Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
File:                     819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json)
Hash identifier:          hK5OLjCQaV3MDbfR6oDLEfj2YLsRK73mvQm5FmE51Dk=
Subject key identifier:   27:BD:15:3F:43:77:C8:3C:B7:B8:5B:3E:AD:9D:7B:81:BA:CD:A0:23
Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3
Certificate issuer:       /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
Certificate serial:       4AFD6E0885A97F6A2411E54603F9B09C1300A318
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
Manifest number:          0161
Signing time:             Thu 27 Mar 2025 11:52:00 +0000
Manifest this update:     Thu 27 Mar 2025 11:47:00 +0000
Manifest next update:     Sun 30 Mar 2025 18:08:00 +0000
Files and hashes:         1: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: f0SGYOuYC9wlhNvu18Rx/15roii5H8mAD5EFZkRY12E=)
                          2: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: ICuhxys1D6FVayomp4UXIEfZ0qraH8VdO4LLKZSm/K0=)
                          3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: znoG+tzolSoK4k4/3nWegkyYPSmCV03zZXbpGFh3j3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:6e:08:85:a9:7f:6a:24:11:e5:46:03:f9:b0:9c:13:00:a3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
        Validity
            Not Before: Mar 27 11:47:00 2025 GMT
            Not After : Mar 30 18:08:00 2025 GMT
        Subject: CN=27BD153F4377C83CB7B85B3EAD9D7B81BACDA023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:6f:6f:a2:6e:bf:fd:26:ff:d3:ef:e0:4f:
                    04:c6:7d:f6:f8:f2:d9:ff:91:48:25:0e:76:b0:97:
                    4c:fd:2e:5d:01:74:2f:bf:38:bd:5e:71:e0:69:4b:
                    a1:ea:7f:48:14:f6:3c:77:4a:8f:1e:96:dc:8c:d0:
                    e0:3b:09:ed:21:79:45:0a:5b:9d:0e:87:bb:a3:1b:
                    fe:76:f1:6d:d6:45:a1:78:42:1b:06:be:fd:7e:3d:
                    a6:db:99:53:62:1c:49:4f:4a:1e:70:a3:b9:20:1c:
                    6d:b4:f8:90:48:34:63:38:60:03:5f:90:ab:30:be:
                    6a:8b:6a:23:56:84:a1:6f:22:27:93:c1:3d:bf:35:
                    c1:ec:d2:2c:6d:a3:81:76:04:bc:e6:e1:16:7d:fa:
                    c1:5f:b1:be:f0:96:a5:2f:15:08:ec:7f:24:40:1a:
                    15:a6:3d:8b:cc:1b:69:20:f0:6e:20:8d:5a:37:fa:
                    33:95:0a:c4:e1:09:f4:55:0f:6a:71:62:a9:eb:2a:
                    91:5f:a7:2a:c4:90:be:dc:b7:e4:d2:a5:b0:dc:f4:
                    1a:79:ac:4d:d5:29:79:3d:68:3e:fe:83:33:0d:c5:
                    3f:d2:b4:1f:5d:48:0d:e8:ea:72:37:c5:6d:72:61:
                    1f:7c:3d:b2:09:b8:66:cc:37:be:c8:99:49:d7:b4:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:15:3F:43:77:C8:3C:B7:B8:5B:3E:AD:9D:7B:81:BA:CD:A0:23
            X509v3 Authority Key Identifier:
                keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:43:8f:ef:8f:2e:b1:e8:f1:f4:90:c0:34:84:3a:36:fe:
         76:e8:8f:53:b0:44:9f:64:82:3b:7a:03:d1:cb:c7:fa:27:90:
         66:70:bf:00:08:d2:d4:5b:60:69:4e:ed:f7:8b:ee:56:ec:66:
         0e:65:68:41:f5:0c:3f:ba:bf:91:a4:84:b0:21:ac:99:80:e3:
         5f:b7:b6:4f:8c:13:1e:b8:11:d8:56:fe:08:79:51:96:66:64:
         66:85:c9:02:b1:2f:f4:8a:55:89:d2:21:74:a5:fb:48:0d:a8:
         b3:77:92:91:93:b8:9f:a5:c4:2f:fe:25:e9:be:e7:85:c6:88:
         96:be:f5:46:43:73:91:9f:5a:4c:de:fb:5d:88:e5:ae:eb:c2:
         27:46:1c:6f:e3:b3:3e:de:81:52:f6:f8:86:81:df:d9:e2:e9:
         af:ba:de:b7:fe:49:70:14:c0:db:ee:b7:6d:24:09:c8:24:d8:
         bf:25:67:84:29:e5:95:43:b8:b6:66:9f:b6:25:ba:fc:21:e6:
         89:01:b5:b8:48:f5:ba:38:8b:ac:28:84:aa:01:af:58:d8:e1:
         c7:6a:9e:00:08:ca:83:02:3c:1a:bc:6a:66:cd:4d:44:d0:c9:
         1b:0c:2e:c2:9e:20:2a:84:bf:38:6b:16:97:7f:48:6f:6e:04:
         f6:02:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----