Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft
File:                     0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json)
Hash identifier:          MXMZkWfSAawuhehEmnbTGTVS8h1MkwrVM2NvfNvNKtQ=
Subject key identifier:   87:72:E5:DE:6B:58:52:43:1E:8C:49:06:0B:0B:94:15:E6:D8:E9:2C
Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79
Certificate issuer:       /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79
Certificate serial:       1DC5319944347A0286AE7765346EA2380891CEFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft
Manifest number:          0153
Signing time:             Sat 29 Mar 2025 00:41:22 +0000
Manifest this update:     Sat 29 Mar 2025 00:36:22 +0000
Manifest next update:     Tue 01 Apr 2025 07:11:22 +0000
Files and hashes:         1: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: 10ENSeT8M1B1AVIrUkw/M0ccGVWnVfHr41L3Y+JvzEA=)
                          2: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=)
                          3: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=)
                          4: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c5:31:99:44:34:7a:02:86:ae:77:65:34:6e:a2:38:08:91:ce:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79
        Validity
            Not Before: Mar 29 00:36:22 2025 GMT
            Not After : Apr  1 07:11:22 2025 GMT
        Subject: CN=8772E5DE6B5852431E8C49060B0B9415E6D8E92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:2c:da:84:a2:14:f4:d0:1b:e7:8b:03:7a:
                    72:40:07:6e:4f:f3:8b:64:41:ad:fc:3c:82:71:40:
                    11:55:b5:f1:19:13:49:14:50:21:67:27:68:63:53:
                    c2:f6:ed:47:49:6a:dd:73:f9:e3:7c:15:4d:d8:fd:
                    5d:47:ee:44:8a:29:50:28:d4:24:fd:6d:85:0f:34:
                    c1:2a:58:f4:3d:86:48:d9:59:22:5b:e5:1f:09:78:
                    16:3d:b2:b6:95:2f:29:03:1e:54:de:9e:d0:65:5d:
                    db:ad:3b:9b:34:1d:dd:81:e9:6a:b7:39:24:83:23:
                    d2:22:37:1f:f6:23:48:42:44:83:06:c2:3d:3f:22:
                    28:5a:dd:4e:ee:8c:42:bf:b1:bb:d0:c0:bd:9d:fc:
                    66:4c:42:af:21:6b:bf:35:cd:0f:f3:75:dc:d8:0d:
                    db:94:8a:33:4c:45:61:3d:79:2a:0e:01:ae:51:89:
                    c9:06:0f:be:c4:cd:f4:48:90:e0:69:15:19:cc:c6:
                    f1:26:bd:03:34:9d:b9:b1:79:9e:63:f3:dd:66:98:
                    3c:eb:a4:f8:7b:11:16:ad:07:7d:0b:55:96:dc:0a:
                    87:bc:16:78:d5:e1:41:8e:66:22:84:26:aa:46:10:
                    bb:05:74:44:74:4e:6e:ae:dd:7b:2e:4d:a6:92:bc:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:E5:DE:6B:58:52:43:1E:8C:49:06:0B:0B:94:15:E6:D8:E9:2C
            X509v3 Authority Key Identifier:
                keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:d8:26:29:a3:04:1b:c3:ae:86:a3:99:3f:b4:51:b8:8c:
         96:4a:b1:8c:92:0b:31:d8:a3:9a:e4:a2:dc:d5:b4:3c:e3:d5:
         cf:ae:ed:64:f9:ee:75:93:11:c8:54:09:dc:7e:42:3b:e7:34:
         37:55:b5:58:4d:24:81:a1:0a:ef:13:ff:5b:48:36:f0:e4:48:
         c5:52:f3:57:42:61:21:5c:39:fc:b6:1c:b0:90:60:c7:d6:1f:
         06:3d:43:80:8b:22:f2:c9:02:62:73:99:62:b9:f8:d7:23:32:
         ba:38:6d:2d:55:cf:e9:8c:e8:91:b9:d3:de:4d:cb:45:0d:a0:
         3c:f2:2b:b8:08:5b:94:39:3e:aa:2c:dc:fa:64:9d:60:ee:70:
         f1:cb:18:18:4c:e5:67:92:63:34:e0:44:aa:1c:1a:a1:43:91:
         41:89:b2:cd:45:f8:f7:a7:27:28:3a:16:ed:76:5f:c6:7b:1c:
         99:23:ea:88:dc:b7:16:5d:e2:37:0c:1a:c1:d4:63:fb:a2:49:
         b3:26:e9:be:b6:a2:df:e4:e2:66:bf:3d:01:af:5c:91:e0:02:
         16:3f:f9:c6:88:8d:4d:77:dd:b3:a6:e6:40:b0:70:88:aa:5e:
         35:1f:97:e9:ee:e1:7b:3b:9d:bb:77:b3:62:81:26:f4:4b:a7:
         8e:b9:12:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:02 2025 by rpki-client