Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft
File:                     9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json)
Hash identifier:          RSFBxOC03UNLzZNPtfSZYJ8BmdZdEdRf+NT6BucuxeI=
Subject key identifier:   D9:C4:63:AF:54:49:7E:3B:98:8D:DA:63:83:D7:CB:87:47:77:5F:3C
Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE
Certificate issuer:       /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE
Certificate serial:       6B7B35D54DA6E60843FB3C768B20FB09DE792A68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft
Manifest number:          01AB
Signing time:             Fri 28 Mar 2025 11:31:33 +0000
Manifest this update:     Fri 28 Mar 2025 11:26:33 +0000
Manifest next update:     Mon 31 Mar 2025 23:15:33 +0000
Files and hashes:         1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: gR5KhLz7upQd0QoChz9/8ODFN+KiihUdyenAIXXLF3k=)
                          2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: uk3D/rCjhhElv4EaWGmIYhdMgwZYLaPqwk9faLvVMj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:35:d5:4d:a6:e6:08:43:fb:3c:76:8b:20:fb:09:de:79:2a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE
        Validity
            Not Before: Mar 28 11:26:33 2025 GMT
            Not After : Mar 31 23:15:33 2025 GMT
        Subject: CN=D9C463AF54497E3B988DDA6383D7CB8747775F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:7d:13:c5:f1:d3:24:e3:1a:b0:d5:10:c7:
                    3a:c6:53:12:79:3e:e0:db:37:e6:5e:6a:13:85:d4:
                    dc:d6:59:a8:46:62:38:3d:f8:d6:c1:73:77:21:0a:
                    b8:a6:df:f2:8b:d5:b9:1d:73:27:ef:b7:05:db:60:
                    2f:f1:71:b4:aa:ee:ec:96:87:f6:18:f4:a4:c9:dd:
                    fd:8f:e5:3e:0e:f9:ed:0e:67:40:62:36:02:0a:84:
                    70:11:0a:25:c6:17:90:ad:fe:f9:66:a9:a0:10:6c:
                    b8:f3:fd:fa:4e:2a:e7:8c:9d:ad:94:6d:bf:be:64:
                    8a:25:ae:cb:28:82:0d:b0:1d:54:6f:44:1b:07:66:
                    c0:63:b4:b9:6a:16:50:4e:15:f5:14:f3:58:1c:20:
                    f3:94:db:9d:65:42:b4:13:2d:80:0e:4a:b7:3e:79:
                    d6:55:65:5f:3a:16:07:20:17:9e:84:d1:e8:bb:ae:
                    47:53:72:2e:1f:77:d7:a2:38:3a:7b:fc:40:e8:63:
                    41:61:c0:d1:0b:0c:0d:6c:00:aa:f0:9e:29:90:8e:
                    e8:9d:41:bc:8c:f9:85:f2:e1:94:c3:16:7c:a3:99:
                    a9:a4:9e:1c:73:51:a2:3a:f7:84:74:e5:bd:8d:5a:
                    51:8f:d2:d2:04:cb:0f:4d:e9:6e:f0:b5:e5:c1:84:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:63:AF:54:49:7E:3B:98:8D:DA:63:83:D7:CB:87:47:77:5F:3C
            X509v3 Authority Key Identifier:
                keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:48:3f:ad:b5:18:3e:c7:f1:f0:a8:3c:c1:61:62:11:7c:
         15:9a:c7:07:96:49:82:12:31:4d:29:d7:68:bb:ae:56:c0:05:
         71:a0:e4:93:57:ab:e7:eb:01:da:93:31:8e:82:06:60:ff:45:
         83:bd:29:14:66:29:42:84:26:0e:7f:95:2e:3d:03:b7:d7:51:
         b3:18:92:e7:13:b2:b2:4f:51:fd:27:fc:58:97:ed:92:c9:d2:
         d5:33:bc:98:28:5b:7c:4f:d8:ab:e2:c2:ad:75:56:be:a1:a5:
         ef:95:51:be:6b:91:00:bc:a0:84:db:52:47:a9:b3:b6:29:03:
         90:df:0a:76:01:e2:4d:91:45:8f:b6:1c:85:74:36:59:b5:9b:
         f1:7f:6f:ba:8c:9c:aa:12:07:2f:5a:f6:21:ac:e7:05:b8:51:
         cb:20:35:a9:c4:ec:87:21:16:d2:56:14:d5:a0:64:fd:d7:be:
         14:96:35:49:8c:32:27:fe:f7:75:0f:83:68:1e:96:63:32:b6:
         8f:06:3a:92:2f:3e:66:06:f9:68:79:d8:9f:aa:6a:d5:91:70:
         1d:42:74:a8:28:d1:0e:14:31:a6:f0:2a:4e:4d:6a:9c:81:c8:
         9c:7e:f7:8d:5e:43:9f:57:9e:fa:54:bc:77:de:c2:86:9f:60:
         3e:12:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----