Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
File:                     9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json)
Hash identifier:          JazTkzLAmiVLjvHgWAykRwmTtM2wBiymBLO5YluYrc8=
Subject key identifier:   98:7E:D5:20:58:2D:C1:9C:2F:28:FB:57:94:ED:F4:67:BB:6D:B2:62
Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
Certificate issuer:       /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Certificate serial:       19C8DD8CA88E4E106BAEE9E19535A31F4395A898
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
Manifest number:          01C9
Signing time:             Thu 27 Mar 2025 19:10:00 +0000
Manifest this update:     Thu 27 Mar 2025 19:05:00 +0000
Manifest next update:     Mon 31 Mar 2025 05:44:00 +0000
Files and hashes:         1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: QJ+DN67uBzhieZXNED3epZUpgVXDgMO5f9AoYMTnfBI=)
                          2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c8:dd:8c:a8:8e:4e:10:6b:ae:e9:e1:95:35:a3:1f:43:95:a8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
        Validity
            Not Before: Mar 27 19:05:00 2025 GMT
            Not After : Mar 31 05:44:00 2025 GMT
        Subject: CN=987ED520582DC19C2F28FB5794EDF467BB6DB262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:62:51:ed:58:4f:89:f1:be:b8:ba:7f:67:
                    0e:99:e3:e1:50:2f:44:06:c7:d9:6a:18:08:e3:bd:
                    ac:cb:06:39:7a:4a:2b:7b:5e:9a:e9:5e:31:ae:02:
                    33:b2:2c:be:75:96:1f:9c:5c:97:6d:1b:a4:2a:8c:
                    4b:92:5d:18:9f:e2:eb:09:8d:34:70:03:2f:64:a0:
                    90:d9:b2:a2:a3:3d:9d:a4:a9:ec:5d:1f:45:34:54:
                    e8:13:74:57:0a:6e:c2:1e:d0:13:eb:f7:af:97:25:
                    bd:36:3c:07:92:d0:fc:f4:e2:a6:96:65:fe:9a:59:
                    8c:92:47:b1:33:16:f4:ea:76:9b:92:1c:54:0d:db:
                    a7:0c:76:cc:48:d7:4f:37:5f:fe:ca:99:35:33:a1:
                    1d:f0:53:f8:3e:f7:21:ad:6e:70:20:89:17:19:31:
                    1b:93:9e:ea:bd:92:06:1b:72:03:06:0d:b2:56:59:
                    97:14:75:31:0a:6d:91:d3:c0:8d:e4:38:ac:d9:f8:
                    6a:8a:07:8f:1e:f5:a7:e3:86:06:13:b3:51:e4:fe:
                    02:14:12:60:48:50:25:53:4a:46:ae:90:e8:15:f6:
                    9e:06:6b:57:ef:66:43:ab:72:ef:2c:eb:48:0b:fe:
                    23:7d:4f:88:7f:f6:bf:73:2f:56:36:dc:fe:35:f8:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:D5:20:58:2D:C1:9C:2F:28:FB:57:94:ED:F4:67:BB:6D:B2:62
            X509v3 Authority Key Identifier:
                keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:f6:85:69:db:58:ea:b3:a4:64:38:f9:7d:02:3a:bc:31:
         f6:64:c1:67:73:87:78:9e:d4:98:de:ae:b6:5f:e8:1c:2e:a9:
         fa:0e:1a:59:be:cb:79:d1:06:8c:f8:2c:5e:9f:78:62:9b:93:
         08:51:26:0f:99:d1:99:70:d9:f2:6f:b0:64:98:1e:81:27:19:
         9c:58:da:66:9a:a4:4d:7d:a0:f0:e6:c4:a0:c4:f1:92:33:80:
         37:90:54:e3:3b:62:a3:ff:2d:ec:ff:94:17:03:34:06:9b:e5:
         44:e7:6c:eb:91:03:19:05:7d:91:45:54:1a:f4:61:32:c1:b2:
         06:44:4c:02:f6:b5:02:8d:14:d0:c9:8e:80:bc:96:84:22:38:
         1e:de:17:02:1a:5f:27:bd:85:87:98:e4:46:66:8c:c8:5b:d8:
         5f:fb:83:4b:68:3c:e7:ef:f4:41:ed:09:6b:8a:c1:33:67:6e:
         ba:bc:94:b8:7c:2f:d6:f9:bf:24:b4:6b:21:c2:f9:f0:d8:02:
         49:3e:d9:65:a5:14:a3:c5:41:52:51:d1:3d:43:b3:75:61:9d:
         eb:e9:a8:c3:62:bf:cf:37:ea:35:6f:09:10:5f:9f:06:93:33:
         ca:bb:53:d6:cd:be:09:3f:6a:22:df:fb:40:42:e3:f2:2f:71:
         0a:fb:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:21 2025 by rpki-client