Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft
File:                     DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json)
Hash identifier:          wFu6VZ07O6Qadn62hI0cPl+cx1qwOZxLrphYyVFU1ys=
Subject key identifier:   78:B7:14:F5:5E:F5:07:11:86:F8:5A:47:60:0A:2F:9C:19:BA:8F:70
Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8
Certificate issuer:       /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8
Certificate serial:       27E4254FAA072DAE8634C178477CECBCFDE669E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft
Manifest number:          0109
Signing time:             Fri 31 Jan 2025 12:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 11:55:34 +0000
Manifest next update:     Mon 03 Feb 2025 16:22:34 +0000
Files and hashes:         1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: kIIeMyYHLpwRsUVcjh/TOWu2x/y3f9Oc8PMmrWTrStE=)
                          2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: qaYBvqGo3brp0/vCza+K3O8ygxwfA/5FA2154vTKDu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:25:4f:aa:07:2d:ae:86:34:c1:78:47:7c:ec:bc:fd:e6:69:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8
        Validity
            Not Before: Jan 31 11:55:34 2025 GMT
            Not After : Feb  3 16:22:34 2025 GMT
        Subject: CN=78B714F55EF5071186F85A47600A2F9C19BA8F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:5e:37:72:27:4c:43:fb:0a:2d:f5:54:fd:
                    63:2c:4c:bf:8e:87:56:f7:79:4e:07:89:71:94:ae:
                    71:2c:16:54:99:54:bf:a1:32:6a:7e:dd:1d:8c:0b:
                    3e:45:cc:28:16:28:37:fb:0e:31:5e:d3:cd:23:3d:
                    54:09:7e:3e:3d:49:de:e6:d4:e3:35:8f:3b:d2:39:
                    09:fb:52:4f:61:16:c1:cc:87:7c:95:de:70:8f:d2:
                    09:cc:24:bd:67:5f:0c:e9:18:cb:36:95:df:8c:46:
                    69:c0:e0:99:a1:01:3a:6b:19:5e:f7:84:66:51:a9:
                    d0:94:6f:c2:81:06:a5:09:a3:36:4c:74:c2:5d:86:
                    af:f5:6e:9d:63:32:93:2b:c1:17:a9:58:cf:1d:5a:
                    1c:5b:10:71:b0:fb:e8:da:4b:5a:7b:2b:37:c3:22:
                    c2:54:34:77:86:27:68:d9:ba:0e:94:3a:bb:be:a8:
                    43:be:7e:d9:01:2d:8f:eb:c9:bc:61:05:ea:fb:fa:
                    7a:df:ad:aa:21:ed:66:d9:07:a2:28:35:02:16:bd:
                    72:ae:95:ea:17:05:6c:4b:f9:1b:3c:01:d1:94:72:
                    89:07:91:3b:be:53:eb:ec:06:1a:67:91:f5:22:c9:
                    39:f6:13:87:08:f6:07:8b:da:b5:d9:67:8f:e9:a8:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B7:14:F5:5E:F5:07:11:86:F8:5A:47:60:0A:2F:9C:19:BA:8F:70
            X509v3 Authority Key Identifier:
                keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:66:0e:07:55:5c:01:3f:e7:0c:ca:05:9c:2b:ce:e5:ea:47:
         63:8f:bc:23:b4:79:2b:41:d2:5b:9c:da:de:c1:6b:3a:55:b0:
         33:9d:27:a1:ec:96:27:ed:9d:74:f4:21:af:47:a4:6b:d7:0c:
         b0:ff:ea:9d:58:36:c2:35:17:f6:d6:76:07:d3:5d:fd:46:6f:
         92:f9:16:43:97:bc:f7:16:6e:f0:1b:43:9f:8a:71:97:1f:7a:
         c0:12:2f:35:ae:fb:c4:52:5d:2e:fc:42:06:33:c0:31:7a:51:
         b2:3b:49:55:87:d0:b2:46:ec:ca:88:87:17:30:a8:13:9a:b0:
         15:e1:99:26:f8:7d:d3:e3:b7:f0:fa:18:8e:73:c1:c8:e3:ed:
         d5:37:b9:d6:0c:2d:7d:25:25:2c:e9:c0:98:18:72:8c:1d:2f:
         60:eb:2b:d2:26:18:bd:9c:03:92:0d:79:50:bb:1f:d7:43:5d:
         7d:f0:8a:ae:27:eb:21:ca:c1:1c:73:3d:b9:66:e2:82:05:7a:
         86:53:43:64:51:d6:52:bf:5e:ab:36:c8:42:25:c3:e0:7d:b9:
         d3:da:6a:64:d1:1a:9d:1d:2c:18:12:07:ba:e3:17:f8:42:39:
         9f:40:9f:60:ff:30:0e:5e:8f:08:b3:e0:9d:65:37:16:ba:c4:
         31:49:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:46 2025 by rpki-client