Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
File:                     40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft (raw, json)
Hash identifier:          rS55qSwc+B6enF57ccw5oCDVBNDJ3LqOFpcgDm0U1Yk=
Subject key identifier:   00:82:2F:7F:C6:96:93:1C:0E:13:D8:6C:81:62:A5:BB:F5:42:85:0E
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Certificate issuer:       /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial:       7E275E7A442252A491D5B662DCD0E8B2CC7E8D6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
Manifest number:          01FC
Signing time:             Wed 29 Jan 2025 14:12:15 +0000
Manifest this update:     Wed 29 Jan 2025 14:07:15 +0000
Manifest next update:     Sun 02 Feb 2025 01:19:15 +0000
Files and hashes:         1: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=)
                          2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: Ai97/AeZ67d5F3AYWobNbu9wLgxWIRH2a6eXmHZgojQ=)
                          3: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: kwL1JREwxH10sgLMYdlWUdKS0D8gYxJYzVh+9DEMKo4=)
                          4: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl (hash: 5oLPeMjgKUkD7u2CZlsHez+2HvtcSHTkFi/HhgQrp6Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:5e:7a:44:22:52:a4:91:d5:b6:62:dc:d0:e8:b2:cc:7e:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
        Validity
            Not Before: Jan 29 14:07:15 2025 GMT
            Not After : Feb  2 01:19:15 2025 GMT
        Subject: CN=00822F7FC696931C0E13D86C8162A5BBF542850E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:6a:25:0e:af:84:f1:72:77:2e:aa:08:5e:
                    0d:e9:45:55:5f:c6:28:f8:3b:cb:7f:9b:25:f2:a8:
                    a9:7a:b2:2f:e2:fb:ec:4b:69:aa:66:55:e2:78:83:
                    e9:66:b7:75:05:cd:30:89:23:7d:71:a4:28:75:3f:
                    eb:32:2a:8f:92:73:0b:e8:6a:95:fc:31:73:b2:c4:
                    af:05:61:a3:14:60:8c:31:9a:f7:8e:2e:aa:57:9f:
                    8e:62:74:e7:11:38:5a:af:1f:24:15:74:f2:b0:a5:
                    92:e3:0f:a9:a8:78:ae:7e:f4:eb:56:91:9f:69:a5:
                    b3:d2:05:a5:fe:37:74:f7:c3:3d:7b:40:ee:f9:e6:
                    2e:5c:c4:5c:82:ac:90:7d:8d:f8:6a:09:d3:fc:66:
                    0c:71:20:c4:d5:2e:e4:d7:37:72:f5:10:a6:b2:26:
                    d1:05:f9:68:d1:98:95:9f:12:6a:d4:25:c9:72:94:
                    89:05:8a:65:e3:e0:7d:c0:d3:de:93:33:cc:d3:09:
                    1a:39:3d:19:5b:f8:b0:aa:d0:61:db:fc:fd:d2:62:
                    9c:9a:bb:59:ec:0c:0d:98:8f:c1:86:13:47:65:f2:
                    b9:2e:6f:25:78:8c:0c:ed:f2:9c:7e:89:32:8a:60:
                    92:02:fd:12:ef:8c:9e:93:28:9c:a3:3b:ee:dc:dc:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:82:2F:7F:C6:96:93:1C:0E:13:D8:6C:81:62:A5:BB:F5:42:85:0E
            X509v3 Authority Key Identifier:
                keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:29:d8:f7:f4:40:b3:46:cf:df:aa:3d:3d:a9:e9:0d:cc:
         df:3c:97:46:8f:3c:85:8a:59:8c:90:77:60:42:c9:67:c8:a7:
         1d:a7:4d:fc:39:5b:a9:31:ff:0a:e6:37:9e:8a:30:69:ac:ee:
         80:e8:1c:bd:b7:5d:21:c0:b4:79:aa:ad:36:ac:19:6f:68:cf:
         eb:b1:17:24:10:52:da:ea:8d:cc:43:2f:d9:81:ed:ac:69:07:
         0f:d1:b6:20:0d:fd:77:ca:4b:c5:4e:26:67:11:e8:2a:fb:29:
         4d:24:3d:9b:14:ce:53:ac:3f:d4:2f:39:cb:1f:df:81:be:04:
         6a:cb:f6:71:e5:77:7f:18:38:62:5b:88:39:8f:63:8e:bd:9c:
         ad:27:47:d5:d2:0c:73:b0:be:bc:f3:62:b1:62:b8:b7:e0:9c:
         80:e9:77:27:f0:0a:85:c9:02:5f:e8:61:e5:76:2c:4f:d0:7a:
         16:0f:28:30:2b:73:93:06:17:9b:6b:29:f0:5f:8c:93:e6:79:
         1a:67:67:43:c3:62:22:1b:2f:59:c2:48:10:08:b4:67:61:51:
         6c:02:86:09:1e:3c:4e:a4:04:5d:c6:42:9c:95:dd:90:0c:d5:
         6a:53:3e:69:86:dd:5f:36:96:b1:d0:fc:0d:96:4d:83:2e:fd:
         f2:2c:c6:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfideekQiUqSR1bZi3NDossx+jWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0
NzBCNDFGMzAeFw0yNTAxMjkxNDA3MTVaFw0yNTAyMDIwMTE5MTVaMDMxMTAvBgNV
BAMTKDAwODIyRjdGQzY5NjkzMUMwRTEzRDg2QzgxNjJBNUJCRjU0Mjg1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGc2olDq+E8XJ3LqoIXg3pRVVf
xij4O8t/myXyqKl6si/i++xLaapmVeJ4g+lmt3UFzTCJI31xpCh1P+syKo+Scwvo
apX8MXOyxK8FYaMUYIwxmveOLqpXn45idOcROFqvHyQVdPKwpZLjD6moeK5+9OtW
kZ9ppbPSBaX+N3T3wz17QO755i5cxFyCrJB9jfhqCdP8ZgxxIMTVLuTXN3L1EKay
JtEF+WjRmJWfEmrUJclylIkFimXj4H3A096TM8zTCRo5PRlb+LCq0GHb/P3SYpya
u1nsDA2Yj8GGE0dl8rkubyV4jAzt8px+iTKKYJIC/RLvjJ6TKJyjO+7c3L9tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAIIvf8aWkxwOE9hsgWKlu/VChQ4wHwYDVR0j
BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw
OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC
NDFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx
ZjQtN2JmZGY5M2Y3YmFhLzAvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVC
QzU0NzBCNDFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHOmKdj39ECzRs/fqj09qekNzN88l0aPPIWK
WYyQd2BCyWfIpx2nTfw5W6kx/wrmN56KMGms7oDoHL23XSHAtHmqrTasGW9oz+ux
FyQQUtrqjcxDL9mB7axpBw/RtiAN/XfKS8VOJmcR6Cr7KU0kPZsUzlOsP9QvOcsf
34G+BGrL9nHld38YOGJbiDmPY469nK0nR9XSDHOwvrzzYrFiuLfgnIDpdyfwCoXJ
Al/oYeV2LE/QehYPKDArc5MGF5trKfBfjJPmeRpnZ0PDYiIbL1nCSBAItGdhUWwC
hgkePE6kBF3GQpyV3ZAM1WpTPmmG3V82lrHQ/A2WTYMu/fIsxoQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:39 2025 by rpki-client