Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
File:                     B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json)
Hash identifier:          sE+gD5iPj6dqU1WCp4EB6ZcMODi8dF7tJ20Axg1r+68=
Subject key identifier:   D6:29:27:2C:65:A0:3A:ED:6D:69:08:6E:CE:97:91:63:9E:F6:54:0C
Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
Certificate issuer:       /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Certificate serial:       8F55D452CE04672D518E0E6D77DFDE94991536
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
Manifest number:          04A3
Signing time:             Thu 30 Jan 2025 02:51:19 +0000
Manifest this update:     Thu 30 Jan 2025 02:46:19 +0000
Manifest next update:     Sun 02 Feb 2025 12:28:19 +0000
Files and hashes:         1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: l1fPLAUFtTJNdU6bqE1PdelWpd2VBBi10WlrLYglW7I=)
                          2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: vTa9WiHuuMrTXw2GBDLjpniG/hjwO61GwgYQcgCJt2M=)
                          3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: dGeZRFX0mBMu9fTnHTnj49iVEfzE2hN4jupKhMgr/cM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8f:55:d4:52:ce:04:67:2d:51:8e:0e:6d:77:df:de:94:99:15:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
        Validity
            Not Before: Jan 30 02:46:19 2025 GMT
            Not After : Feb  2 12:28:19 2025 GMT
        Subject: CN=D629272C65A03AED6D69086ECE9791639EF6540C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:e6:e6:67:da:54:9d:83:1f:36:ea:2a:36:
                    07:6d:f6:c0:9e:a9:45:6e:9f:92:f3:cf:fd:68:b1:
                    52:07:df:83:1d:ce:9d:5c:0b:c0:1c:0e:3c:0b:30:
                    84:56:00:ee:e7:e9:c6:61:5a:35:ac:a6:7c:aa:38:
                    56:70:87:5b:92:8e:de:cd:c0:3b:c1:cf:80:c8:94:
                    31:90:39:64:e2:03:81:bf:43:4e:d1:db:59:0d:7b:
                    d3:c1:ce:b1:b6:c7:b1:c2:cf:bf:d7:fa:91:18:5b:
                    d7:02:1c:25:f7:dd:99:53:e0:da:49:61:84:ff:8e:
                    60:3c:10:c0:50:72:e4:97:71:ce:a8:03:39:fd:ad:
                    e3:16:a7:52:fa:a4:f4:1b:a6:89:64:17:e9:98:83:
                    19:ff:65:12:fd:58:50:17:f1:45:c9:73:c5:c2:3c:
                    2d:7d:3f:42:5d:90:79:c5:4c:6a:31:39:cc:1b:ce:
                    ce:8c:d0:e5:97:83:87:f0:c2:59:22:e6:3d:ee:37:
                    c6:10:4a:10:74:1e:84:9a:f1:5b:f5:44:0c:cc:17:
                    bc:70:61:3e:29:81:f8:1d:ef:03:c9:de:73:9d:2f:
                    a9:49:6e:6b:28:a4:7a:e3:fd:e8:0a:e0:76:bf:d4:
                    58:37:50:52:cc:23:9c:4c:d9:aa:a4:a0:83:00:f1:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:27:2C:65:A0:3A:ED:6D:69:08:6E:CE:97:91:63:9E:F6:54:0C
            X509v3 Authority Key Identifier:
                keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:45:3b:56:4f:6e:1d:5e:8a:59:3e:0d:bf:28:0c:0c:d1:62:
         d0:ed:b1:4b:9a:dc:e9:d0:fd:c0:aa:46:4d:aa:db:8b:6f:14:
         41:32:7a:60:f8:e0:32:77:a6:58:91:fc:7a:35:9f:ac:c6:52:
         5c:01:8d:4d:39:ff:a5:27:5d:be:ca:cf:d1:2f:1e:97:11:27:
         69:b4:da:ab:dd:83:1a:79:59:04:68:53:18:90:35:69:1b:37:
         70:dd:11:38:cb:34:02:4c:b5:f6:7e:cf:17:1e:2b:01:23:4a:
         26:2a:2a:4f:39:38:f1:e7:e9:93:d5:e5:1c:b6:22:30:18:b0:
         af:95:cd:10:3c:56:a1:c1:a7:14:93:de:99:de:66:e9:60:28:
         b9:62:c8:3c:7d:20:4c:eb:60:81:f7:89:28:9c:99:84:8a:13:
         c6:ba:e4:40:51:5b:7a:e9:d5:4b:db:db:53:f1:ee:41:2a:bc:
         10:48:ff:fe:4e:79:b5:99:5d:20:7b:b7:77:bc:33:68:04:30:
         46:44:fd:be:76:db:37:d3:d6:d2:b3:b0:05:97:e4:ca:d6:c6:
         9e:35:da:ef:00:e8:5d:cb:6f:59:4e:0d:bd:92:12:79:1a:42:
         30:80:82:ae:a2:2d:56:43:aa:32:33:61:f9:e0:92:d1:90:0f:
         79:85:90:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAI9V1FLOBGctUY4ObXff3pSZFTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG
NERFQzhBNTAeFw0yNTAxMzAwMjQ2MTlaFw0yNTAyMDIxMjI4MTlaMDMxMTAvBgNV
BAMTKEQ2MjkyNzJDNjVBMDNBRUQ2RDY5MDg2RUNFOTc5MTYzOUVGNjU0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKObmZ9pUnYMfNuoqNgdt9sCe
qUVun5Lzz/1osVIH34Mdzp1cC8AcDjwLMIRWAO7n6cZhWjWspnyqOFZwh1uSjt7N
wDvBz4DIlDGQOWTiA4G/Q07R21kNe9PBzrG2x7HCz7/X+pEYW9cCHCX33ZlT4NpJ
YYT/jmA8EMBQcuSXcc6oAzn9reMWp1L6pPQbpolkF+mYgxn/ZRL9WFAX8UXJc8XC
PC19P0JdkHnFTGoxOcwbzs6M0OWXg4fwwlki5j3uN8YQShB0HoSa8Vv1RAzMF7xw
YT4pgfgd7wPJ3nOdL6lJbmsopHrj/egK4Ha/1Fg3UFLMI5xM2aqkoIMA8ag9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1iknLGWgOu1taQhuzpeRY572VAwwHwYDVR0j
BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD
MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF
QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1
YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy
REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGFFO1ZPbh1eilk+Db8oDAzRYtDtsUua3OnQ
/cCqRk2q24tvFEEyemD44DJ3pliR/Ho1n6zGUlwBjU05/6UnXb7Kz9EvHpcRJ2m0
2qvdgxp5WQRoUxiQNWkbN3DdETjLNAJMtfZ+zxceKwEjSiYqKk85OPHn6ZPV5Ry2
IjAYsK+VzRA8VqHBpxST3pneZulgKLliyDx9IEzrYIH3iSicmYSKE8a65EBRW3rp
1Uvb21Px7kEqvBBI//5OebWZXSB7t3e8M2gEMEZE/b522zfT1tKzsAWX5MrWxp41
2u8A6F3Lb1lODb2SEnkaQjCAgq6iLVZDqjIzYfngktGQD3mFkPo=
-----END CERTIFICATE-----