Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft
File:                     CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json)
Hash identifier:          wnDBlEwVvkGi24pvYEDZ8FG3v9FB2PHnurbTDGzYM9w=
Subject key identifier:   FA:DC:BD:F5:D0:D4:20:2A:59:FA:64:D3:DC:E7:76:97:29:57:42:7D
Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B
Certificate issuer:       /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
Certificate serial:       3152A4443E609006B7BD3A58E0A6DBB524B6B08E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft
Manifest number:          DA
Signing time:             Fri 28 Mar 2025 14:11:24 +0000
Manifest this update:     Fri 28 Mar 2025 14:06:24 +0000
Manifest next update:     Mon 31 Mar 2025 22:35:24 +0000
Files and hashes:         1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=)
                          2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=)
                          3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: jRlmZpTrsg+H54OSgZ4eg3WX78p5hhMzttqMLJFrXY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:52:a4:44:3e:60:90:06:b7:bd:3a:58:e0:a6:db:b5:24:b6:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
        Validity
            Not Before: Mar 28 14:06:24 2025 GMT
            Not After : Mar 31 22:35:24 2025 GMT
        Subject: CN=FADCBDF5D0D4202A59FA64D3DCE776972957427D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:71:c0:09:b4:1e:c2:5e:f6:27:66:78:8c:
                    44:21:8e:87:cd:b2:50:c8:a5:a3:ad:94:9f:a8:11:
                    05:04:9f:b9:8c:f8:c1:a1:1c:b4:f5:33:c2:f5:93:
                    f0:7b:cf:9e:ff:b6:4b:68:89:4b:0d:60:35:0c:a8:
                    9d:8e:eb:a5:ed:31:2f:d3:29:f4:55:8b:fb:7a:62:
                    8f:28:2a:17:90:a1:f3:c0:8e:71:73:7c:f3:51:b9:
                    fd:cd:f7:a2:7a:50:8c:99:cc:3e:af:0e:27:fe:78:
                    b4:74:71:c8:a7:f4:d1:f4:50:ed:cd:14:6a:d8:4f:
                    fc:68:5d:5f:27:a9:be:b1:aa:66:19:9e:25:89:2a:
                    4e:86:23:f1:8a:44:0a:4f:68:ba:c1:a2:12:90:6e:
                    93:cc:5c:94:44:71:21:49:57:b8:fb:f7:35:cf:17:
                    a2:b9:e5:3e:ad:9f:49:40:1d:7e:22:e0:bc:1d:d2:
                    a5:f7:76:bf:28:23:88:05:50:c0:4b:02:1b:b4:65:
                    14:f8:4f:85:c7:23:23:e8:73:a5:67:f4:94:89:a9:
                    a6:f6:9e:7c:5c:c7:05:36:a3:71:2e:1b:7c:66:4d:
                    8b:06:f6:7d:2a:fc:ca:f5:71:f0:d1:6e:21:95:7b:
                    27:5d:bb:34:db:a7:82:8e:46:4e:fa:7d:17:1c:d6:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:BD:F5:D0:D4:20:2A:59:FA:64:D3:DC:E7:76:97:29:57:42:7D
            X509v3 Authority Key Identifier:
                keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:0e:e0:0e:3a:ab:ee:f6:55:ab:d8:54:5f:ad:f0:da:a8:
         b0:48:a1:6d:39:02:ff:a6:da:97:4c:bc:f4:09:16:21:e1:7d:
         22:fb:ce:5c:b9:c0:76:74:f8:b1:ad:fd:d1:8b:be:e8:8e:d1:
         e7:6e:8c:13:c3:03:6e:a7:96:c3:32:2b:6b:4b:0c:39:7e:61:
         bf:af:4e:b3:3d:36:1b:37:ea:1f:fd:f0:2a:7c:0e:50:0e:e4:
         d6:4c:3c:60:4d:0c:22:bc:3b:03:31:72:6f:6d:b2:94:1a:73:
         ce:d5:12:12:a2:45:4e:9d:c4:01:80:9f:7a:f2:8e:3e:e0:0d:
         b8:35:f3:7a:bc:55:1b:06:b9:ca:af:ee:5e:ee:2c:27:ee:a2:
         a7:72:af:8e:b9:53:1b:14:ef:4e:d3:9f:1b:38:22:4d:35:8b:
         18:1e:0b:de:9e:f7:5c:7c:71:b0:79:0c:46:bd:cb:34:70:eb:
         bf:64:7a:88:65:9f:e8:f9:1d:e3:50:17:b1:73:88:42:fe:bd:
         33:78:a4:6c:20:18:cd:d0:86:6a:56:09:b6:54:0b:e9:9a:04:
         7a:9b:16:4e:cb:dc:63:ca:5c:56:eb:24:49:88:d2:16:19:b0:
         3b:0c:27:c5:a5:5c:50:01:ad:ab:2a:59:65:e7:39:ae:2f:12:
         fe:5f:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----