Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
File:                     38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json)
Hash identifier:          BbqyJ0vg6vcaKVTyA8mft78eO/dibRyHrr/1hxb/OSo=
Subject key identifier:   B6:78:5D:1E:E9:05:D4:FC:93:83:CF:1C:35:80:CC:06:86:C2:33:99
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Certificate issuer:       /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial:       0105959E694B416035B5348FC533C732786E26EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
Manifest number:          D1
Signing time:             Thu 27 Mar 2025 19:22:18 +0000
Manifest this update:     Thu 27 Mar 2025 19:17:18 +0000
Manifest next update:     Mon 31 Mar 2025 02:51:18 +0000
Files and hashes:         1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: SqmQiQLrdofoDbXuxR+d3QfwY84gmnFRjwAtJE8xh7Q=)
                          2: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=)
                          3: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=)
                          4: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=)
                          5: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:05:95:9e:69:4b:41:60:35:b5:34:8f:c5:33:c7:32:78:6e:26:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
        Validity
            Not Before: Mar 27 19:17:18 2025 GMT
            Not After : Mar 31 02:51:18 2025 GMT
        Subject: CN=B6785D1EE905D4FC9383CF1C3580CC0686C23399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:5b:f2:d8:4e:d6:9e:80:c4:b4:8c:02:d8:
                    a9:66:f6:53:3d:fb:ba:d6:0f:2d:8b:60:95:48:87:
                    4e:da:d5:7b:e0:a1:0f:2e:f4:c4:98:c7:f7:b0:e4:
                    23:91:b0:53:b5:1b:02:35:3a:e7:7c:cb:7d:f8:fb:
                    b6:f3:a6:cb:c1:15:60:00:9c:1e:5f:03:3e:ba:a2:
                    8e:b8:7d:48:05:70:b3:05:d4:23:d3:67:80:16:00:
                    c6:ca:92:94:45:b6:3a:94:22:64:84:4f:41:a9:b8:
                    c4:87:32:4c:d0:63:cc:8b:31:5d:0a:18:80:16:63:
                    b4:b1:6e:2b:aa:38:c4:c3:6c:1c:63:8c:d9:4b:30:
                    6f:c6:01:43:79:4e:7d:02:0b:5a:57:28:58:91:49:
                    5c:f4:2c:86:b9:77:8c:7b:d4:1c:c7:28:66:40:95:
                    0b:4c:bb:7f:fe:3e:40:0f:8d:85:1f:56:03:69:52:
                    79:fa:01:71:0e:0d:3f:be:d8:e3:91:6f:be:97:67:
                    9f:8e:76:2e:2f:b3:68:ab:23:f5:96:2e:6e:d4:be:
                    55:c6:99:a0:1a:b8:de:f1:a5:7f:c5:e3:15:f2:ce:
                    21:1e:c0:fb:9b:d8:e0:67:6f:e9:23:34:9b:7e:d4:
                    19:68:86:c5:db:d9:04:81:8b:3c:fd:e3:40:10:71:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:5D:1E:E9:05:D4:FC:93:83:CF:1C:35:80:CC:06:86:C2:33:99
            X509v3 Authority Key Identifier:
                keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:17:bd:b3:43:c1:93:75:42:81:34:5d:94:c9:17:37:25:7e:
         4e:4f:41:d8:50:35:b9:c7:b9:e1:53:a8:b6:e0:c6:65:7c:61:
         5b:bb:5f:44:4e:38:08:86:04:ea:52:fc:11:d3:ab:1d:c9:f2:
         08:00:a6:7c:69:58:17:28:85:91:e5:49:67:8e:00:e1:f7:55:
         b7:58:ed:c4:b9:a4:a8:75:15:ad:83:ce:df:db:02:2c:a2:8d:
         55:73:0b:36:55:92:81:73:f9:2b:a5:79:7b:23:58:5f:94:a6:
         d5:fb:5d:ed:69:a9:b4:5c:28:cf:90:8c:d2:b9:8d:34:03:b8:
         58:3f:71:7f:2d:98:4f:40:76:32:6d:30:7c:14:c8:fa:51:73:
         12:64:5d:6e:be:79:59:c3:64:06:ca:2a:fd:16:95:c8:55:a2:
         3d:43:7f:b3:94:2b:74:70:fe:54:f9:4d:84:3a:2e:e4:6d:2a:
         99:80:56:a8:fd:bc:b7:e5:a7:0a:2f:3d:9e:11:14:d7:6e:d2:
         64:47:90:1b:5f:35:43:1e:a4:31:29:d2:c7:be:1a:2a:04:da:
         d1:83:ba:b7:d5:d1:a6:54:ff:3d:d6:f2:97:f3:67:1f:a3:02:
         d5:e6:5c:d3:97:36:d3:fa:c6:06:02:4f:61:5f:4a:92:f9:4f:
         a9:bd:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:59:31 2025 by rpki-client