Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File:                     A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier:          synRlMkcPgfVJIxgYdHJshLHptGRqC7XlsqvJkcknWo=
Subject key identifier:   C6:D2:E8:37:8F:98:FC:AC:51:E3:73:63:6B:7A:CD:CF:02:A2:45:0F
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer:       /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial:       0219BC9BF4BB8C6D5513728ABF1B313AF26E9172
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number:          0160
Signing time:             Fri 28 Mar 2025 08:21:32 +0000
Manifest this update:     Fri 28 Mar 2025 08:16:32 +0000
Manifest next update:     Mon 31 Mar 2025 09:51:32 +0000
Files and hashes:         1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=)
                          2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: cObiVAJZ9dTPYL7S39bTyuhlbUA48tXI39R30rR5WqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:19:bc:9b:f4:bb:8c:6d:55:13:72:8a:bf:1b:31:3a:f2:6e:91:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
        Validity
            Not Before: Mar 28 08:16:32 2025 GMT
            Not After : Mar 31 09:51:32 2025 GMT
        Subject: CN=C6D2E8378F98FCAC51E373636B7ACDCF02A2450F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:7c:d0:ea:e7:92:75:73:46:ae:7e:5c:c9:
                    0b:93:4d:87:03:9f:fc:28:ce:a8:76:4e:5e:1a:54:
                    fe:84:d3:c7:87:08:be:06:95:2b:8e:d6:bd:bb:27:
                    2d:52:e3:5e:52:a4:b9:32:95:c2:e3:83:5a:6e:50:
                    90:8c:07:31:25:11:ea:5b:63:1b:77:67:c4:36:54:
                    60:a1:c7:05:3c:a8:e2:30:41:54:b5:eb:da:c5:f0:
                    2d:85:9b:f2:5c:09:7a:07:8a:5d:a0:57:d5:77:38:
                    13:3f:1f:09:34:98:b9:4d:85:95:3e:b5:7e:eb:4a:
                    0e:e0:e0:2e:23:2a:2e:57:01:e8:e5:19:61:46:9e:
                    45:3b:e2:f0:1d:a1:6c:b8:e2:ab:76:7c:47:1c:ea:
                    3e:b8:6a:7d:6b:d3:d7:b1:0d:10:1c:bd:f3:da:84:
                    18:62:b9:0c:3f:f9:d0:b3:0b:6c:52:e6:32:2b:c3:
                    a5:ae:bf:87:c9:11:36:64:38:95:39:eb:69:06:95:
                    30:a4:66:54:99:a4:03:e1:41:75:5a:9d:b3:c0:82:
                    48:0f:a9:f1:da:b3:3e:33:c4:34:f6:70:67:f4:7a:
                    b1:56:c6:ed:23:c0:a4:3f:82:6a:5c:4e:18:0a:cf:
                    e1:ae:9b:46:5a:c5:2c:1a:6e:7d:cc:00:72:47:8c:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:E8:37:8F:98:FC:AC:51:E3:73:63:6B:7A:CD:CF:02:A2:45:0F
            X509v3 Authority Key Identifier:
                keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:c2:c1:f0:36:ab:c9:9a:ed:30:a2:a5:b2:94:20:d9:78:
         5f:ef:87:e3:dd:d3:06:8c:f9:8e:a6:c4:07:42:24:71:3a:aa:
         ab:01:02:5b:77:b3:b0:d0:bf:9d:c5:b8:ed:e4:cf:8d:de:59:
         77:38:99:43:52:dc:fb:12:77:f2:ce:87:7f:c9:80:eb:74:71:
         f6:55:62:60:46:c6:b5:15:af:49:7a:88:d2:41:1e:27:80:45:
         55:de:c6:6c:7e:bc:66:a2:04:f1:da:a0:7a:30:7a:b9:f1:b3:
         8b:70:c6:d8:3b:25:6d:6d:15:0c:b9:d8:5f:09:89:f0:88:d6:
         fe:67:01:0d:41:91:e1:e4:1d:d0:1e:f4:d3:24:7d:e4:e3:36:
         97:18:a8:da:9a:f5:47:39:ff:4b:dd:8d:93:92:2b:8a:44:e4:
         64:1f:86:c5:78:5d:cb:45:09:07:3a:4e:ec:a6:34:91:0d:86:
         27:e2:0e:42:ff:cc:27:f3:19:3c:00:8f:30:f3:80:58:d6:fb:
         4d:83:5d:26:cd:84:7a:8e:3d:ec:f2:a8:6e:ee:37:86:a8:77:
         5d:5f:1e:6b:a2:f3:ba:4c:69:e5:fa:ec:3d:79:b2:ed:42:4e:
         73:23:47:a7:0f:d2:a6:1c:eb:c9:ab:42:5a:4c:2b:9e:24:c1:
         3f:be:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----