Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
File:                     228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json)
Hash identifier:          vkbNW4DqqEM3ILdb97RfNEFL4Mr1t56WW/8OQfq1IwE=
Subject key identifier:   CB:65:E4:A7:57:9C:75:A8:21:8E:2A:5B:49:B0:4B:41:EC:C6:F4:75
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       27038E3FB445D98CFB28688E8ACE7C374C9B4EA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
Manifest number:          0194
Signing time:             Fri 28 Mar 2025 16:51:18 +0000
Manifest this update:     Fri 28 Mar 2025 16:46:18 +0000
Manifest next update:     Mon 31 Mar 2025 23:33:18 +0000
Files and hashes:         1: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=)
                          2: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=)
                          3: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=)
                          4: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=)
                          5: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: tDryOwBTBVZxPeCJINJ19f1hs1r6uQY2drXPiyvQ7m8=)
                          6: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=)
                          7: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (hash: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=)
                          8: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: uqbTOwxcSQsIGytnyeVieNUMwmwLKwhgr+gZOcDCtuM=)
                          9: 32372e3132342e38332e302f32342d3234203d3e20313439343039.roa (hash: ArbJjYu5thYVcTZlpxbtFWhvtqqsI4lH8rKC1gB8oNc=)
                          10: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=)
                          11: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:03:8e:3f:b4:45:d9:8c:fb:28:68:8e:8a:ce:7c:37:4c:9b:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Mar 28 16:46:18 2025 GMT
            Not After : Mar 31 23:33:18 2025 GMT
        Subject: CN=CB65E4A7579C75A8218E2A5B49B04B41ECC6F475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:23:32:5c:f2:a0:ed:6d:7f:ff:bc:12:6b:
                    b4:de:ad:c3:bd:d9:d6:c5:91:8a:ff:24:4e:4d:ed:
                    83:70:c2:44:2c:e1:c4:fd:2f:35:f3:ee:89:94:d5:
                    04:57:14:25:95:4f:09:87:f3:dc:1e:e8:55:5c:e1:
                    71:53:b7:b4:92:15:c5:1c:f4:0c:73:16:59:2e:b4:
                    d2:8c:3e:bf:39:cf:1a:a4:7c:d3:b2:2c:82:4c:98:
                    a7:b7:8a:ba:27:c0:63:35:1a:ff:6e:ee:af:bc:6c:
                    a7:71:77:35:d7:93:77:73:21:16:e8:1a:7a:3d:68:
                    91:ae:9f:a0:9e:c7:06:9d:06:56:9f:54:13:c2:45:
                    a7:b2:fe:02:27:13:23:f7:40:8a:67:cd:ec:d2:cc:
                    38:d5:ab:0a:90:26:a2:bf:54:14:dd:15:66:69:b6:
                    7b:a2:5f:6a:34:06:f3:0d:92:bb:e0:9e:c3:e3:75:
                    e7:0d:2b:ac:19:1f:a8:04:74:f0:f4:d5:12:f4:3f:
                    f9:3d:4d:37:24:95:a3:23:e4:12:5a:19:32:35:93:
                    38:62:3f:54:76:de:eb:01:05:d6:7e:6c:74:cd:c8:
                    38:d4:85:17:f3:b8:92:f8:a1:d2:6a:16:12:6a:1b:
                    c0:fa:fb:7b:80:29:06:e8:f9:58:8f:bf:07:f2:04:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:E4:A7:57:9C:75:A8:21:8E:2A:5B:49:B0:4B:41:EC:C6:F4:75
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:b6:04:e3:10:55:f4:4a:43:89:64:c8:35:9c:58:32:fd:
         60:71:11:80:ba:a5:0c:4a:5f:03:89:e1:20:43:1c:67:b0:1a:
         ed:42:0f:67:03:bd:05:40:a1:7b:c5:fb:68:f2:78:98:1d:40:
         a4:c1:4f:ef:4c:a4:d1:71:59:27:ba:48:b1:44:f5:28:36:9b:
         bd:25:5c:64:cc:3f:1c:37:e8:14:68:72:20:81:a2:e4:39:91:
         0a:c3:4a:86:f2:98:a8:a5:db:0b:e3:66:ca:56:4b:cc:50:18:
         cf:05:d4:d9:c2:50:7d:27:63:06:20:19:20:b9:68:f7:fb:f2:
         cc:54:ec:c4:b7:c7:45:53:3c:5f:69:8a:9e:50:98:5f:ff:0c:
         91:b3:a2:4b:cd:48:cc:d1:6d:d7:88:00:ea:f2:c9:cf:bc:f9:
         d1:f0:f6:b7:bb:2d:6d:f6:61:21:8e:9e:e9:21:d1:04:c8:58:
         e5:8c:5a:d7:6e:e9:fb:7d:88:e4:8c:d4:03:b5:67:92:50:ee:
         25:d8:a8:54:51:4c:13:15:31:b6:e4:94:1d:be:34:46:11:e1:
         cd:0c:b5:ad:87:55:d0:b4:bf:f1:91:b9:94:f9:48:9c:d6:22:
         7d:ba:a2:71:cd:ef:5b:ad:f6:cd:c4:45:45:7c:a9:bf:30:db:
         db:22:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:03 2025 by rpki-client