Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
File:                     E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json)
Hash identifier:          w5KCsRqzhCcPPqPXYYq+NrNanwhQQhETKnag+IQt+2g=
Subject key identifier:   CD:A9:AC:BC:11:2E:15:EB:96:14:17:FE:82:E2:16:05:61:FF:0D:D1
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Certificate issuer:       /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial:       79102697E83D62860901CADB2C513BC322F034CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
Manifest number:          0173
Signing time:             Fri 28 Mar 2025 05:42:00 +0000
Manifest this update:     Fri 28 Mar 2025 05:37:00 +0000
Manifest next update:     Mon 31 Mar 2025 09:37:00 +0000
Files and hashes:         1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: ivXl91sc8/E/oNOdw2uml02UyfS+/Vgp9bWj7nPcG2k=)
                          2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:26:97:e8:3d:62:86:09:01:ca:db:2c:51:3b:c3:22:f0:34:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
        Validity
            Not Before: Mar 28 05:37:00 2025 GMT
            Not After : Mar 31 09:37:00 2025 GMT
        Subject: CN=CDA9ACBC112E15EB961417FE82E2160561FF0DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:56:f2:43:f8:01:fe:e3:88:94:9e:16:6b:
                    75:04:94:5f:b5:c0:a2:e8:af:1d:a3:a2:7a:44:e8:
                    71:2b:ed:79:9c:96:c3:a0:52:64:d1:0a:05:ee:fa:
                    ac:55:31:c2:6e:ab:43:0a:f8:d6:ed:6a:40:93:70:
                    4f:86:fd:ac:a2:8e:00:4d:6c:f7:08:14:da:8d:a5:
                    0c:df:f1:a9:d7:ea:9e:c2:36:10:66:1a:9e:81:01:
                    7a:5f:ff:fd:6f:b1:74:3f:84:1a:d5:1e:31:04:cb:
                    8d:c2:1d:29:21:9d:c2:3e:81:e3:39:85:a4:f0:da:
                    18:b2:8b:5a:9a:1b:75:96:2a:72:9b:0b:ce:df:43:
                    45:3a:b5:87:df:ff:b0:a7:04:e3:a7:e5:ce:d0:05:
                    07:ce:51:af:26:39:a5:9a:ff:50:92:63:cf:b3:a4:
                    4e:b9:94:ff:5d:28:15:e3:70:d3:65:8d:68:95:9d:
                    b3:de:59:84:e2:64:1f:67:a5:7e:25:1c:48:f9:6c:
                    04:2a:13:3d:64:8f:e5:3e:9d:0c:ad:1c:95:cb:61:
                    bb:cc:43:da:04:5d:a8:40:9e:ca:22:bb:6b:00:9d:
                    c0:1d:f2:13:58:58:d9:ec:40:3a:65:50:08:9f:68:
                    d9:a1:44:6f:44:2a:66:21:f4:ee:fe:1c:b2:57:60:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A9:AC:BC:11:2E:15:EB:96:14:17:FE:82:E2:16:05:61:FF:0D:D1
            X509v3 Authority Key Identifier:
                keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:57:31:c3:12:ed:14:7e:4b:1d:e4:1f:1c:08:ab:33:2f:bf:
         9c:57:a0:46:6f:64:0b:8b:a1:7d:3c:36:d4:93:a4:8d:7b:45:
         19:46:a8:74:bf:62:10:b5:ff:46:d9:ec:61:ea:6b:5a:62:e3:
         85:97:bf:1a:34:51:a6:4a:e3:3c:5b:ad:df:cc:c8:59:32:8c:
         46:b5:25:f0:9e:78:29:e5:e0:92:c9:eb:7e:9c:ae:7c:c4:2a:
         ce:47:e5:e5:30:b4:9c:df:f5:39:27:40:35:40:66:7b:dd:5b:
         5e:5c:74:f0:c6:2a:6f:6e:f5:b8:fc:0c:32:24:9e:ff:0d:95:
         64:f3:7c:00:24:68:d7:5a:16:40:a3:ce:b4:e7:a8:96:1b:4c:
         bc:44:fe:e2:26:a4:09:be:53:fa:03:28:cd:d1:7c:18:71:98:
         4f:fe:d1:27:35:7f:ec:3b:b2:b5:dc:06:26:6e:2b:47:58:ff:
         7e:80:fd:33:5c:8e:a4:8a:58:3e:8c:dc:b5:33:71:f4:eb:85:
         06:65:9f:e0:1a:c9:bf:63:2e:0d:4d:58:b1:54:78:16:85:9b:
         ac:75:c1:6d:16:d5:e3:f5:af:e8:8a:f3:5b:6a:37:de:bb:6c:
         55:5c:0a:ff:41:d3:bb:4e:70:7b:92:4f:64:2b:e5:20:10:69:
         1a:d6:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----