Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
File:                     3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json)
Hash identifier:          tcWYEQsSnQojKtfEHEPT4ytCvUMkF5RTKX68NpkPeKk=
Subject key identifier:   DB:28:46:1F:21:60:16:A8:E2:FB:C4:33:7A:AA:AD:7B:69:11:1D:3D
Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
Certificate issuer:       /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
Certificate serial:       060285427B6CA1F39286E823847DF9ECAFDF3960
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
Manifest number:          0356
Signing time:             Fri 28 Mar 2025 04:21:08 +0000
Manifest this update:     Fri 28 Mar 2025 04:16:08 +0000
Manifest next update:     Mon 31 Mar 2025 06:56:08 +0000
Files and hashes:         1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: gl+ynlRnQ2CKc5mxlXNmNFR0t3K+YWU4jZGJtecteuU=)
                          2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:85:42:7b:6c:a1:f3:92:86:e8:23:84:7d:f9:ec:af:df:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
        Validity
            Not Before: Mar 28 04:16:08 2025 GMT
            Not After : Mar 31 06:56:08 2025 GMT
        Subject: CN=DB28461F216016A8E2FBC4337AAAAD7B69111D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a3:16:28:88:c0:b4:0b:db:78:97:cd:6f:d1:
                    87:78:e4:44:00:ee:86:34:5d:a5:b7:36:89:d5:0c:
                    6f:1a:89:d3:ef:22:5f:0f:3d:45:cc:6d:64:d2:2c:
                    27:7d:a4:64:6d:12:41:41:3b:0e:87:14:fa:ff:aa:
                    74:ed:d6:a9:a9:09:a0:b2:80:83:26:c5:57:b8:0f:
                    48:88:5e:58:24:dc:1c:32:77:aa:47:f0:65:7a:e4:
                    73:e8:dc:1f:c0:18:c5:5f:57:2b:07:47:b0:33:5d:
                    72:65:6f:dc:f9:3f:e3:29:bb:06:68:12:56:26:83:
                    21:e0:6b:02:43:c0:6c:ea:2f:35:00:be:5d:f1:ea:
                    b2:74:63:6c:81:d8:9c:59:e0:de:59:c3:98:59:c8:
                    b7:3e:af:dd:a5:29:3c:1c:4a:12:30:02:2d:64:cd:
                    7a:c6:ca:98:48:f9:2a:9d:b1:39:ff:05:02:e9:4a:
                    08:72:c4:3d:49:0a:bd:ec:66:68:86:7e:d7:cf:85:
                    7e:71:c5:59:49:75:bb:22:27:68:87:8c:67:ff:28:
                    a1:66:31:fa:fb:37:9f:b9:0c:29:46:ae:b3:aa:b2:
                    6a:af:9f:f0:5d:cb:83:81:f1:cc:d6:8a:86:9f:49:
                    31:14:ab:b4:2a:59:db:31:28:f9:7d:09:cf:73:07:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:46:1F:21:60:16:A8:E2:FB:C4:33:7A:AA:AD:7B:69:11:1D:3D
            X509v3 Authority Key Identifier:
                keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:fe:8d:d3:e4:89:ff:38:a2:55:e2:93:e9:61:19:a5:94:
         28:65:6e:f0:bb:83:5e:62:3d:02:9e:51:0d:ae:3e:d9:38:23:
         bc:58:7a:8c:61:1d:3c:fe:92:6b:06:2e:a0:a5:52:b0:df:e7:
         6c:1a:4f:b2:06:de:1c:1b:08:37:56:12:c6:41:67:54:8f:e5:
         06:b6:19:7c:87:be:0a:2c:01:47:69:59:de:c2:e7:26:14:26:
         15:9c:3b:d7:76:51:7f:6c:54:57:db:64:62:61:4a:f1:c1:31:
         0f:ee:88:74:d1:20:47:0f:88:a3:b5:65:dd:e7:3d:86:6b:63:
         2f:ef:01:30:f6:17:a5:02:8e:ee:ea:17:02:0b:ed:97:f9:5b:
         14:78:fa:16:03:c6:3c:ca:d1:ec:91:9d:93:59:f3:c4:b4:59:
         ac:96:5f:42:5f:3c:17:f1:51:f2:d0:c9:70:af:1c:73:f1:0e:
         e2:5c:83:48:d8:72:00:1f:eb:d9:08:50:10:ff:7b:54:56:f0:
         80:a8:d2:67:b9:4e:8c:9a:c7:b5:e2:f7:fd:f2:db:8e:a9:7d:
         df:b4:e1:85:b4:41:d4:1f:4d:e0:24:98:be:0a:97:9a:76:f7:
         c3:16:a4:c3:6b:77:db:f3:26:08:ce:96:67:3b:e3:e4:c4:d0:
         23:19:dd:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBgKFQntsofOShugjhH357K/fOWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC
QzY0MzUyNTAeFw0yNTAzMjgwNDE2MDhaFw0yNTAzMzEwNjU2MDhaMDMxMTAvBgNV
BAMTKERCMjg0NjFGMjE2MDE2QThFMkZCQzQzMzdBQUFBRDdCNjkxMTFEM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkoxYoiMC0C9t4l81v0Yd45EQA
7oY0XaW3NonVDG8aidPvIl8PPUXMbWTSLCd9pGRtEkFBOw6HFPr/qnTt1qmpCaCy
gIMmxVe4D0iIXlgk3Bwyd6pH8GV65HPo3B/AGMVfVysHR7AzXXJlb9z5P+MpuwZo
ElYmgyHgawJDwGzqLzUAvl3x6rJ0Y2yB2JxZ4N5Zw5hZyLc+r92lKTwcShIwAi1k
zXrGyphI+SqdsTn/BQLpSghyxD1JCr3sZmiGftfPhX5xxVlJdbsiJ2iHjGf/KKFm
Mfr7N5+5DClGrrOqsmqvn/Bdy4OB8czWioafSTEUq7QqWdsxKPl9Cc9zBzgLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2yhGHyFgFqji+8Qzeqqte2kRHT0wHwYDVR0j
BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG
MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0
MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli
ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG
MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAITk/o3T5In/OKJV4pPpYRmllChlbvC7g15i
PQKeUQ2uPtk4I7xYeoxhHTz+kmsGLqClUrDf52waT7IG3hwbCDdWEsZBZ1SP5Qa2
GXyHvgosAUdpWd7C5yYUJhWcO9d2UX9sVFfbZGJhSvHBMQ/uiHTRIEcPiKO1Zd3n
PYZrYy/vATD2F6UCju7qFwIL7Zf5WxR4+hYDxjzK0eyRnZNZ88S0WayWX0JfPBfx
UfLQyXCvHHPxDuJcg0jYcgAf69kIUBD/e1RW8ICo0me5Toyax7Xi9/3y246pfd+0
4YW0QdQfTeAkmL4Kl5p298MWpMNrd9vzJgjOlmc74+TE0CMZ3cc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:36 2025 by rpki-client