Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
File:                     98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json)
Hash identifier:          qMGiYZ3r3V9TLiXr2XCOTS1swVv0EmYpw5OA42FaeNE=
Subject key identifier:   27:03:1F:99:69:87:87:C4:01:7E:AC:61:60:14:96:1B:91:93:97:79
Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04
Certificate issuer:       /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
Certificate serial:       7014B3A3BAEEA24CEC2B21149C0E09179B38EC38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
Manifest number:          41
Signing time:             Thu 30 Jan 2025 08:50:37 +0000
Manifest this update:     Thu 30 Jan 2025 08:45:37 +0000
Manifest next update:     Sun 02 Feb 2025 17:28:37 +0000
Files and hashes:         1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=)
                          2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: EYxw9NsRvay98DuY5yH8WU5MTbjILlhDv4X+Srv05hE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:14:b3:a3:ba:ee:a2:4c:ec:2b:21:14:9c:0e:09:17:9b:38:ec:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
        Validity
            Not Before: Jan 30 08:45:37 2025 GMT
            Not After : Feb  2 17:28:37 2025 GMT
        Subject: CN=27031F99698787C4017EAC616014961B91939779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:01:8a:3b:d1:18:ea:bf:da:bb:52:2e:53:
                    08:68:15:4c:30:20:da:b2:1d:86:c3:76:b3:a8:7a:
                    b2:ab:d6:6c:ae:23:ce:d9:8d:10:66:5d:04:98:63:
                    ff:e1:03:19:0a:47:bb:c0:6e:6f:42:bb:01:8b:a7:
                    79:97:28:96:35:e8:84:e7:e8:00:4a:ed:df:cd:1e:
                    aa:7d:f4:37:8b:66:ca:ef:47:55:10:9b:6c:73:e2:
                    8e:d7:74:38:72:9f:4b:1e:5c:a5:51:ba:df:ca:c9:
                    61:5d:a9:a2:16:5c:95:b4:93:92:ad:a0:be:37:c0:
                    85:f2:06:44:c2:65:49:5b:11:d3:55:b4:1c:08:ca:
                    52:cb:ae:87:cb:a0:d9:94:e0:3e:04:71:56:9a:f5:
                    12:38:07:d6:c0:85:f4:30:5b:94:e1:6d:ca:d3:cb:
                    f2:7d:2e:cd:24:cb:fd:12:14:42:8d:4e:84:05:1f:
                    7d:96:02:45:3b:3d:33:6c:49:b4:86:dc:3f:b1:6f:
                    22:91:d3:d1:c3:b4:3c:4c:62:ee:30:ad:5e:22:8b:
                    52:b7:51:17:b6:80:87:1a:ef:c8:05:9d:8e:db:c3:
                    c8:0a:76:f2:d0:44:10:c9:37:6c:3d:11:5d:5a:99:
                    2c:95:c0:6f:15:a3:18:9a:5c:78:24:a5:fe:56:b0:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:1F:99:69:87:87:C4:01:7E:AC:61:60:14:96:1B:91:93:97:79
            X509v3 Authority Key Identifier:
                keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:82:c1:fb:4f:31:8e:48:f4:8a:68:01:fa:1b:99:9a:82:
         6f:56:de:8a:2b:f7:e8:3a:f3:85:a3:f2:f8:e2:4b:f0:5f:f0:
         3d:27:64:9b:e5:08:b2:1d:35:2a:89:7f:ab:84:77:58:52:3b:
         65:42:9b:f5:59:2d:39:84:a6:86:16:64:d0:4c:66:bc:61:1e:
         ba:e3:5a:21:9e:e5:35:ee:0c:14:1f:22:f0:0f:c8:31:1c:35:
         22:2f:6b:6e:fc:50:62:ec:df:a9:fa:89:0e:26:96:67:3a:51:
         a2:23:2e:69:07:94:1e:14:d6:91:8b:cd:fd:23:5c:53:fd:83:
         09:1e:c7:f0:0e:bc:8b:ea:f5:1c:58:c1:22:31:48:21:96:ff:
         e9:70:f5:84:17:77:11:d7:81:87:c0:14:50:85:60:9d:26:d6:
         92:3f:d4:af:e5:09:6d:75:0c:dd:e6:b4:21:d1:ed:38:00:33:
         38:40:35:78:a4:d2:e9:44:d8:00:d3:da:3a:78:89:72:59:6e:
         7a:f5:5f:93:5a:76:e3:0d:19:21:ac:d3:7f:64:44:bc:99:c1:
         d3:98:00:23:76:86:d3:69:ac:ee:45:49:7f:07:b3:b8:d7:9f:
         30:14:e0:4c:65:f3:33:99:7b:b3:a6:60:6e:23:6d:e0:ce:16:
         36:3e:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:22 2025 by rpki-client