Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft
File:                     A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json)
Hash identifier:          j7/SSKHEZDa7eO14g02+YYk5XKVfy0Q/77E8vjI5Kug=
Subject key identifier:   7E:59:F9:E3:5D:B4:8F:23:88:D1:77:86:B2:D2:57:30:19:A3:D4:A7
Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06
Certificate issuer:       /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506
Certificate serial:       5CDB0F65C912E22AC94EF1AE084420604252C399
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft
Manifest number:          02CB
Signing time:             Fri 28 Mar 2025 08:51:35 +0000
Manifest this update:     Fri 28 Mar 2025 08:46:35 +0000
Manifest next update:     Mon 31 Mar 2025 14:04:35 +0000
Files and hashes:         1: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /BdahLT6vSLpuEBY3+9TOtbzLb267nsMd1TmGCjkxzI=)
                          2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 4ihnO/ItS6DI43pMIPJ3CDJy7EYbU66stbU53irPXEo=)
                          3: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: i+gbmLv/cDTRzVSCU7nzrBuTZdrg904knWZTmS6Nm1M=)
                          4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: rW2LU9K/rfb3qygTA6381vvcBFybx4fuXGfuXbWXxfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:0f:65:c9:12:e2:2a:c9:4e:f1:ae:08:44:20:60:42:52:c3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506
        Validity
            Not Before: Mar 28 08:46:35 2025 GMT
            Not After : Mar 31 14:04:35 2025 GMT
        Subject: CN=7E59F9E35DB48F2388D17786B2D2573019A3D4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:64:5a:0c:8e:19:5f:5b:dd:11:a5:98:58:
                    53:b4:df:86:84:4b:5b:e8:cf:fd:f9:31:f6:41:1e:
                    0b:76:3e:6e:91:63:83:2c:63:c3:9d:0d:98:0c:b1:
                    52:db:72:e4:ae:72:9a:86:db:81:59:89:58:a6:00:
                    7f:8e:86:c0:59:93:43:00:3f:00:7a:f9:d1:ef:a5:
                    ac:b2:e6:7c:cd:36:d0:7e:29:ad:e7:18:e2:e3:e1:
                    ba:8a:87:e0:f2:21:1b:cf:a3:2a:ec:a8:1c:a2:b8:
                    40:a5:62:91:34:8e:3e:2f:9e:f4:22:5d:58:86:24:
                    7e:f6:a7:2e:19:45:6b:a6:f0:c0:3b:8e:30:29:07:
                    c0:96:7b:02:49:7c:67:1e:bd:ad:a2:c9:3c:69:d8:
                    b9:f9:81:a3:14:3a:8a:98:55:67:b2:3a:58:fd:6d:
                    ac:62:ce:8b:1f:bc:e6:73:d8:5e:50:39:b0:b0:55:
                    63:1c:6f:7e:0e:90:97:05:e8:26:e3:34:95:50:23:
                    01:d6:75:84:86:43:17:6d:41:ec:85:65:de:7a:22:
                    8e:b8:c8:66:3e:69:cb:e3:1f:3f:e3:91:48:a2:de:
                    cc:a1:8e:0a:44:93:e4:e4:e6:fb:29:55:fe:1c:49:
                    4f:ef:d7:30:81:3c:59:80:42:9f:e3:53:2a:13:29:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:F9:E3:5D:B4:8F:23:88:D1:77:86:B2:D2:57:30:19:A3:D4:A7
            X509v3 Authority Key Identifier:
                keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:f8:e9:37:ac:1f:00:f8:60:28:e2:f0:42:7f:a0:ff:1c:
         a8:67:4d:0a:e1:4c:d4:55:01:3a:8a:a4:23:53:3b:5a:f8:7d:
         2e:22:35:da:61:50:1e:f2:1c:99:e9:0e:79:06:a9:20:8a:9a:
         15:f2:29:c5:03:78:4a:c2:d9:c3:12:b0:78:b8:06:30:fe:56:
         7a:1f:7b:c5:fb:dc:51:cc:13:00:ef:33:da:51:61:87:a9:76:
         2e:6e:18:c5:ba:1a:e2:c7:1e:cc:e7:05:53:31:97:0e:43:53:
         52:59:65:8c:35:cc:60:7b:20:2a:a3:7e:1b:70:9c:85:67:b4:
         c2:52:d3:54:3b:59:2d:fd:bd:d6:d4:10:0b:71:50:86:5b:e9:
         64:9e:b5:77:85:40:4b:d4:87:2c:e5:62:ff:4f:c7:c3:1d:ab:
         3a:a7:20:da:0e:0d:04:a1:75:94:1c:97:d7:b9:04:fe:b7:77:
         1a:72:7f:d6:9c:c5:ff:eb:9a:29:42:55:27:fe:68:b9:27:ff:
         f9:a7:34:87:5c:77:99:32:81:76:a2:c3:32:32:cb:49:46:e9:
         b2:5d:ea:58:3a:9a:1c:0e:49:35:08:69:b7:1d:71:c0:49:fc:
         3a:eb:a2:e0:6e:8f:1f:6d:e7:ab:54:8f:2d:80:c3:35:d4:6f:
         d6:03:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:11 2025 by rpki-client