Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
File:                     2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json)
Hash identifier:          3E65nsw/pWHw4fFVZHwu3BsV+xM5Apz13SmSjs5POEI=
Subject key identifier:   15:1F:3E:04:11:62:60:E7:4B:E9:26:7C:D2:AE:E7:0D:2F:6A:5C:B2
Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F
Certificate issuer:       /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
Certificate serial:       3BE1168FD9F1498FD7313BF145A6FA5B4F1FDE1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
Manifest number:          90
Signing time:             Thu 30 Jan 2025 09:40:49 +0000
Manifest this update:     Thu 30 Jan 2025 09:35:49 +0000
Manifest next update:     Sun 02 Feb 2025 15:08:49 +0000
Files and hashes:         1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: FdkJ+fWGP5HvGl21FYj0D/VpK3x5vDFR6Q2sKenYSNo=)
                          2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: yk8Rr8VaeRXOtlZu93aAP8+HhUVuO5D/2Rz8Q6wQmZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e1:16:8f:d9:f1:49:8f:d7:31:3b:f1:45:a6:fa:5b:4f:1f:de:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
        Validity
            Not Before: Jan 30 09:35:49 2025 GMT
            Not After : Feb  2 15:08:49 2025 GMT
        Subject: CN=151F3E04116260E74BE9267CD2AEE70D2F6A5CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:9e:0e:cc:c4:e1:38:2a:2a:69:04:78:08:
                    54:b5:4b:b1:e7:e4:6b:29:70:47:ee:4f:e9:1f:e3:
                    93:d3:9b:65:80:6d:31:f1:81:1b:d1:53:35:90:54:
                    41:74:09:1c:68:4e:ba:42:32:b8:6f:f5:8e:f1:43:
                    6e:36:f2:44:71:6a:69:79:ba:66:dd:65:09:c0:19:
                    25:29:47:e1:3c:3b:3d:0f:7b:19:2b:3c:59:a2:5d:
                    63:38:bf:6e:1e:00:69:34:a4:ba:ca:a3:da:d6:29:
                    f5:08:01:8b:93:01:ec:41:04:b4:f9:a3:77:25:88:
                    5e:67:a0:a0:67:32:68:77:e9:2c:8f:ff:06:e1:a5:
                    87:a0:11:b0:0f:9a:6b:08:d4:4a:4b:76:a0:11:5e:
                    d8:58:15:83:80:25:31:82:78:4a:2f:79:ea:b2:3b:
                    92:d3:2f:fe:2c:49:59:1e:dc:fb:76:0a:0b:e4:f8:
                    c2:c6:d3:be:34:84:12:12:39:e5:9c:04:dd:0c:5c:
                    11:74:4e:00:60:ad:33:90:43:5b:90:b9:eb:dc:16:
                    7f:b0:80:b2:6e:9f:1f:71:e4:de:22:85:39:3b:24:
                    b1:28:ff:72:d1:39:46:43:88:7d:e8:6c:0a:a6:b1:
                    e4:48:9e:d6:e8:e2:09:77:c1:99:1d:f6:ef:d3:cf:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:3E:04:11:62:60:E7:4B:E9:26:7C:D2:AE:E7:0D:2F:6A:5C:B2
            X509v3 Authority Key Identifier:
                keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:26:a5:e5:0b:1c:79:20:c8:e9:f0:e3:47:98:68:6d:a9:41:
         e6:4c:f0:6a:07:2d:d3:d1:45:b4:91:61:a3:ef:b9:94:d1:5c:
         bb:a1:2b:db:f8:ec:43:95:65:46:42:1a:76:72:b4:c1:ae:33:
         2b:7a:03:09:49:b6:eb:9f:c1:79:78:3c:2e:d2:81:5d:0b:6c:
         89:8c:ee:13:04:a1:22:ec:73:39:9f:44:5b:2a:9c:b1:86:d9:
         0a:c2:16:a3:8b:59:7f:c2:47:6b:2f:52:45:d4:2c:d1:5f:4c:
         da:28:72:bb:28:10:c7:10:44:1a:fd:f1:d8:db:dd:f1:a6:42:
         d8:f3:dd:1b:14:b3:40:82:f3:40:15:95:89:14:61:98:19:c1:
         c7:c9:02:51:56:63:b2:32:83:c2:59:d1:a5:3c:51:d9:00:50:
         45:54:d8:64:6d:28:d0:51:bc:91:72:e7:da:97:4a:52:06:21:
         6d:fa:1e:8a:40:90:8c:bf:5c:6a:13:5e:b1:e1:a0:a0:2e:2a:
         68:d0:8c:2e:d0:c3:1b:2b:cd:1a:91:97:bf:fc:07:b7:82:a5:
         3f:d5:54:b0:b9:94:66:69:b3:5f:af:e1:3a:87:00:3a:a7:a3:
         e5:3c:16:c2:af:19:27:62:7e:73:5c:82:13:29:ee:96:77:9e:
         4c:4a:fd:32
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO+EWj9nxSY/XMTvxRab6W08f3howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0
RTk0RjEyRjAeFw0yNTAxMzAwOTM1NDlaFw0yNTAyMDIxNTA4NDlaMDMxMTAvBgNV
BAMTKDE1MUYzRTA0MTE2MjYwRTc0QkU5MjY3Q0QyQUVFNzBEMkY2QTVDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDET54OzMThOCoqaQR4CFS1S7Hn
5GspcEfuT+kf45PTm2WAbTHxgRvRUzWQVEF0CRxoTrpCMrhv9Y7xQ2428kRxaml5
umbdZQnAGSUpR+E8Oz0PexkrPFmiXWM4v24eAGk0pLrKo9rWKfUIAYuTAexBBLT5
o3cliF5noKBnMmh36SyP/wbhpYegEbAPmmsI1EpLdqARXthYFYOAJTGCeEoveeqy
O5LTL/4sSVke3Pt2Cgvk+MLG0740hBISOeWcBN0MXBF0TgBgrTOQQ1uQuevcFn+w
gLJunx9x5N4ihTk7JLEo/3LROUZDiH3obAqmseRIntbo4gl3wZkd9u/Tz0jdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFR8+BBFiYOdL6SZ80q7nDS9qXLIwHwYDVR0j
BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0
Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0
RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2
YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2
ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJcmpeULHHkgyOnw40eYaG2pQeZM8GoHLdPR
RbSRYaPvuZTRXLuhK9v47EOVZUZCGnZytMGuMyt6AwlJtuufwXl4PC7SgV0LbImM
7hMEoSLsczmfRFsqnLGG2QrCFqOLWX/CR2svUkXULNFfTNoocrsoEMcQRBr98djb
3fGmQtjz3RsUs0CC80AVlYkUYZgZwcfJAlFWY7Iyg8JZ0aU8UdkAUEVU2GRtKNBR
vJFy59qXSlIGIW36HopAkIy/XGoTXrHhoKAuKmjQjC7QwxsrzRqRl7/8B7eCpT/V
VLC5lGZps1+v4TqHADqno+U8FsKvGSdifnNcghMp7pZ3nkxK/TI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:48 2025 by rpki-client