Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
File:                     498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json)
Hash identifier:          fT8ss/fLpU2xoM8ecJjANkJ/htPS5dmc78EJ6W72oxQ=
Subject key identifier:   E8:34:F6:A2:7A:F3:A2:DF:68:EF:7B:CD:8E:48:71:83:E3:DD:CF:76
Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
Certificate issuer:       /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Certificate serial:       2FD9B094A7040D499AE0D1393746B51EF2C05CC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
Manifest number:          04BA
Signing time:             Thu 27 Mar 2025 20:11:53 +0000
Manifest this update:     Thu 27 Mar 2025 20:06:53 +0000
Manifest next update:     Sun 30 Mar 2025 20:44:53 +0000
Files and hashes:         1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: yDIVt2Oe51IhyNjITRNsqJhRBffQBwktI1JnUAMjM6o=)
                          2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: hLJJn2S5+JhUGblcfmNr2hxZF8gqjaXVnEFEQc7K6gU=)
                          3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: nsqGfNZPjtaLmPHHScxx+CupCU8rXOrWXltC9V2rKeg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:b0:94:a7:04:0d:49:9a:e0:d1:39:37:46:b5:1e:f2:c0:5c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
        Validity
            Not Before: Mar 27 20:06:53 2025 GMT
            Not After : Mar 30 20:44:53 2025 GMT
        Subject: CN=E834F6A27AF3A2DF68EF7BCD8E487183E3DDCF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:a7:11:61:a2:25:5f:6f:c8:7b:48:c9:f8:
                    1d:49:c4:41:b6:f0:99:b0:f6:58:78:0f:34:c0:af:
                    65:93:04:4e:e6:37:8a:3e:fe:2f:d0:5f:e6:34:43:
                    7d:9c:52:89:04:db:f0:de:43:0e:3d:5c:52:0f:6b:
                    14:a2:aa:01:9d:30:04:0c:12:60:1c:8b:39:55:cc:
                    de:36:be:be:09:ba:17:17:ae:c8:c9:95:bd:d7:d4:
                    31:9e:43:e4:35:fd:db:a3:d8:0d:9f:da:72:54:84:
                    34:3c:39:f6:e6:c9:34:7c:0d:cb:40:62:3c:1b:53:
                    1d:90:22:8a:b4:20:8c:fb:f5:b3:08:77:c8:89:27:
                    05:a3:eb:69:ec:c3:f2:e7:16:2f:89:77:a2:be:07:
                    c6:b6:af:34:5a:ae:09:a7:0c:9e:6e:f8:a2:27:c4:
                    54:f6:32:38:de:a9:c2:db:ae:31:cd:38:0d:89:5f:
                    ef:34:fb:e7:d8:01:5e:f2:02:e7:3f:52:86:66:77:
                    68:7b:2d:c1:35:f1:52:67:f0:24:b7:81:87:d6:4d:
                    8b:04:0d:54:11:b2:aa:03:ce:29:45:6e:23:53:a0:
                    1c:33:71:33:58:1a:3c:a6:42:10:02:5b:6b:a2:4e:
                    b9:7d:c7:fa:a5:8f:2f:b6:a3:4a:3e:99:a7:00:c7:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:F6:A2:7A:F3:A2:DF:68:EF:7B:CD:8E:48:71:83:E3:DD:CF:76
            X509v3 Authority Key Identifier:
                keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:f7:fa:ed:3e:67:6c:fd:a5:b2:97:f7:c0:44:b6:b1:9a:
         11:d6:bf:11:de:40:97:95:7d:c1:5f:ca:be:01:a1:29:ab:88:
         32:65:2a:8a:c3:2e:08:1a:05:b9:ea:b6:60:48:e0:73:d8:37:
         a5:7d:c9:95:4f:0a:0f:19:7c:c5:14:b6:02:c9:03:19:55:e1:
         5f:94:a1:21:46:b5:36:ab:26:5a:b5:3a:17:63:99:74:cd:74:
         1a:d0:f5:f8:34:9e:74:6f:90:f1:79:41:94:da:66:ea:77:eb:
         b3:89:a5:d2:dd:a1:28:aa:a6:d8:fe:05:55:4c:a8:a6:87:7f:
         bb:6b:9b:4b:eb:39:93:c0:e1:7c:e1:a9:17:eb:8f:72:bb:37:
         0f:1e:97:30:08:8b:b9:45:02:a0:67:0d:e2:f5:3e:63:f5:4d:
         04:9a:9e:6a:3e:58:6b:99:a0:ae:35:06:3c:7b:6f:33:11:5d:
         ee:6b:e0:8d:b8:eb:db:d7:1c:ae:08:9f:f3:20:c1:fe:a7:41:
         5e:2d:2e:92:cc:90:98:6c:75:be:14:3e:3d:7f:d7:76:62:d6:
         4e:2b:b7:fc:2d:21:9f:42:89:03:3e:bb:7f:0e:56:67:1d:c9:
         c6:76:20:ca:0a:2d:47:4c:bf:25:d1:f2:92:ff:8f:a0:d2:11:
         ff:eb:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----