Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft
File:                     37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json)
Hash identifier:          OuDFNkHa7S2jPnTmY1shxQcISN+AZiF2n9W/hq6edbY=
Subject key identifier:   D8:C8:73:4B:F2:39:06:0B:A8:91:3E:3F:DF:F4:1D:0D:9F:5F:7F:0A
Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01
Certificate issuer:       /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01
Certificate serial:       74BA46A63D735E37496D6CA366E851F2637293E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft
Manifest number:          04BC
Signing time:             Fri 28 Mar 2025 06:20:34 +0000
Manifest this update:     Fri 28 Mar 2025 06:15:34 +0000
Manifest next update:     Mon 31 Mar 2025 07:42:34 +0000
Files and hashes:         1: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: Gc+/oI1Xh8yLUzf6EloFVWEw13ZOzJWg7/IfjlFeRDw=)
                          2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: bAZsID1SQyp+R8Xb9hXOBSkrx6uEDEnPXqOvDSM+TKc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ba:46:a6:3d:73:5e:37:49:6d:6c:a3:66:e8:51:f2:63:72:93:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01
        Validity
            Not Before: Mar 28 06:15:34 2025 GMT
            Not After : Mar 31 07:42:34 2025 GMT
        Subject: CN=D8C8734BF239060BA8913E3FDFF41D0D9F5F7F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:29:ec:9f:94:f4:6b:ce:78:69:32:73:76:
                    49:09:fa:71:4b:da:de:d9:7d:49:1b:0d:40:48:1a:
                    dd:31:d9:65:77:b8:af:2f:99:ff:0a:73:bc:61:78:
                    e4:ac:ff:e4:ca:e8:ab:74:2f:b9:ee:3a:85:e6:d0:
                    a4:e1:da:5b:fc:89:67:e0:4f:ec:91:c4:96:4d:2b:
                    b3:88:4d:e1:96:67:d2:cf:ee:7a:60:4f:2b:ed:e6:
                    dc:0e:05:b5:04:29:7e:80:21:58:43:85:4e:7f:16:
                    2f:e7:d2:ed:91:08:aa:12:77:75:51:61:29:17:96:
                    60:fd:ab:ee:8b:1c:a1:27:b1:3b:bc:4b:24:9a:a1:
                    8a:d0:b0:86:81:79:e8:8a:fd:08:2f:88:60:d9:ff:
                    0c:6d:42:2d:92:4f:c9:ba:66:43:c1:70:4a:0a:bf:
                    90:f1:a5:67:7d:ce:8b:f9:df:fd:fa:4d:b1:be:ea:
                    73:e8:35:49:eb:63:c0:d1:06:8b:c6:88:5f:ba:f9:
                    c4:fc:4e:bb:fa:84:81:94:07:d8:32:89:0b:e1:d5:
                    31:37:da:05:ff:13:ff:5d:dc:2c:73:ec:2c:21:6e:
                    06:d7:76:7a:53:e0:47:dc:2f:de:41:27:4d:8c:30:
                    29:b7:90:6c:00:d0:7d:ea:41:23:a1:10:03:b2:97:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:73:4B:F2:39:06:0B:A8:91:3E:3F:DF:F4:1D:0D:9F:5F:7F:0A
            X509v3 Authority Key Identifier:
                keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:fa:0c:12:44:3a:0e:3f:d7:f0:21:90:f3:69:4a:0d:19:
         eb:d9:b0:10:3e:95:04:6a:dd:4c:f8:fe:39:cf:31:16:ba:88:
         5d:0b:eb:91:4a:48:6e:c4:67:cf:8b:56:b1:09:d5:f9:0b:ff:
         d0:2b:04:d3:5e:a8:c6:54:ac:47:56:8a:db:0c:d2:86:5f:a3:
         4c:4c:a9:e0:3e:83:3e:62:f4:a8:52:af:74:c6:32:e4:6b:a2:
         ce:a7:9b:a7:54:75:a7:15:ce:62:c5:cc:ad:b3:6d:0e:d5:9b:
         35:ce:8a:c7:71:a5:55:df:43:92:a6:55:e7:c6:5c:20:53:f8:
         57:db:4f:b5:97:82:de:75:77:08:4e:9d:5b:c2:45:33:b1:62:
         ed:43:b8:ed:1d:70:db:df:e6:20:48:36:29:71:ed:fc:2a:b4:
         7a:1f:e7:23:7f:da:a1:72:03:51:d4:9c:88:e5:81:61:dc:2e:
         91:0c:78:ec:ef:54:5e:9e:64:dd:91:b6:33:60:c0:f8:2a:f2:
         89:c0:b2:37:36:bd:66:f3:24:27:ac:16:4a:3d:a7:e9:26:64:
         a5:74:08:ea:33:80:6e:79:92:85:cb:ed:bb:8b:c4:3f:6c:39:
         e8:24:85:4b:8c:cb:1a:b3:92:5e:eb:f0:00:f1:43:00:6e:ff:
         30:90:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----