Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
File:                     75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json)
Hash identifier:          8IG10v0Z+shILnVNDCt4Z5zb2cIfSbq2+ZAvPwAGxvQ=
Subject key identifier:   96:49:CC:F0:3D:B1:FD:59:0C:1B:0A:29:98:DF:82:C2:64:D8:D3:73
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Certificate issuer:       /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial:       39654C385E5D56D863FB5EFBE3ECE984BFABFD1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
Manifest number:          016C
Signing time:             Thu 30 Jan 2025 20:50:57 +0000
Manifest this update:     Thu 30 Jan 2025 20:45:57 +0000
Manifest next update:     Mon 03 Feb 2025 03:04:57 +0000
Files and hashes:         1: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: +j7LagtiA8DZoXzNOV4ipiXaXeq17wIoKxvndY1v7cs=)
                          2: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: CIHQeJZhrM8u5anm5rbVK2sk3EMG81yHdNySRBm6js8=)
                          3: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 2/IQ6Ol+BPKlBTSwA7bwjnQdrR+Nl265+bbA++Kn4Bk=)
                          4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: CO1KR0PabLd3Qy7I6WrYIHY7Dj4uJDchoSP1DaEOrpM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:65:4c:38:5e:5d:56:d8:63:fb:5e:fb:e3:ec:e9:84:bf:ab:fd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
        Validity
            Not Before: Jan 30 20:45:57 2025 GMT
            Not After : Feb  3 03:04:57 2025 GMT
        Subject: CN=9649CCF03DB1FD590C1B0A2998DF82C264D8D373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:7a:f1:ac:b5:b0:a7:55:c1:ed:d6:9d:9a:
                    fd:4d:ba:fe:a7:ca:d4:15:c5:fb:f3:fb:a1:79:c6:
                    89:06:ae:80:04:2d:2f:90:19:a4:d0:80:aa:43:0f:
                    9f:4b:36:fb:1c:e5:fc:fb:2c:c5:5b:2b:04:d3:3a:
                    69:cf:e1:bc:be:3b:20:01:51:37:0c:1d:28:09:e1:
                    87:af:d3:a7:2a:82:a9:19:fc:bf:82:a7:2c:67:89:
                    2d:6f:84:78:8d:26:ad:04:18:f8:8f:76:29:8f:45:
                    ab:83:3a:cf:bf:08:f0:33:36:22:e5:75:69:4b:a2:
                    0e:d6:6d:02:89:ed:6e:5b:fb:01:c7:f6:07:aa:92:
                    88:f9:9a:86:0c:0a:2d:7f:b5:05:9e:2b:b8:20:14:
                    ab:4b:ce:bf:23:d6:07:71:7b:68:84:2b:ee:e6:e1:
                    40:c3:18:44:9c:8d:78:80:1f:a8:3b:f4:48:e6:f9:
                    28:6f:c9:d0:3e:96:b6:38:29:0a:97:b8:5e:92:4b:
                    44:b2:0a:d7:7d:e5:3d:00:89:1d:30:db:a7:83:a6:
                    e0:5f:77:a9:ab:9b:83:41:7a:1b:09:ca:fc:e4:95:
                    c2:b1:7d:70:00:79:c6:8a:24:3c:ab:53:56:53:4d:
