Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft
File:                     5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json)
Hash identifier:          rwW8X3xj6g/yn2aH2FN07J5T/Tgc9eNddWukSL1XjjQ=
Subject key identifier:   18:1B:B8:2C:07:CB:B1:57:5F:60:BA:87:C7:C1:44:08:24:D5:88:E1
Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C
Certificate issuer:       /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C
Certificate serial:       1E51C410787919EE73249F492B316DB9D6084461
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft
Manifest number:          04BE
Signing time:             Fri 28 Mar 2025 13:41:09 +0000
Manifest this update:     Fri 28 Mar 2025 13:36:09 +0000
Manifest next update:     Mon 31 Mar 2025 18:46:09 +0000
Files and hashes:         1: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: /Cqbvssz3qKcP1eV6AH6zi7EB31KLJZcWdjS3OQqwQs=)
                          2: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: YKqncd0MGK9keSOjjaDcdWE6AgLtsTa/4D5MWz3HJUk=)
                          3: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: 6ce+LBa3GICr1Mgt/xtux05v3qPiXp2ZYS6ViLVoXMc=)
                          4: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles=)
                          5: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IG7iZEXbFHO4xLgOmo6o/7KH2TIUqm7sDNEwcVuQSOg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:51:c4:10:78:79:19:ee:73:24:9f:49:2b:31:6d:b9:d6:08:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C
        Validity
            Not Before: Mar 28 13:36:09 2025 GMT
            Not After : Mar 31 18:46:09 2025 GMT
        Subject: CN=181BB82C07CBB1575F60BA87C7C1440824D588E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:4e:b6:d0:b4:10:9d:14:33:81:3c:77:d4:
                    11:24:f4:25:dd:1e:d1:c3:15:ba:87:d2:08:1f:f4:
                    78:1f:c7:db:e0:55:5f:96:5c:2b:0b:4f:9e:91:3a:
                    f3:33:0a:d3:67:21:dd:10:3d:8c:af:2c:10:a3:7e:
                    33:ed:e0:02:01:d7:c9:1c:3f:d0:9b:e4:09:f6:ac:
                    f6:b9:0e:60:7c:3f:90:99:62:c2:63:b0:85:3e:5f:
                    1f:95:71:f2:5a:41:50:e2:2c:09:c4:56:e1:98:3a:
                    1f:77:e7:b6:44:7d:ce:f0:2b:b3:3c:66:75:d0:50:
                    80:e6:00:ac:d9:ad:31:6e:64:a5:91:55:38:c8:4e:
                    c8:25:dd:e6:01:e0:f4:3e:76:ec:cb:54:2c:85:6c:
                    83:9e:61:6e:84:f5:ef:83:be:ea:a2:45:8e:b7:12:
                    f4:ec:17:db:01:12:cc:da:17:4a:47:3b:3e:9f:f2:
                    e2:dc:78:93:2c:2e:e4:24:af:c7:c3:c9:3f:0c:51:
                    43:86:e6:e7:52:90:ff:33:13:56:36:21:94:53:11:
                    06:e9:4c:6e:8a:cb:c0:eb:9b:7d:c7:82:39:df:dc:
                    00:9d:c9:b6:12:16:c9:e5:78:b7:54:ec:83:38:5e:
                    45:82:84:c4:22:af:52:9b:b3:1f:fa:8d:3c:11:04:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:B8:2C:07:CB:B1:57:5F:60:BA:87:C7:C1:44:08:24:D5:88:E1
            X509v3 Authority Key Identifier:
                keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c1:89:f4:b6:4e:df:5f:63:12:eb:47:57:d6:d9:a3:29:2b:
         bc:4f:fa:c3:d2:05:0c:f7:8f:00:fb:7f:77:7d:5d:28:71:95:
         e0:60:c3:1c:58:bb:30:6f:ce:46:ad:a4:48:37:f5:f1:8c:49:
         39:74:8b:68:0f:63:d6:46:16:bd:86:ae:d7:39:6a:74:b3:66:
         f3:e8:3b:aa:5c:1a:05:1d:d6:e2:bf:37:c0:88:c6:16:0d:a4:
         95:e3:bd:9d:ad:54:b7:6e:87:55:f9:c3:d8:f9:1a:62:3a:8d:
         ab:03:56:cb:3d:73:d4:c8:d6:7e:16:7f:82:24:a1:96:31:3e:
         74:6f:d2:75:06:74:a5:c3:05:a9:cd:4b:67:26:10:e1:e2:04:
         9c:ca:0a:f2:73:91:82:05:6a:06:9d:bf:8b:48:d5:62:32:19:
         1a:ae:49:1b:a3:f3:d9:c8:11:28:18:a6:19:25:27:5a:6a:50:
         7f:0b:d0:87:14:24:25:b1:dd:ea:3b:a9:cd:b8:03:4e:b3:2a:
         51:41:3c:bd:2d:0b:38:6e:e6:d5:4c:c9:cc:81:35:4d:07:cd:
         fd:b6:82:33:09:49:c6:01:25:ab:6d:86:43:52:74:25:e2:9f:
         fb:27:49:f3:55:2b:df:dc:3d:40:72:50:4d:f3:76:ad:3d:cc:
         2f:4c:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----