Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
File:                     846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json)
Hash identifier:          ipQnrNirHVTWmmAtx8owSUOEqAc/zZczvwkIm7torKk=
Subject key identifier:   CD:E9:38:33:17:AC:ED:BC:2A:F7:5F:BF:00:6F:BD:0D:2D:46:5B:B1
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Certificate issuer:       /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial:       4F8F536FE70BED195FDCA7F4EA0FE60AE387845E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
Manifest number:          D6
Signing time:             Thu 27 Mar 2025 10:40:45 +0000
Manifest this update:     Thu 27 Mar 2025 10:35:45 +0000
Manifest next update:     Sun 30 Mar 2025 20:03:45 +0000
Files and hashes:         1: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: /2qoGISv881yddTQkl0j03w/xITf0o+pDWEj24QcTbM=)
                          2: 3130332e3231332e3233342e302f32332d3233203d3e20313531303033.roa (hash: 3HptcgwF9kr6TssFN64cDAiN6icULJSRQhu/pYKZbEU=)
                          3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: CWusehBvGZNNsn+dCS0FYwQ7Kf8Tf3bC6vxVNPY/Fm8=)
                          4: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: 98fawBN8lcuV1BpV1P5Bi+MmBkZ4ZywKpxF8wCR2MbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8f:53:6f:e7:0b:ed:19:5f:dc:a7:f4:ea:0f:e6:0a:e3:87:84:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
        Validity
            Not Before: Mar 27 10:35:45 2025 GMT
            Not After : Mar 30 20:03:45 2025 GMT
        Subject: CN=CDE9383317ACEDBC2AF75FBF006FBD0D2D465BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:ce:c6:2e:f7:7f:8c:43:81:da:d4:33:4d:
                    dd:bf:44:2e:88:95:da:f1:81:44:b9:95:9d:46:67:
                    94:c1:c9:2f:75:28:d1:56:a3:5c:18:b2:bc:ab:74:
                    a3:f0:86:99:8a:9e:b5:b2:1e:d0:1e:e0:ef:c9:1f:
                    91:2d:c9:39:24:93:bd:15:e3:71:00:92:19:90:58:
                    86:98:7e:aa:7d:09:13:a2:8c:39:cb:61:09:b3:d5:
                    2b:df:99:ec:e5:42:3e:0b:98:b0:dd:15:53:b6:c6:
                    e7:f9:fd:50:d1:7d:cb:ce:ac:02:c2:9a:00:fe:d5:
                    6d:39:9a:35:2d:c4:ec:66:aa:e5:73:a4:73:5e:91:
                    b7:02:89:02:ea:bb:c5:d6:a1:bc:f1:5e:bc:25:de:
                    7a:fb:31:96:3b:4a:56:91:e5:6b:ec:e4:bb:24:1d:
                    e9:ca:63:15:8f:2e:2d:fb:e6:a6:d3:de:9c:32:93:
                    68:32:1d:be:cb:8b:ce:fb:15:e7:6d:ac:ba:1d:3e:
                    3e:c3:a1:c1:af:7a:60:a5:98:fd:81:c9:48:d8:3d:
                    b8:41:81:c2:76:11:95:62:39:81:e3:3f:39:61:51:
                    12:8d:e3:00:d7:57:ae:28:80:8d:64:33:d4:26:23:
                    ca:84:78:3a:b3:bd:ae:25:70:62:99:eb:9b:27:ec:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:38:33:17:AC:ED:BC:2A:F7:5F:BF:00:6F:BD:0D:2D:46:5B:B1
            X509v3 Authority Key Identifier:
                keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:55:bb:2d:4e:59:9d:7b:16:d7:c8:48:e1:39:14:6e:3d:
         cf:94:55:3b:84:52:0b:aa:6e:74:c6:3d:9c:ba:9b:2a:4e:68:
         13:fa:25:10:2e:6c:df:23:24:01:e7:53:57:73:03:a5:a5:aa:
         76:ec:ad:5c:2f:c9:c5:2c:49:cd:34:c4:0c:20:c9:43:0b:ee:
         41:01:d5:1e:df:73:fd:f0:8d:61:28:ac:99:e9:dd:3a:53:fd:
         35:7a:2a:be:f4:c7:56:59:43:a3:9b:89:7c:89:ea:64:14:12:
         11:77:1e:82:f3:64:60:a0:2f:1b:9d:d0:ba:68:d0:50:e6:a0:
         b0:f2:6a:89:0d:62:6b:e8:c0:97:b6:dd:10:60:26:32:5a:53:
         05:26:2e:05:be:e7:8f:b2:59:57:3e:3d:43:46:24:25:14:e7:
         47:13:73:21:17:81:69:72:f6:17:77:1f:7a:86:c8:f3:42:f3:
         26:2d:92:2e:17:95:82:4c:93:5f:e0:73:39:a9:b9:0a:fa:e2:
         3b:4d:a5:22:4a:75:db:ca:cd:5b:94:a5:37:e7:78:a0:cb:13:
         44:47:84:6a:c6:38:37:ed:44:e2:14:4c:94:54:2e:79:00:1d:
         2f:16:e0:48:e2:88:1b:3a:4a:8d:be:eb:0e:11:de:de:be:f0:
         68:45:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----