Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
File:                     3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json)
Hash identifier:          Pv+flJkfH7sbc4XjahsjvCtftAriNKgLqbycpewrQZA=
Subject key identifier:   A0:7C:A5:32:D5:CC:7F:3D:E9:C9:14:79:17:1B:04:E1:14:93:CB:19
Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
Certificate issuer:       /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Certificate serial:       32DEF0B15EBEBB50AC1666F20469FE7DB8C99203
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
Manifest number:          02A7
Signing time:             Fri 28 Mar 2025 07:42:03 +0000
Manifest this update:     Fri 28 Mar 2025 07:37:03 +0000
Manifest next update:     Mon 31 Mar 2025 12:22:03 +0000
Files and hashes:         1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: yRdeb3NqF4ZcyZxD6LsO3TG3ENbo+6IP/+SJnFp8fYo=)
                          2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: P8Omv4YMdnsvaEIej+qb+BBba9eBf1ssCLAulJkcHdw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:f0:b1:5e:be:bb:50:ac:16:66:f2:04:69:fe:7d:b8:c9:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
        Validity
            Not Before: Mar 28 07:37:03 2025 GMT
            Not After : Mar 31 12:22:03 2025 GMT
        Subject: CN=A07CA532D5CC7F3DE9C91479171B04E11493CB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:ba:73:4f:c3:a1:39:09:4f:48:34:12:af:
                    32:c9:25:eb:a3:0a:57:1e:51:f1:bf:4e:1b:54:4d:
                    48:b1:0b:49:3b:64:f9:12:e4:ee:17:69:23:ab:a4:
                    16:36:ad:33:03:59:d8:6f:f9:c9:7a:f0:49:6e:a1:
                    05:ac:d2:e0:7f:88:49:b1:bf:2c:b3:7b:60:12:5c:
                    b8:7b:e8:f0:c1:ba:56:67:c1:fd:fd:d5:3f:c1:c0:
                    bd:72:c7:12:94:f0:2d:5e:1f:81:61:e6:18:90:7e:
                    2f:cc:c2:7b:9f:41:07:7c:2e:02:5d:7d:1d:1d:c3:
                    c7:46:6e:c4:5c:cf:20:8f:68:de:c9:53:e3:bb:7c:
                    85:8a:43:35:f2:ea:ca:ae:10:9f:19:8d:5f:01:cf:
                    bb:f6:f7:fb:09:11:32:3f:90:fc:05:17:97:48:5b:
                    87:b3:f6:c3:66:b8:63:e1:e8:a8:6b:ca:61:11:3d:
                    ef:b6:0c:bd:47:c1:1d:1d:e5:c0:20:c0:1f:d2:ba:
                    5a:4a:72:43:27:ba:d0:12:d8:75:1f:6d:52:07:25:
                    8b:0e:52:5a:4b:b1:ae:47:f4:f1:fb:bd:82:27:e1:
                    6c:e7:2b:b5:37:b9:a5:9e:13:61:02:bb:96:ba:ae:
                    65:35:37:0e:21:6d:72:e2:14:e1:ac:b4:75:05:a2:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:A5:32:D5:CC:7F:3D:E9:C9:14:79:17:1B:04:E1:14:93:CB:19
            X509v3 Authority Key Identifier:
                keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:27:7b:cc:76:9a:20:82:5a:8e:42:55:bc:65:bc:f2:21:ec:
         8b:a9:e2:2d:e3:86:16:01:fc:b2:eb:08:32:67:6a:53:9b:af:
         a4:71:d1:d4:72:a6:b3:5d:4f:0c:54:b5:88:e4:64:a5:41:ad:
         02:68:1a:97:ce:12:91:0e:fc:fb:66:b6:13:4e:d1:e4:6b:b8:
         66:de:2e:59:24:bb:98:e1:9b:a9:33:81:6f:6d:33:c7:0c:f8:
         aa:c2:bc:a3:20:a7:df:c1:21:98:18:9e:ba:3a:59:b0:b7:2a:
         d4:9d:f7:6a:ee:eb:e1:f0:31:ed:ed:5b:57:51:9a:8e:0f:3f:
         bd:9b:28:fb:6b:f4:ce:c9:50:cd:c6:1a:ba:9d:f1:d7:20:f5:
         ae:42:46:b1:e9:00:ee:49:73:d3:18:17:bb:7a:56:c9:03:f8:
         0d:e6:76:8b:b7:fb:d7:ca:7b:1e:55:65:fd:3b:c4:53:9a:b7:
         58:85:02:ec:9a:ce:4b:bc:07:85:da:2c:34:0a:97:3e:d6:f8:
         a3:2e:1a:3d:53:7d:fe:ce:60:7e:d9:81:b9:75:b8:44:61:9d:
         b2:9f:99:16:e5:37:5f:33:ac:b5:aa:f0:e0:30:df:47:a5:5e:
         9c:1c:98:74:cf:ae:b8:d8:8c:3e:9f:0e:ef:bd:c9:4d:e5:a9:
         32:58:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:27 2025 by rpki-client