Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
File:                     9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json)
Hash identifier:          +IJpPFtkZhHLVZrMXijul86mbVAmQqU5DDIN9Gs+jOg=
Subject key identifier:   7C:2D:CE:77:DC:F5:53:68:DE:03:10:2D:EC:CC:3B:D6:18:0E:0B:4F
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Certificate issuer:       /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial:       3677D211C02414BAA481BA975ACAE1288E9963DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
Manifest number:          04A5
Signing time:             Wed 29 Jan 2025 20:12:07 +0000
Manifest this update:     Wed 29 Jan 2025 20:07:07 +0000
Manifest next update:     Sun 02 Feb 2025 05:55:07 +0000
Files and hashes:         1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=)
                          2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: Ly2WcAdl8FCGes0ivRK2PwJB6QG05Bueh0UeU8Ux16A=)
                          3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: Yd01J5hPcZQ8iNNroa+Nv/YFeQyu4ZExz0qlMlvbB+U=)
                          4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: MpzsojrueKp1Pql3RvWYuNpXCdj8lPFm9USZQRjlosU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:d2:11:c0:24:14:ba:a4:81:ba:97:5a:ca:e1:28:8e:99:63:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
        Validity
            Not Before: Jan 29 20:07:07 2025 GMT
            Not After : Feb  2 05:55:07 2025 GMT
        Subject: CN=7C2DCE77DCF55368DE03102DECCC3BD6180E0B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:f5:8f:3c:4c:60:fc:d1:8e:67:17:60:52:
                    52:54:4c:96:da:fa:8b:3a:0f:a7:06:74:d5:16:f8:
                    5a:5b:be:a4:2c:0a:b9:0b:11:b1:28:37:09:c3:49:
                    2c:18:49:44:a1:37:97:58:fe:58:c5:7d:5e:1b:8c:
                    10:35:5a:8a:3b:f3:83:48:6e:f6:96:b8:44:82:af:
                    4b:8e:b2:be:93:e8:b9:7c:bc:1b:b9:e6:94:3b:22:
                    51:08:bb:cc:1a:74:0e:5b:e8:30:e1:fc:30:51:bd:
                    c2:d0:8b:34:e3:57:a4:b3:da:77:3e:67:48:83:d4:
                    82:b6:fe:d3:9f:f6:32:7a:7d:fb:8b:42:d9:90:58:
                    b4:8c:98:b8:eb:d5:7c:74:cf:17:6a:2b:ed:ba:64:
                    cd:4e:0c:2b:58:98:b4:78:11:7d:b8:c1:56:41:d1:
                    54:cb:30:74:20:88:82:8d:a4:13:14:da:87:74:ac:
                    09:63:57:ee:4a:35:a9:3a:23:84:50:3a:97:bf:91:
                    a2:ec:f7:2f:43:d5:69:c4:3b:33:71:d9:6d:5d:8c:
                    82:c9:02:f1:fa:83:e6:df:36:13:5d:11:d8:42:19:
                    e9:23:18:09:23:10:94:e7:9a:d5:5d:46:69:60:81:
                    0e:6c:4a:4a:a2:d9:a6:6c:2b:25:f6:3a:9a:66:93:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:CE:77:DC:F5:53:68:DE:03:10:2D:EC:CC:3B:D6:18:0E:0B:4F
            X509v3 Authority Key Identifier:
                keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:d0:ee:64:1c:2c:03:93:20:b5:11:9b:61:32:c6:23:58:
         78:68:db:00:7d:c9:56:c2:fe:4c:1c:70:f6:3e:e9:59:ea:bc:
         e2:12:c1:17:3d:9c:9b:f3:c6:af:0b:ba:ac:91:43:7e:a8:17:
         25:3a:d1:78:6c:8c:b6:fb:8e:cc:a2:90:e4:f6:8d:04:ad:ec:
         35:5c:d1:f8:e0:fc:a4:85:ca:9f:7a:85:ab:b7:3d:c4:2b:d3:
         40:e5:b1:7c:d9:7c:a8:d5:f4:e4:09:a8:b7:10:dc:67:81:4d:
         f8:09:b4:27:a9:7a:10:d1:86:00:32:30:24:3b:30:80:89:f9:
         ce:25:b8:61:a9:fc:d6:a6:1e:3e:9a:ad:48:50:09:00:a6:03:
         2d:2e:df:5b:31:d7:b0:94:ed:4c:3a:72:88:04:8e:58:01:10:
         ae:8f:3a:85:f5:f2:11:5d:5b:2f:23:c7:3e:7d:6b:01:50:40:
         0b:eb:49:f6:7c:dc:0e:e3:57:eb:21:29:75:d2:15:8c:b4:79:
         a4:8e:05:e8:2d:04:c9:84:95:52:97:75:6e:c7:da:a2:dd:6c:
         4b:d5:31:73:7c:d6:54:c3:72:fa:11:e5:fb:cc:55:39:90:35:
         b7:42:17:2e:ac:25:50:03:97:b5:ab:8c:b1:91:bd:cd:a6:4b:
         f5:5a:db:6a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNnfSEcAkFLqkgbqXWsrhKI6ZY90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE
MEU4OTMxMjAeFw0yNTAxMjkyMDA3MDdaFw0yNTAyMDIwNTU1MDdaMDMxMTAvBgNV
BAMTKDdDMkRDRTc3RENGNTUzNjhERTAzMTAyREVDQ0MzQkQ2MTgwRTBCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6/WPPExg/NGOZxdgUlJUTJba
+os6D6cGdNUW+FpbvqQsCrkLEbEoNwnDSSwYSUShN5dY/ljFfV4bjBA1Woo784NI
bvaWuESCr0uOsr6T6Ll8vBu55pQ7IlEIu8wadA5b6DDh/DBRvcLQizTjV6Sz2nc+
Z0iD1IK2/tOf9jJ6ffuLQtmQWLSMmLjr1Xx0zxdqK+26ZM1ODCtYmLR4EX24wVZB
0VTLMHQgiIKNpBMU2od0rAljV+5KNak6I4RQOpe/kaLs9y9D1WnEOzNx2W1djILJ
AvH6g+bfNhNdEdhCGekjGAkjEJTnmtVdRmlggQ5sSkqi2aZsKyX2OppmkxFjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfC3Od9z1U2jeAxAt7Mw71hgOC08wHwYDVR0j
BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG
MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4
OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2
ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC
MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI3f0O5kHCwDkyC1EZthMsYjWHho2wB9yVbC
/kwccPY+6VnqvOISwRc9nJvzxq8LuqyRQ36oFyU60XhsjLb7jsyikOT2jQSt7DVc
0fjg/KSFyp96hau3PcQr00DlsXzZfKjV9OQJqLcQ3GeBTfgJtCepehDRhgAyMCQ7
MICJ+c4luGGp/NamHj6arUhQCQCmAy0u31sx17CU7Uw6cogEjlgBEK6POoX18hFd
Wy8jxz59awFQQAvrSfZ83A7jV+shKXXSFYy0eaSOBegtBMmElVKXdW7H2qLdbEvV
MXN81lTDcvoR5fvMVTmQNbdCFy6sJVADl7WrjLGRvc2mS/Va22o=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:16 2025 by rpki-client