Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
File:                     3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json)
Hash identifier:          X1v7Ts8PL15gPlYlEEjlNYKllQ2Osobm+U3rqXuGEr4=
Subject key identifier:   AB:C0:2B:4E:06:D4:03:EE:77:ED:D2:EA:FD:CD:3B:7E:4B:C4:FF:07
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Certificate issuer:       /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial:       1AA4EB144D3B760DD01F74896F3D4A1518631220
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
Manifest number:          37
Signing time:             Thu 27 Mar 2025 11:21:29 +0000
Manifest this update:     Thu 27 Mar 2025 11:16:29 +0000
Manifest next update:     Sun 30 Mar 2025 12:06:29 +0000
Files and hashes:         1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: 0x0m2T6cjnen//tJvR1++muK5NuEkcyHiOKDMYORePE=)
                          2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a4:eb:14:4d:3b:76:0d:d0:1f:74:89:6f:3d:4a:15:18:63:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
        Validity
            Not Before: Mar 27 11:16:29 2025 GMT
            Not After : Mar 30 12:06:29 2025 GMT
        Subject: CN=ABC02B4E06D403EE77EDD2EAFDCD3B7E4BC4FF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:e4:1a:52:f9:01:6f:62:fd:7c:97:fa:d5:
                    c5:49:ee:fe:86:3d:a4:33:34:ae:ca:37:83:70:cd:
                    b3:31:bb:b3:01:d0:c0:5a:b2:50:3f:76:b8:ab:75:
                    2a:c5:00:57:36:f2:d6:19:91:c0:2f:7d:ff:f2:57:
                    0d:c6:a3:60:9a:77:29:88:56:07:3a:0d:14:af:99:
                    c2:aa:86:1b:e8:ad:3a:0d:e4:7b:59:62:53:82:fd:
                    6c:3b:54:e4:46:94:80:9f:fa:ed:d9:55:4d:3f:9f:
                    33:5f:c4:06:3b:0d:97:4d:b5:1c:db:ff:18:e8:93:
                    d7:2a:c1:6f:b2:28:8f:f2:bd:aa:8c:a9:37:2f:92:
                    91:b5:d8:6d:1b:83:ca:33:7f:17:b6:5c:c2:2e:60:
                    23:98:ef:67:04:1b:5c:3e:bb:86:a2:a5:da:47:ba:
                    6e:e5:08:cc:1d:fe:e8:1b:91:47:aa:a9:a5:1c:7c:
                    33:41:3f:42:89:e9:e9:b1:12:e5:31:7a:1c:b9:04:
                    2d:7f:02:6c:a8:1d:02:a7:7b:78:f5:4b:2b:96:2a:
                    40:05:7c:ac:6f:41:09:02:2e:3d:c6:f3:f4:8f:16:
                    bf:7f:46:07:dc:12:6a:a0:65:ae:a9:97:0c:2e:77:
                    5b:b4:52:3c:21:83:9d:db:15:88:68:a2:2d:08:8e:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C0:2B:4E:06:D4:03:EE:77:ED:D2:EA:FD:CD:3B:7E:4B:C4:FF:07
            X509v3 Authority Key Identifier:
                keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:f2:d2:c3:b9:6e:37:c4:9d:6f:5a:f9:65:7e:78:1c:a8:
         19:7c:a2:28:1d:76:de:57:6e:5b:08:fe:1b:4c:e9:b8:d5:8b:
         45:eb:3b:8a:e7:55:6c:f6:bd:06:1d:75:71:a5:9d:44:13:19:
         1e:0c:1c:86:c5:ce:31:3f:36:61:d5:1e:0c:eb:3e:10:65:9c:
         f6:0a:6a:98:30:a0:bf:1c:50:0f:df:a2:05:c5:0f:fb:30:f7:
         50:eb:b8:90:46:2e:27:17:cf:2b:40:62:a5:45:81:e3:6b:90:
         93:61:9d:8f:b7:35:8e:52:03:66:e9:26:c5:4d:23:92:57:01:
         19:3b:dd:75:a2:0a:11:95:b9:d9:1c:51:c2:7a:72:a5:b9:a3:
         7e:88:30:42:ea:35:92:f3:49:e8:cc:22:c6:9c:24:6f:b6:38:
         b7:69:5a:76:d2:b4:98:3d:69:73:74:a8:6a:42:13:6b:d2:59:
         42:85:70:30:6b:1e:c3:f8:86:de:bd:8a:a3:8b:08:79:3a:7a:
         e1:da:f6:4b:4a:ec:16:31:73:ec:ca:74:fe:73:93:f9:75:07:
         9a:52:93:d6:68:23:13:89:f2:1d:b8:71:f8:de:7a:90:fd:db:
         55:5a:f1:d0:c2:1a:38:19:7e:a9:a5:89:4b:d6:41:fd:82:05:
         db:a3:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----