Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
File:                     CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json)
Hash identifier:          gUgCILVo9aBAPlNenKlIejegsQlKpeDcRw/Wt38V4us=
Subject key identifier:   00:49:4D:2F:89:B3:3E:FC:FE:20:CA:43:B8:A1:69:B2:F0:6A:3F:7D
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Certificate issuer:       /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial:       7DD5B77D92F87390297CDCA4FF96D6B5536DBCDB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
Manifest number:          0160
Signing time:             Fri 28 Mar 2025 10:21:44 +0000
Manifest this update:     Fri 28 Mar 2025 10:16:44 +0000
Manifest next update:     Mon 31 Mar 2025 15:04:44 +0000
Files and hashes:         1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: DauuTnsk87zweO5/jNZphLEXsLRyZbsahBrUcVQHCvI=)
                          2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=)
                          3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:b7:7d:92:f8:73:90:29:7c:dc:a4:ff:96:d6:b5:53:6d:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
        Validity
            Not Before: Mar 28 10:16:44 2025 GMT
            Not After : Mar 31 15:04:44 2025 GMT
        Subject: CN=00494D2F89B33EFCFE20CA43B8A169B2F06A3F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:f8:49:86:ff:82:28:66:0c:bd:12:29:2d:
                    9f:1c:5d:7c:9b:ad:57:f9:e9:ba:73:35:c1:e6:7c:
                    d4:30:ec:72:16:c7:c5:39:95:fd:fa:68:c6:28:06:
                    72:d3:6d:fb:43:73:e0:23:0d:cd:01:f4:9a:f1:43:
                    3f:42:4c:83:f2:ed:13:10:0f:40:f0:cf:05:ba:f5:
                    32:b4:29:83:cd:76:4c:3e:a3:ec:6a:90:63:ff:e4:
                    14:7b:8a:5a:4c:dd:98:28:da:f7:c5:d2:6b:ae:44:
                    ad:3a:d5:21:88:09:f1:c2:39:9d:ce:e9:3f:65:4c:
                    b4:c0:28:c8:e2:f8:51:f1:11:25:f3:4b:83:ff:9d:
                    34:ca:99:74:01:c9:00:d0:a7:3b:ba:18:2c:30:a7:
                    e8:4e:5f:1c:ab:b5:9f:5d:6a:63:3b:c0:12:04:07:
                    9a:45:d8:80:b7:25:ac:33:a4:9c:f7:0c:7b:b4:a4:
                    3b:51:05:18:f6:83:e2:2a:b2:31:97:84:c1:21:86:
                    76:f3:4c:12:24:6d:0e:3a:86:bb:bb:0c:5d:95:f8:
                    6d:b7:f0:ed:41:e7:c7:6c:a9:b2:51:70:ba:b3:3f:
                    a5:aa:c2:c7:cf:63:d6:93:81:3f:b8:01:c6:7f:05:
                    34:89:22:f3:66:ad:42:4b:32:09:26:37:19:4e:79:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:49:4D:2F:89:B3:3E:FC:FE:20:CA:43:B8:A1:69:B2:F0:6A:3F:7D
            X509v3 Authority Key Identifier:
                keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:fd:56:94:d9:d9:39:f5:78:f5:e5:dd:9a:2f:af:38:7c:
         8f:05:3a:e4:db:f9:89:a9:56:7a:a6:4d:3a:f1:75:3d:b7:6e:
         fd:87:f9:df:d5:ff:6f:a7:40:f3:d1:64:10:a1:4d:33:30:78:
         29:1e:e5:59:f5:b1:97:6b:ff:58:e4:08:4d:7f:81:35:9c:fe:
         c7:ad:c9:40:00:6a:3e:6a:1a:43:b2:be:97:5f:74:6a:16:f1:
         bc:4b:b9:e5:7d:51:62:aa:b3:92:9e:e1:6d:f1:6d:47:42:b3:
         68:1b:31:d3:4f:14:9b:86:43:a6:cc:be:c3:fb:6c:63:3d:90:
         91:7f:c5:62:28:ee:25:f3:57:3a:ce:4a:ff:73:d6:2b:87:4d:
         0c:a1:c5:e4:41:16:cf:b1:92:19:6e:71:31:0b:47:08:42:f4:
         14:b2:46:57:c3:56:5a:32:8b:2c:14:3d:62:a9:d4:10:51:a7:
         c1:76:c6:59:ac:08:53:78:7a:23:81:a0:ad:2a:58:09:55:dd:
         23:0a:13:07:10:f4:72:dc:5f:80:4b:d6:97:3e:a2:ed:26:ed:
         62:7c:64:18:a0:a6:9f:29:e3:fc:e0:67:e8:c3:52:62:55:f8:
         c9:7c:e6:53:8b:19:1e:b8:b8:a3:44:ed:41:ce:09:84:95:82:
         ff:04:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----