Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
File:                     1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json)
Hash identifier:          HYS1nbr5R4P61BzesH5/eWUpPdf/MlhNCO/QRZ69agQ=
Subject key identifier:   13:B9:C0:9C:02:41:E0:75:D5:40:98:70:29:D5:72:C6:99:74:DB:9B
Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A
Certificate issuer:       /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A
Certificate serial:       3BFBBCF60E9F4788BC3D3F2B882E064B30F2FA8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft
Manifest number:          042D
Signing time:             Fri 28 Mar 2025 22:52:12 +0000
Manifest this update:     Fri 28 Mar 2025 22:47:12 +0000
Manifest next update:     Mon 31 Mar 2025 23:42:12 +0000
Files and hashes:         1: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=)
                          2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=)
                          3: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=)
                          4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=)
                          5: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: 8aWBm/rqpjMriKocfGHqeTpT+8HO0A74OnJjZNTZ3R0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fb:bc:f6:0e:9f:47:88:bc:3d:3f:2b:88:2e:06:4b:30:f2:fa:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A
        Validity
            Not Before: Mar 28 22:47:12 2025 GMT
            Not After : Mar 31 23:42:12 2025 GMT
        Subject: CN=13B9C09C0241E075D540987029D572C69974DB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:0f:fa:31:b7:60:71:e3:71:39:5a:25:9c:
                    54:25:8a:21:39:98:d0:53:a8:ac:d5:6e:c1:37:57:
                    d5:aa:d4:64:6a:49:dd:56:79:52:83:57:fd:28:38:
                    4f:3e:c8:45:1b:62:f1:ab:21:80:da:86:d9:d7:76:
                    fb:a8:36:45:2f:4a:b3:35:2a:55:98:f4:7a:45:15:
                    d3:ae:59:06:84:e1:30:fe:4a:c7:6d:5f:2a:ce:8e:
                    19:7d:e6:2c:9e:7f:11:4c:c8:62:e7:7c:1b:9f:8c:
                    a8:7b:16:a6:53:41:6a:1a:2b:00:45:bf:c4:e5:d7:
                    31:ef:7c:f8:b6:82:73:93:06:36:2e:67:fd:f7:c1:
                    9b:24:c5:e4:ce:bc:52:1f:e8:51:1b:15:39:3e:5a:
                    e3:44:c8:32:eb:19:94:02:7d:09:19:c9:5a:af:10:
                    a6:91:9e:fd:30:aa:6e:09:84:b1:8a:1a:cd:6e:dc:
                    d9:be:14:21:9a:a8:13:93:08:88:d3:60:85:8b:79:
                    99:10:2b:86:72:f8:95:7a:cc:13:d9:d3:4b:e2:1b:
                    4e:ce:02:d1:83:7d:08:dc:25:84:dd:5c:01:9c:a2:
                    42:dc:44:2d:eb:10:67:94:f4:5a:ed:0f:03:34:15:
                    bc:f7:ec:25:9f:cc:48:f1:e4:50:86:f6:08:55:c1:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:C0:9C:02:41:E0:75:D5:40:98:70:29:D5:72:C6:99:74:DB:9B
            X509v3 Authority Key Identifier:
                keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:ad:ec:b8:c7:b0:b4:1a:c3:2d:7f:09:fc:6b:6e:3a:ed:
         0b:e6:5a:fd:0f:bc:cc:32:0d:c0:25:86:40:ec:3c:7d:61:4d:
         a1:a5:4f:cd:06:de:71:56:d0:01:0a:86:20:f4:7b:ba:84:6b:
         9e:db:d0:07:96:e9:20:d4:40:87:0c:fa:bb:56:b6:7d:eb:1a:
         00:f0:ae:63:1f:2f:c1:97:98:6f:ac:c5:49:7f:b6:41:e6:df:
         c2:f6:96:5a:60:51:b1:35:ad:40:c7:f5:57:7a:3a:6c:5a:0f:
         44:a0:dc:ea:85:84:95:4b:20:f6:76:5e:a1:e8:7b:c6:03:1f:
         a5:da:25:17:d6:b8:69:49:18:0f:48:8f:79:08:a8:eb:54:e7:
         65:31:40:8b:27:20:0f:8c:62:e1:e8:2b:d1:90:fc:60:6b:da:
         00:33:5e:15:4e:7f:51:a6:39:4d:85:7a:3a:6d:70:32:9a:b6:
         fa:5b:83:4c:2e:67:28:29:8e:00:f1:08:3c:8e:cd:a9:57:02:
         77:6b:0a:48:db:29:9f:79:f1:6a:15:23:a2:85:a3:5f:59:e7:
         0b:23:e9:11:a0:ca:ae:c6:52:dc:fc:37:0c:a3:cf:71:1c:65:
         8e:85:68:21:50:56:6d:de:a2:37:c0:b5:a8:64:04:1c:94:ae:
         af:55:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----