZsNkM17O0HbiWGX
CIQDm5YhMsmx45BmJS1GHmxQOwGxI/U6IaUjcxiMJoGqARPtIi9toIqPPT/55kBO
q61i4KSe5AFoFmIWX5Awg/HPFkvmm6HdsJL+RP+s1DF9+2iG8HhSmfSOnygI71dA
c0hz++75s+auR/jSUMdSan/4uRJ53JRUq1qaZg/Yif9t3q6KzVKD3/5bx582Gezh
2P2OVandn3mds/AdmB2KX0PQQwPufEp1CtlXxQTt2Vdd0Zz6Lxiw+RSGectiCdLW
CynJY5bjhaW72amdoqViDnyrgiBizcjddENRCBLY1TNyuPpv8/ZBIifnFwNbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6vhli4aWVXUXCUJ+b+TUp1TqIqQwHwYDVR0j
BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5
ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1
MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli
NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1
OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADw5Og0RDSBQkvqXNOBQumYPCtf7ldkEEX37
lidptdUM5HsEdnp95PUIskpcLNP046r+iMmOjG2cIEFIcfj0si35kf2sM0EiVdf8
6W9adtfnSk7x0V012mKJ5H2Dn/t9fyXpI2lG+bViUlAs2FDo96PY+iG8tamTnC71
bdogGAhLsv0vVt73uUKbVb/A+tNLwrz3FK8VvxpI8gZL2lEcQbeR/N98Y5Gh8dTy
3hxAqArWsxSvuts9w3Bu6HyryLfvVgDVGuii9wLXFI3e4RE0aVeMDKS8EXmlCO9o
1bsh7m5mSWPZLJsQzrzxjl/Vu9bpJc8Cmi1omnVSKIF51L4h4pQ=
-----END CERTIFICATE-----