Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
File:                     DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json)
Hash identifier:          gOR/p0KFU0t7ThF/uxNbeZGRWSn7LliFQ97HqwRQxDM=
Subject key identifier:   A4:7F:9B:61:7E:48:2E:52:19:B1:A2:6D:4E:EA:DA:D1:3B:C3:7E:B2
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       7CB1E25A056338F9DEE5F3E1C382BB33451E0A08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
Manifest number:          0164
Signing time:             Fri 31 Jan 2025 00:30:03 +0000
Manifest this update:     Fri 31 Jan 2025 00:25:03 +0000
Manifest next update:     Mon 03 Feb 2025 11:29:03 +0000
Files and hashes:         1: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: lHqrjHVw9+riNL+52DjbSkgvD/qZyqc7XzEPB103mC0=)
                          2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: EF0O006tJPVd4ZJb0z6XWEmaVViQ9MyLrIgU7Gzv1Y8=)
                          3: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: /Qubahg6iyutXhJp/TWUbUW351esUCIVNAyTMSK5KWU=)
                          4: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: ritwVoi5kE0VCecbdEee+Ne5j1M00sq9YrDf59HgimY=)
                          5: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: Db6zo1ofTfiJPAOMct9PNV4YKTaOhVnzd06REe1HY1M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b1:e2:5a:05:63:38:f9:de:e5:f3:e1:c3:82:bb:33:45:1e:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Jan 31 00:25:03 2025 GMT
            Not After : Feb  3 11:29:03 2025 GMT
        Subject: CN=A47F9B617E482E5219B1A26D4EEADAD13BC37EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:d7:0a:e4:b5:f5:cb:85:aa:e1:db:2b:f0:
                    23:95:26:88:30:38:c6:dd:15:57:c0:e8:9c:56:8a:
                    79:c9:9f:8b:1a:ef:3b:2e:2c:44:82:2c:fc:0d:1e:
                    be:03:3f:12:11:ce:c6:63:95:ce:79:db:f8:4e:7c:
                    ae:ff:f0:24:df:36:b9:34:29:a4:1f:40:05:f5:35:
                    db:56:dd:92:1a:a9:db:e4:da:3e:4a:bc:0c:57:8f:
                    96:e2:7c:e4:0b:be:71:e8:26:ea:10:13:a6:82:7f:
                    63:60:f9:5c:78:43:e3:03:cb:4f:19:ab:cb:66:ea:
                    ff:43:4b:7d:dc:c9:f2:de:54:23:4a:27:60:ad:e8:
                    bc:14:c1:fe:01:0c:5a:2f:00:09:da:0e:ba:c0:88:
                    63:b1:32:ba:11:de:7d:4f:8d:37:53:1e:b2:8d:0d:
                    e1:29:20:a7:50:19:09:34:d2:fc:e8:88:44:3e:b3:
                    93:ac:59:a8:c3:e3:3e:25:c2:23:e0:a3:45:62:32:
                    18:62:d3:36:19:00:9b:5b:df:be:71:de:a2:52:b5:
                    68:71:5d:1e:5d:4c:83:38:9d:d5:c6:39:9d:a8:72:
                    9b:c9:1c:aa:55:db:c7:24:06:0a:92:3c:f8:60:73:
                    6a:07:85:b1:f5:67:77:a0:b4:53:32:a2:9f:29:ce:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:9B:61:7E:48:2E:52:19:B1:A2:6D:4E:EA:DA:D1:3B:C3:7E:B2
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:84:79:c8:5b:56:40:95:a1:e1:5c:6d:a9:6d:61:38:18:
         e2:80:bb:cd:97:f8:99:37:16:36:78:bd:94:e2:3a:10:94:db:
         f4:44:44:26:43:cc:1e:ee:7c:42:27:c0:3f:37:2a:a2:db:fc:
         5e:e6:68:6c:72:62:ec:ca:15:f4:ca:df:00:a4:37:52:a7:8a:
         89:2d:0e:b7:87:06:d0:af:17:2a:29:99:fb:11:d5:bf:2d:2b:
         97:12:78:c7:a8:92:34:22:5e:6e:44:61:04:eb:aa:b0:4c:b7:
         7e:46:1b:7c:5b:34:b9:78:69:2f:ae:f6:fc:b3:09:58:47:69:
         49:0c:7b:45:8e:8e:39:2f:f3:d5:1d:43:c2:c5:6a:3c:f3:9a:
         a0:c7:a7:ce:6b:68:93:a9:88:5b:85:6e:2e:12:ce:91:c5:01:
         85:61:11:dd:a9:22:5d:40:77:2e:a0:2a:b4:fc:12:a1:b3:f4:
         b6:72:7d:1a:8b:03:4f:ba:5e:7e:6a:af:be:cc:cb:d5:38:77:
         d8:df:a7:12:84:50:4b:75:41:51:be:4c:37:24:d0:f8:43:df:
         df:eb:db:b2:b2:3c:c2:fb:23:dd:ea:97:92:c8:69:68:df:68:
         83:9b:b1:e8:02:51:9c:f8:20:45:eb:48:23:58:ff:e3:28:b5:
         1c:12:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----