Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft
File:                     DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json)
Hash identifier:          2P2OgF1V6jMGSSpd7zb1itJbC6C1ZmnZKCXlBKhTDnk=
Subject key identifier:   28:0F:0F:E4:FC:67:F5:41:8F:C7:64:FC:A6:66:14:3B:F6:D7:BE:4E
Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F
Certificate issuer:       /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F
Certificate serial:       4D23FFD4D7D97C4A8EC0C0962A147E04EB7906B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft
Manifest number:          71
Signing time:             Fri 28 Mar 2025 04:40:49 +0000
Manifest this update:     Fri 28 Mar 2025 04:35:49 +0000
Manifest next update:     Mon 31 Mar 2025 10:38:49 +0000
Files and hashes:         1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: rry2+zEAQCTnnp1DT6Cb11gc7Z2XdYT6O/X9Xn/Cg1E=)
                          2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: V32c5y7nQm4zKGUox874NKHF5BYrfkQ+0cNTU3Kw/Mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:23:ff:d4:d7:d9:7c:4a:8e:c0:c0:96:2a:14:7e:04:eb:79:06:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F
        Validity
            Not Before: Mar 28 04:35:49 2025 GMT
            Not After : Mar 31 10:38:49 2025 GMT
        Subject: CN=280F0FE4FC67F5418FC764FCA666143BF6D7BE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:b5:bc:fe:ce:7f:e0:11:58:59:0f:c9:e2:
                    22:e5:e6:e9:ba:5f:5a:93:4a:5d:fc:a0:fc:63:af:
                    d6:1f:f3:40:e0:80:dd:4b:11:38:aa:7a:41:c6:04:
                    b3:62:9f:4e:c1:e4:3d:be:d1:02:33:67:e1:4d:c8:
                    1a:53:16:10:bc:d8:fa:55:9f:39:27:5f:23:42:34:
                    df:8a:99:19:2a:ca:36:72:5b:e2:fd:87:a3:2a:bc:
                    d4:bf:8c:c9:c7:5a:a3:24:6c:c2:e5:bc:92:07:f7:
                    09:06:cb:31:45:7b:3a:0f:58:df:98:eb:af:95:99:
                    48:b5:4f:4e:6f:47:4b:d6:2e:f5:b8:8f:a6:27:f3:
                    41:1a:a8:8d:8e:10:0c:5b:94:e4:5b:68:83:a2:d8:
                    4a:e0:ab:26:7d:f2:b5:38:fb:b5:6b:58:10:5b:fb:
                    24:89:41:ea:43:cd:31:66:fa:53:8a:0e:9e:ac:98:
                    77:d1:85:89:39:a6:9e:e6:b7:22:1c:c0:91:90:c3:
                    52:d6:b1:20:a7:6e:56:2d:a8:e2:6c:cc:fe:c5:f3:
                    a6:02:47:72:52:96:a7:d4:7a:99:40:85:75:53:53:
                    96:bf:72:03:54:55:a0:84:92:00:cc:b5:1e:c2:06:
                    48:a2:5f:de:48:7e:84:3a:cd:72:22:f7:a1:ee:02:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:0F:E4:FC:67:F5:41:8F:C7:64:FC:A6:66:14:3B:F6:D7:BE:4E
            X509v3 Authority Key Identifier:
                keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:8c:c0:06:57:21:77:68:33:41:83:d0:3b:aa:ea:d1:8e:
         e6:a5:45:1b:44:29:76:20:bb:dd:7a:6b:7e:06:2a:c2:23:24:
         75:bc:2d:61:fd:d4:81:22:c2:d1:94:3f:d2:fc:e5:ae:9e:2a:
         b9:56:36:7d:fa:35:19:c0:70:fb:7e:0f:0a:fe:51:4a:2f:44:
         2c:20:28:08:9e:f9:7c:db:e0:72:3d:2c:71:f5:ac:06:57:5a:
         4b:b0:61:bc:06:16:22:e4:2d:f6:6a:0c:5f:5c:80:5a:dc:33:
         a2:b9:ab:c6:9d:3b:80:54:fa:85:6e:2a:ed:67:7b:28:df:d9:
         85:3d:5d:40:60:c5:75:8c:f7:60:ae:65:d5:c9:be:23:64:7a:
         4d:34:ff:fe:ad:1e:09:7f:01:62:89:ed:ef:f7:0b:4a:a2:85:
         7f:9f:0f:29:d0:c1:55:db:8e:37:e4:c9:10:c3:44:ec:97:10:
         71:29:70:c8:39:92:83:a2:51:ca:a0:2e:95:0e:26:db:19:77:
         58:55:4b:76:5a:78:27:11:ad:51:56:68:3d:0c:bd:f3:78:0f:
         a1:bb:54:ae:c4:e2:4c:d4:1d:03:dd:90:d7:88:63:cb:6f:53:
         ae:a8:66:75:81:92:36:5b:3e:86:74:d0:50:d1:4a:cf:1a:70:
         77:52:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:55 2025 by rpki-client