Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft
File:                     2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json)
Hash identifier:          ZOZhMzHyWo/55eG1EEIJBZtwAF7l3hlUdIqxdC9ZdwQ=
Subject key identifier:   26:B9:29:2D:06:8A:CE:36:C4:B5:B1:73:28:AD:4F:2D:D5:C8:02:8B
Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9
Certificate issuer:       /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9
Certificate serial:       65809E6AB7BFDB5045CE3849380498705E83C019
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft
Manifest number:          04BD
Signing time:             Thu 27 Mar 2025 20:21:18 +0000
Manifest this update:     Thu 27 Mar 2025 20:16:18 +0000
Manifest next update:     Sun 30 Mar 2025 23:38:18 +0000
Files and hashes:         1: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: lejZjp2kP2Eqmnw6t/CUZ56RtyR9tIIxtOvmOd/iIao=)
                          2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: 4ZQAqwv3D6xv0wZbi1M8yeP/AQMFxtqYLV8/krPMgXw=)
                          3: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=)
                          4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:9e:6a:b7:bf:db:50:45:ce:38:49:38:04:98:70:5e:83:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9
        Validity
            Not Before: Mar 27 20:16:18 2025 GMT
            Not After : Mar 30 23:38:18 2025 GMT
        Subject: CN=26B9292D068ACE36C4B5B17328AD4F2DD5C8028B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:1a:fc:42:8f:ef:2d:92:fb:cf:f0:19:bb:
                    1b:2e:79:92:a3:c9:b6:76:70:81:42:fe:5d:75:09:
                    2c:dc:34:b2:ec:cf:58:91:84:ba:1c:30:53:ce:08:
                    67:b6:ed:e5:6b:97:dd:ba:23:f7:3b:e5:98:65:37:
                    24:02:65:a8:59:47:7b:b1:8c:64:a2:0c:b7:21:5a:
                    d1:4f:fc:64:0e:2a:67:9e:b5:91:98:2d:fc:b4:fa:
                    b2:15:fc:ab:67:49:24:7d:0c:39:54:5a:09:5e:e0:
                    35:eb:88:2f:34:14:0e:91:ff:31:2e:c1:c2:d5:15:
                    09:f9:fb:44:c8:9a:e1:ab:00:d9:2a:24:a6:ce:99:
                    68:95:79:7d:65:5e:e9:f2:94:47:ea:06:6e:c8:58:
                    d0:0c:5d:66:57:6c:a2:65:5d:6f:b7:0b:76:e2:93:
                    19:28:ed:02:d7:62:81:14:50:66:e5:fe:3c:97:6a:
                    ca:02:df:d7:c7:15:c9:bc:fe:70:70:ad:c0:a4:62:
                    8a:2a:4c:b6:cd:07:aa:58:d9:f7:b6:7c:95:db:c5:
                    4a:b3:97:2a:19:68:c3:00:d2:f1:5a:6a:99:8b:5d:
                    3b:86:83:ec:39:7e:21:c6:8d:05:6a:d1:ba:2d:9a:
                    13:28:96:6a:de:b1:09:57:06:4c:fc:51:81:8d:38:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:29:2D:06:8A:CE:36:C4:B5:B1:73:28:AD:4F:2D:D5:C8:02:8B
            X509v3 Authority Key Identifier:
                keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:5c:ff:18:22:2a:a8:fb:62:b1:1e:4c:10:5e:a7:bb:26:
         ee:63:02:16:9d:ad:63:6c:28:7c:7c:82:d7:aa:1d:1b:65:02:
         23:55:6f:2a:1c:53:62:80:e5:77:d5:71:59:9c:e5:64:74:ed:
         cb:d8:64:da:3c:72:02:e9:36:f7:6f:d6:60:18:29:4a:4a:f1:
         d7:44:55:e8:9e:a0:c2:0c:c3:4d:f0:a3:b6:42:8d:01:10:cd:
         6d:7a:1f:b4:03:68:3e:d2:b7:b1:6f:23:5d:99:c1:64:82:2f:
         42:1c:40:ca:f1:ae:9c:c6:6b:43:a7:5d:fa:bd:63:3c:ba:86:
         da:45:a4:4a:7d:a2:64:1d:0d:32:a3:87:d0:67:65:4b:d0:11:
         d6:51:81:40:6a:37:64:6a:d7:d0:f1:0d:45:a9:e9:99:12:66:
         9d:05:9e:2e:1f:10:37:14:ca:f1:b4:14:28:dc:e8:cd:92:98:
         ae:f9:a5:c0:ab:23:72:99:fb:16:eb:05:5b:f2:85:05:e7:b0:
         fc:63:8f:ed:da:19:62:e5:6e:5c:f6:2c:6f:6d:5d:ab:23:0c:
         ef:ec:90:f6:3c:fe:86:d8:5b:7c:c0:17:14:c4:3e:60:e8:01:
         b5:75:1a:cf:68:e5:37:22:75:54:12:b9:86:7d:2d:c2:43:65:
         52:40:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----