Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft
File:                     2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json)
Hash identifier:          NZaWRCmPKpPYE2bMQEXags0LUwTbsawYR/M6zl/N2SA=
Subject key identifier:   34:C7:D1:CF:9D:9B:BC:6B:A5:68:11:2B:4E:DE:D8:C9:EE:3B:2B:91
Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B
Certificate issuer:       /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B
Certificate serial:       2E64EF8F99B27D3631C42A7C2BED99BCF50B7835
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft
Manifest number:          04BC
Signing time:             Thu 27 Mar 2025 14:50:48 +0000
Manifest this update:     Thu 27 Mar 2025 14:45:48 +0000
Manifest next update:     Sun 30 Mar 2025 23:16:48 +0000
Files and hashes:         1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: ++9YB+FVn1zhK/zJbG1iukQzRuXMfr0YFTqGZ1NFCfA=)
                          2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: MBnVObk5rtYYwHlaUlSzw5T8+2QUD+ApGXh8c63UDdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:64:ef:8f:99:b2:7d:36:31:c4:2a:7c:2b:ed:99:bc:f5:0b:78:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B
        Validity
            Not Before: Mar 27 14:45:48 2025 GMT
            Not After : Mar 30 23:16:48 2025 GMT
        Subject: CN=34C7D1CF9D9BBC6BA568112B4EDED8C9EE3B2B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:fb:b9:f3:cb:d0:af:60:d0:cb:f2:13:bc:
                    8e:d7:50:74:d9:94:4b:7a:17:95:57:84:74:f9:23:
                    59:a3:d8:77:62:7f:e1:21:e3:44:bc:e8:50:cf:1f:
                    14:a4:22:0b:44:d1:56:e5:37:45:63:74:c9:a8:21:
                    f0:3b:62:c8:69:12:cf:31:6a:38:b0:e8:0f:49:fb:
                    db:d9:73:b7:67:51:e9:20:91:b6:7a:d3:4f:60:fd:
                    30:12:bb:9d:f6:f6:e7:2f:0b:f7:1d:89:94:b0:89:
                    a4:d1:ce:b9:ea:0c:83:d2:f0:1c:71:5a:3a:d5:b3:
                    58:e8:ca:48:b4:34:de:03:1d:4d:0d:52:e4:f8:6b:
                    61:28:2c:15:ae:2c:30:79:ab:68:0e:80:e1:77:d1:
                    44:8f:24:7b:2a:db:61:7d:1f:fc:03:a9:c6:a5:4a:
                    90:ce:f0:16:a4:58:dd:06:c9:d6:bb:50:d0:7c:36:
                    82:76:b7:6c:1c:cb:84:9b:15:09:ee:0e:1c:95:f2:
                    0f:f3:6f:23:5c:54:2b:d7:91:8f:cc:a3:a4:a8:5e:
                    1b:64:fd:1e:97:bd:1a:0e:94:b2:d3:2b:96:99:3c:
                    61:d5:2d:9e:04:83:33:bf:08:1a:d5:d7:72:31:eb:
                    0a:0a:b2:44:5b:4d:e9:2b:c1:5b:aa:c6:49:e2:c7:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:D1:CF:9D:9B:BC:6B:A5:68:11:2B:4E:DE:D8:C9:EE:3B:2B:91
            X509v3 Authority Key Identifier:
                keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:53:fc:a1:66:1f:e7:98:c4:bd:5b:87:01:5d:cc:c2:35:
         f8:b6:e4:e2:0d:6b:80:36:0c:9d:56:81:c3:4c:44:5c:75:94:
         b7:6d:d9:82:e8:6d:31:d7:c8:55:0e:75:79:43:ee:71:ca:bf:
         c3:bf:66:45:d1:35:3d:56:e1:e1:ae:b5:7b:f3:b6:2d:2b:73:
         db:d5:e7:28:18:c9:e1:0f:57:f8:26:61:0e:88:39:13:45:04:
         72:a4:a7:6c:c4:e2:ea:1a:30:8a:7b:2c:30:49:59:e8:de:35:
         c5:2c:cf:21:8a:a7:8d:22:dc:2c:1a:09:55:bf:77:f2:8f:6c:
         83:94:6f:63:46:24:d8:da:c7:37:d9:b9:93:4c:ff:55:74:c3:
         03:b9:b4:72:ff:a5:c7:f8:e3:c8:f4:33:8d:90:29:f9:c2:81:
         92:b9:4f:d8:bc:43:d4:cb:fe:81:7c:71:13:f3:03:3f:38:dd:
         12:14:20:cd:fa:21:c8:05:bd:23:b5:f3:dc:f6:b1:79:f0:12:
         c7:fb:8e:60:e7:85:15:78:48:5e:83:d5:e3:3a:51:34:53:85:
         5c:7f:4c:99:15:b2:a4:d6:cb:42:ec:13:29:4d:e7:81:39:9b:
         90:a0:22:50:a8:ae:c7:2f:69:23:d8:ff:ff:fa:3c:a3:40:88:
         f1:89:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----