Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
File:                     0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json)
Hash identifier:          MBqv2nXIosXkTcRqq1dPszHsLmxpnQxsTHjYIK5MKtk=
Subject key identifier:   20:33:35:E9:17:CA:AD:25:47:9A:62:A4:A1:DB:D7:1D:56:48:88:91
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Certificate issuer:       /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial:       4A4540FF61986E1151024E1D73FB443C1614B749
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
Manifest number:          91
Signing time:             Thu 27 Mar 2025 10:11:44 +0000
Manifest this update:     Thu 27 Mar 2025 10:06:44 +0000
Manifest next update:     Sun 30 Mar 2025 17:12:44 +0000
Files and hashes:         1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: uazV2759cGKJ//y5e1MRdfHzaCSXf3t6sfsE8hdHas8=)
                          2: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: xi5bT/kTvoXhJFjxH7GKDeCGyVsU7p7ps+PKoyMnUhA=)
                          3: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: F0/eqGKUxlZeu9rWns4dROm70sRgqzogFZZRNuTrrv8=)
                          4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: bXAH1nFrDm9m+pPZ5jNu4V3REj1a1br0FFVByMgt14Y=)
                          5: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: XRpZ4Xwu9Tw+4dS+WipTrB/DFVnQUVY3cIyu6fJrMe0=)
                          6: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: pgHoup+hhLPlyELV0ARN0xlJHucpUr1fM5TiQaPrLOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:45:40:ff:61:98:6e:11:51:02:4e:1d:73:fb:44:3c:16:14:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
        Validity
            Not Before: Mar 27 10:06:44 2025 GMT
            Not After : Mar 30 17:12:44 2025 GMT
        Subject: CN=203335E917CAAD25479A62A4A1DBD71D56488891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:07:02:7d:94:c5:5f:fb:48:72:c0:76:0a:
                    8c:4d:b9:09:66:16:16:68:6c:bb:23:de:13:8b:81:
                    30:bb:70:cb:85:60:9a:35:42:e5:15:32:12:ac:f2:
                    0c:aa:63:36:8e:dd:95:56:6b:b2:cd:a5:e9:5f:ad:
                    2b:db:9d:41:86:76:fc:df:cf:73:54:70:b0:b5:bd:
                    b6:1a:9e:27:c1:5f:6b:c5:39:2b:36:b8:8b:d0:ee:
                    35:2a:13:06:25:a7:af:11:88:c7:07:39:ab:08:46:
                    15:79:c8:6e:f3:d8:77:b0:d9:c9:ea:12:ad:12:fd:
                    da:10:cf:e9:ec:14:d7:20:98:ae:f6:a9:ff:31:86:
                    16:01:b0:55:f1:f7:35:f4:f7:21:29:2c:2a:3d:84:
                    70:57:e2:72:27:7d:2d:79:94:c1:0f:49:2c:e6:85:
                    c7:9b:0c:19:13:f3:ee:61:3d:90:ea:33:c7:9f:4f:
                    2b:8d:7f:61:5e:35:f5:93:99:46:5d:4b:85:3b:f6:
                    00:7c:a1:5f:2b:44:00:c5:a9:ff:65:a5:e0:2b:1d:
                    d3:ee:87:ee:33:cd:0d:a3:96:5b:a6:9e:47:d1:64:
                    66:50:f7:94:71:b5:69:da:49:c7:49:c0:63:64:a6:
                    91:ab:58:d7:10:59:2a:ad:82:26:a3:5a:82:2a:6e:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:35:E9:17:CA:AD:25:47:9A:62:A4:A1:DB:D7:1D:56:48:88:91
            X509v3 Authority Key Identifier:
                keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:90:96:d4:c6:90:cf:c1:fb:9a:ed:c1:fb:52:79:0b:77:
         9e:fc:b6:3b:dc:e3:7d:2f:18:ae:f2:33:da:97:13:ed:4b:00:
         19:94:07:20:de:08:20:1e:ef:a7:b2:6f:51:ca:b3:f4:f5:52:
         89:4a:75:fe:7e:14:06:6e:89:e2:00:cc:7d:67:7e:e6:18:dd:
         5b:9f:be:35:a6:68:75:b8:fc:8e:26:47:92:cd:e2:e9:f5:99:
         e8:84:93:af:87:67:29:34:42:70:a2:2c:f0:14:53:c2:18:83:
         9c:dc:75:06:e3:a4:49:39:cc:da:b7:06:4c:57:b2:7c:0b:06:
         6a:b6:29:f4:e3:f6:f6:8c:52:2c:d3:98:d2:ae:2e:0c:14:98:
         77:c9:e5:7c:08:ff:11:ef:37:fc:b0:f0:b5:52:2d:2d:10:bf:
         d3:f1:89:eb:fb:eb:2f:34:2f:21:07:fc:ca:a9:0c:c6:73:98:
         01:8f:13:b9:a1:4b:cd:74:b1:d7:51:63:97:cc:ca:f3:8a:0d:
         7a:36:b6:b5:e3:dc:de:5c:4e:5d:38:68:bf:2d:86:d1:9f:78:
         e5:b3:b9:5c:9e:df:16:5f:ef:ea:02:be:f0:71:1b:8d:33:ef:
         5d:15:16:06:9d:52:49:46:5c:7f:31:ca:9e:93:35:d4:2d:99:
         fa:ed:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----