                    c2:0d:1f:28:b0:a6:dc:e4:58:f2:63:c4:09:49:19:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:CC:F0:3D:B1:FD:59:0C:1B:0A:29:98:DF:82:C2:64:D8:D3:73
            X509v3 Authority Key Identifier:
                keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:f4:68:a6:9f:f7:0c:f6:3e:fa:e8:66:5d:41:fa:9e:53:
         06:32:ba:6e:29:63:c9:d7:58:c4:be:7b:26:f9:e1:42:4a:69:
         79:d9:22:62:c8:34:b3:99:c5:66:ed:0b:8a:d7:55:c6:19:49:
         5e:83:94:c0:44:20:03:9a:89:d8:d3:51:61:b4:db:68:8b:df:
         26:b8:71:ca:bd:b2:02:ae:01:2b:f1:97:e1:82:43:18:99:95:
         9f:b1:1c:cb:7f:b8:15:26:1a:81:d9:83:dc:0c:1a:de:0a:8f:
         b5:66:a4:49:d9:47:18:5e:33:a8:5f:85:e9:c1:a6:d5:fc:5a:
         28:43:34:75:22:3d:6a:8c:5e:08:8b:f2:5c:59:63:9c:f3:bf:
         6f:a5:54:e6:28:7a:d2:c9:98:63:9e:28:53:5e:6e:b3:5c:45:
         f6:d0:68:b2:32:ed:fe:97:33:60:94:37:97:3e:46:ef:1b:4a:
         54:4e:57:e1:96:82:2f:be:92:8a:1d:ea:d1:44:bb:66:db:10:
         30:b6:56:1b:87:ea:a2:c7:6a:2f:d2:d8:fc:8e:57:09:f7:98:
         21:3f:9f:a2:7e:9c:8e:a9:b1:b7:02:58:b4:e2:50:a6:73:13:
         9c:46:4f:9d:d9:5d:1c:51:ce:27:3b:40:5e:40:83:08:44:c2:
         cc:7e:27:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOWVMOF5dVthj+1774+zphL+r/R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRB
RUI4OUQ5QTAeFw0yNTAxMzAyMDQ1NTdaFw0yNTAyMDMwMzA0NTdaMDMxMTAvBgNV
BAMTKDk2NDlDQ0YwM0RCMUZENTkwQzFCMEEyOTk4REY4MkMyNjREOEQzNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnXrxrLWwp1XB7dadmv1Nuv6n
ytQVxfvz+6F5xokGroAELS+QGaTQgKpDD59LNvsc5fz7LMVbKwTTOmnP4by+OyAB
UTcMHSgJ4Yev06cqgqkZ/L+CpyxniS1vhHiNJq0EGPiPdimPRauDOs+/CPAzNiLl
dWlLog7WbQKJ7W5b+wHH9geqkoj5moYMCi1/tQWeK7ggFKtLzr8j1gdxe2iEK+7m
4UDDGEScjXiAH6g79Ejm+ShvydA+lrY4KQqXuF6SS0SyCtd95T0AiR0w26eDpuBf
d6mrm4NBehsJyvzklcKxfXAAecaKJDyrU1ZTTcINHyiwptzkWPJjxAlJGUS1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlknM8D2x/VkMGwopmN+CwmTY03MwHwYDVR0j
BBgwFoAUdYkCR+F4xA3T+aWWggL2hK64nZowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MjI2YmU3Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC83NTg5MDI0N0Ux
NzhDNDBERDNGOUE1OTY4MjAyRjY4NEFFQjg5RDlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRBRUI4
OUQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh
NGMtMjE4NWU2NDdkYjNmLzAvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2
ODRBRUI4OUQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ149Gimn/cM9j766GZdQfqeUwYyum4pY8nX
WMS+eyb54UJKaXnZImLINLOZxWbtC4rXVcYZSV6DlMBEIAOaidjTUWG022iL3ya4
ccq9sgKuASvxl+GCQxiZlZ+xHMt/uBUmGoHZg9wMGt4Kj7VmpEnZRxheM6hfhenB
ptX8WihDNHUiPWqMXgiL8lxZY5zzv2+lVOYoetLJmGOeKFNebrNcRfbQaLIy7f6X
M2CUN5c+Ru8bSlROV+GWgi++kood6tFEu2bbEDC2VhuH6qLHai/S2PyOVwn3mCE/
n6J+nI6psbcCWLTiUKZzE5xGT53ZXRxRzic7QF5AgwhEwsx+J8g=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:45 2025 by rpki-client