Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft
File:                     8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json)
Hash identifier:          x0AJ99rTA23gAMX0/ISDE6ZHpG9kWUVYCJqN4PIcp3s=
Subject key identifier:   49:E4:DC:C0:1F:FE:32:AB:94:59:C8:D3:85:CD:65:A5:4F:0C:BF:9F
Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81
Certificate issuer:       /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481
Certificate serial:       41E1CFE403E9D1C9BE1CF44D29305C9FAF1E8A1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft
Manifest number:          0405
Signing time:             Thu 27 Mar 2025 09:21:23 +0000
Manifest this update:     Thu 27 Mar 2025 09:16:23 +0000
Manifest next update:     Sun 30 Mar 2025 16:14:23 +0000
Files and hashes:         1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: CafUsTrJt/FVA5o4plTgSP6skDVSPrSneHEiQ+UEjck=)
                          2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=)
                          3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=)
                          4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:cf:e4:03:e9:d1:c9:be:1c:f4:4d:29:30:5c:9f:af:1e:8a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481
        Validity
            Not Before: Mar 27 09:16:23 2025 GMT
            Not After : Mar 30 16:14:23 2025 GMT
        Subject: CN=49E4DCC01FFE32AB9459C8D385CD65A54F0CBF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:7c:db:a2:17:57:ae:93:1c:ac:69:29:fb:
                    06:2a:2d:0f:24:80:5e:66:85:09:2c:33:c8:fb:af:
                    99:eb:48:85:7f:2d:8e:57:95:20:58:b6:f3:8b:f5:
                    57:f8:05:b4:67:ff:64:aa:60:80:88:7f:3e:56:af:
                    a0:88:4f:7d:6c:8a:1e:5d:dd:17:81:aa:17:50:0d:
                    8b:94:e5:6b:e3:73:0f:ac:3d:b7:a6:ca:17:86:ad:
                    fc:19:be:4f:30:f0:ca:86:c2:fe:fe:06:0e:1c:45:
                    3c:2a:c0:4b:93:1e:a3:0a:f3:02:9c:46:08:44:fa:
                    b1:ac:be:5d:ec:97:06:32:c0:bd:8a:61:e2:7e:52:
                    c4:71:25:2b:a2:ab:44:00:b0:71:c7:9c:6e:d3:87:
                    9d:33:dd:57:ae:f9:e2:6a:9c:f5:fa:ea:ce:8c:0b:
                    8b:96:11:09:28:d7:56:f9:c2:ec:a1:62:78:83:08:
                    90:1a:a7:19:7a:92:ce:75:83:c1:8d:c9:2c:2a:38:
                    f8:b3:5e:fe:fb:15:3e:6f:48:1e:e3:36:0d:74:e0:
                    da:d7:f9:89:78:54:57:22:1d:b5:bb:4a:31:e6:4f:
                    52:02:fb:31:31:96:2f:68:d8:e0:8d:c1:c4:36:aa:
                    c4:da:31:6c:99:89:4c:88:4f:d6:b9:de:71:7e:22:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E4:DC:C0:1F:FE:32:AB:94:59:C8:D3:85:CD:65:A5:4F:0C:BF:9F
            X509v3 Authority Key Identifier:
                keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:51:7b:46:de:bd:d5:03:48:0a:d8:b4:95:f3:27:58:3a:
         a3:46:09:17:35:0e:83:c4:89:af:b4:0b:b5:0d:a4:00:69:ca:
         8c:ed:10:24:b9:64:22:88:6c:9a:8f:c0:02:42:21:3b:f8:e9:
         51:8a:8b:95:b0:d8:b6:86:8b:39:cb:f8:36:df:13:27:39:97:
         0c:98:54:2c:04:5a:e9:97:e8:3f:a9:25:75:a6:ac:18:a0:d4:
         c7:ee:40:48:20:93:03:fe:88:43:97:0c:58:e9:43:d0:34:52:
         98:8b:55:1b:e1:82:06:76:17:b9:22:46:05:36:0b:64:b6:3b:
         63:00:9e:fb:ec:e2:dc:36:24:04:51:41:eb:eb:a8:10:e5:64:
         2e:be:7f:90:f4:2e:97:6f:c0:e2:b7:10:67:9a:fa:40:87:e4:
         a2:79:24:04:87:e3:8d:be:f0:71:88:88:40:cc:cf:3e:32:00:
         78:f2:5a:6f:f8:20:cf:c2:3a:4d:6f:38:93:ef:6d:ce:20:37:
         c6:9c:63:20:23:01:74:9c:2d:c4:22:ce:68:19:99:73:3c:a0:
         4e:50:5d:5c:db:10:ef:9a:64:37:34:21:68:b9:cf:de:7e:c4:
         6f:85:2a:fb:13:24:93:19:7e:70:c8:5d:f1:31:b9:11:af:30:
         8d:cb:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----