Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft
File:                     3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json)
Hash identifier:          Hytf9tmXDsgAgpgrtOXXgbJpXwRv0BdpwJVgs4vyFPA=
Subject key identifier:   58:43:BA:0A:5D:64:0C:06:11:5F:5D:B1:1A:B0:E4:D8:F1:AF:FB:79
Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A
Certificate issuer:       /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A
Certificate serial:       5BA5B4C2E8D8A77206C79719C7E69213D32FD9EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft
Manifest number:          70
Signing time:             Thu 27 Mar 2025 17:32:17 +0000
Manifest this update:     Thu 27 Mar 2025 17:27:17 +0000
Manifest next update:     Mon 31 Mar 2025 00:09:17 +0000
Files and hashes:         1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: 5tKgB5ZMlBPEqsBGnqfbZZaTPB+IIAD4Zn9P0KLd8aM=)
                          2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: HdQz1dWfKOGxSjvYAjfqgzM8praYpuYX0xMaqB08kJM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a5:b4:c2:e8:d8:a7:72:06:c7:97:19:c7:e6:92:13:d3:2f:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A
        Validity
            Not Before: Mar 27 17:27:17 2025 GMT
            Not After : Mar 31 00:09:17 2025 GMT
        Subject: CN=5843BA0A5D640C06115F5DB11AB0E4D8F1AFFB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:1d:f4:56:b2:11:04:3a:26:ac:02:18:bb:
                    1e:5d:ef:a2:53:c4:ab:3a:ac:03:81:2c:1e:5e:0e:
                    41:30:3b:53:21:30:0e:17:94:21:44:d3:83:05:f6:
                    63:a3:6a:3e:a1:4a:a3:fe:dd:f0:23:56:6e:d0:3c:
                    76:40:dc:33:c9:fb:1e:fe:95:14:50:5b:31:db:84:
                    da:30:ab:e0:b8:52:55:11:6d:18:f2:4d:89:b5:00:
                    fd:17:be:56:e6:99:bb:45:1e:58:73:32:f1:cc:bb:
                    f9:46:ce:2f:0f:db:98:16:ea:37:d5:5b:9e:f4:18:
                    20:33:c9:1f:3d:18:1a:77:3b:0f:a4:9b:45:d9:0d:
                    af:b3:ce:40:97:82:39:7e:27:00:eb:1f:ac:6c:68:
                    4e:da:18:39:71:58:d7:3c:14:78:78:40:10:26:f0:
                    04:d3:ab:8b:23:bd:42:4d:5e:55:98:89:fe:27:f7:
                    15:80:6c:ee:60:31:86:66:df:0f:09:c8:89:51:fc:
                    3e:47:8f:b0:52:93:e2:ad:79:3a:fd:11:5c:c4:16:
                    df:85:ba:a6:e9:fb:10:82:c5:86:df:dd:b3:33:e2:
                    c4:bc:32:a9:fa:94:c7:b0:59:0c:08:18:04:03:7c:
                    b7:25:ce:e4:4e:63:44:d9:b4:a5:1f:68:47:e6:21:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:BA:0A:5D:64:0C:06:11:5F:5D:B1:1A:B0:E4:D8:F1:AF:FB:79
            X509v3 Authority Key Identifier:
                keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:33:bf:6d:d5:40:63:ae:73:8e:d9:d2:72:bc:61:e1:7f:
         15:d7:f0:5e:a2:36:a8:74:ff:58:5a:97:4b:09:5b:cf:d6:eb:
         57:41:1a:56:3b:6a:fa:b7:cf:bb:17:28:41:92:9b:64:e5:83:
         4f:ba:1b:27:53:99:71:58:e0:75:18:e5:9d:b8:e8:93:4d:49:
         63:25:b8:7d:98:91:40:f2:db:c8:56:8f:9d:24:a6:f5:47:40:
         75:64:f6:c6:ce:bc:4b:53:ec:66:46:0f:b7:a9:54:a3:d5:c4:
         31:99:2c:7e:bb:f8:23:4e:64:49:5a:61:6c:7c:f3:db:a1:12:
         bb:12:f2:74:45:6e:c8:dd:fc:5e:83:8f:d2:22:68:b2:dc:36:
         4b:f4:c6:28:1d:05:98:93:54:95:f0:ef:c1:c7:cb:9f:8d:e6:
         92:e5:80:b5:1a:c4:56:4c:de:8d:80:c1:b9:1c:a3:b3:15:c1:
         d0:22:05:87:c0:61:e5:72:59:55:b7:3b:87:62:39:65:87:1b:
         c3:71:83:cf:9b:23:7c:0c:32:2a:02:89:0b:11:6c:7c:b2:9e:
         f1:b9:50:60:85:31:3d:08:b0:41:3d:e6:dc:49:94:28:dd:64:
         f8:71:2b:4d:75:75:57:fa:75:33:79:24:4e:2c:82:7f:2e:5f:
         14:72:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----