Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
File:                     33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json)
Hash identifier:          IzmYGlMeXCawLTEvT5SLW3MQqTD7+3Wigt7e1mlOZuk=
Subject key identifier:   44:49:12:BF:0B:BC:13:9D:A5:AF:92:62:B7:F6:CB:BE:EA:87:6C:5D
Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9
Certificate issuer:       /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
Certificate serial:       50BC52F7A5EF352959CC43AADD637712C422DD9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
Manifest number:          043F
Signing time:             Thu 30 Jan 2025 02:30:38 +0000
Manifest this update:     Thu 30 Jan 2025 02:25:38 +0000
Manifest next update:     Sun 02 Feb 2025 13:13:38 +0000
Files and hashes:         1: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: 8fYiQu1tu44iMJuzmA+q/kHg5zIuhfmVTkca+dKN8uw=)
                          2: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=)
                          3: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=)
                          4: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=)
                          5: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=)
                          6: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=)
                          7: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:52:f7:a5:ef:35:29:59:cc:43:aa:dd:63:77:12:c4:22:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
        Validity
            Not Before: Jan 30 02:25:38 2025 GMT
            Not After : Feb  2 13:13:38 2025 GMT
        Subject: CN=444912BF0BBC139DA5AF9262B7F6CBBEEA876C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:65:5d:ae:de:f2:5a:07:8d:26:84:8c:63:
                    00:9e:57:d2:ac:1c:ad:fa:06:30:f2:99:f2:ba:81:
                    a5:cb:10:f3:9f:8d:a0:5f:5b:b7:2b:c8:bf:46:8e:
                    dd:5f:0c:12:09:f9:3b:b5:ee:7b:e0:b2:de:ae:1f:
                    a2:cf:ff:29:12:15:be:76:ba:5a:80:fe:e4:08:07:
                    92:02:73:c2:96:df:fc:5d:14:b5:bb:a8:56:ef:af:
                    67:ab:3a:c4:28:56:6e:59:28:e4:a6:b7:37:9e:a8:
                    26:bf:a3:af:53:93:07:c7:ce:df:45:01:7e:88:29:
                    da:3a:d3:d1:4d:fb:f8:b2:c0:e3:2e:62:c4:74:ef:
                    52:29:17:46:5c:65:d9:f0:2d:cc:9b:85:e8:39:94:
                    bb:f4:13:0b:e1:12:45:d2:37:71:96:76:c7:09:c0:
                    7f:82:44:17:5f:9e:c2:f6:f1:84:39:86:ac:0a:fc:
                    ab:a3:4b:15:c7:e3:fa:4b:dd:16:6f:57:cb:ec:19:
                    9b:ab:ef:de:4e:c5:47:30:79:74:58:14:df:c2:34:
                    08:c2:0b:3f:a1:46:15:f0:dc:11:2d:20:69:92:1a:
                    d3:af:22:92:96:ff:c9:dc:95:14:8e:1f:59:8a:f8:
                    60:9b:53:ab:bf:1d:a8:15:da:88:05:26:03:b3:87:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:49:12:BF:0B:BC:13:9D:A5:AF:92:62:B7:F6:CB:BE:EA:87:6C:5D
            X509v3 Authority Key Identifier:
                keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e6:51:ee:12:16:78:64:b3:86:5d:2e:18:98:df:3c:48:54:
         dc:44:1c:66:ee:d3:fd:a5:03:51:5d:70:c6:4c:ce:3d:01:36:
         56:00:53:cd:89:b5:69:50:b6:78:48:42:38:16:3a:2d:fa:f5:
         d4:8c:06:33:98:c2:f2:a8:cf:11:2b:e8:ef:8d:d0:89:0b:cb:
         09:3b:a0:cd:54:d3:5d:18:96:e7:0b:73:d4:98:b6:7a:a1:a5:
         2f:b4:d1:19:0b:37:11:23:21:6e:f8:79:6e:e2:9f:07:35:83:
         f2:2a:85:c8:7b:73:47:9b:40:b9:4c:f8:de:7b:f8:9c:79:40:
         26:ce:30:a6:0b:46:d0:09:a4:52:1e:ac:f6:eb:9a:e6:58:21:
         cb:15:58:65:82:e0:ae:79:e5:2f:b4:0f:7e:82:23:88:15:cd:
         85:46:9a:e3:0a:45:6e:2c:d5:8f:d0:ac:3b:24:a3:44:59:0d:
         aa:e5:6e:87:55:df:27:bd:7d:ed:a4:dc:4c:cf:cc:05:52:e3:
         bf:80:f2:60:69:97:2f:ff:14:e0:e2:22:b1:2d:d4:8e:0c:d1:
         64:7a:58:66:89:1e:8e:4a:dc:b7:9f:08:2f:0d:eb:db:ed:89:
         c2:f8:fd:8f:e4:4f:36:22:eb:2b:1e:8c:1f:59:b4:8a:2b:ff:
         74:d5:e4:c0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUULxS96XvNSlZzEOq3WN3EsQi3Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB
NzlDQUFEOTAeFw0yNTAxMzAwMjI1MzhaFw0yNTAyMDIxMzEzMzhaMDMxMTAvBgNV
BAMTKDQ0NDkxMkJGMEJCQzEzOURBNUFGOTI2MkI3RjZDQkJFRUE4NzZDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNWVdrt7yWgeNJoSMYwCeV9Ks
HK36BjDymfK6gaXLEPOfjaBfW7cryL9Gjt1fDBIJ+Tu17nvgst6uH6LP/ykSFb52
ulqA/uQIB5ICc8KW3/xdFLW7qFbvr2erOsQoVm5ZKOSmtzeeqCa/o69TkwfHzt9F
AX6IKdo609FN+/iywOMuYsR071IpF0ZcZdnwLcybheg5lLv0EwvhEkXSN3GWdscJ
wH+CRBdfnsL28YQ5hqwK/KujSxXH4/pL3RZvV8vsGZur795OxUcweXRYFN/CNAjC
Cz+hRhXw3BEtIGmSGtOvIpKW/8nclRSOH1mK+GCbU6u/HagV2ogFJgOzh8OtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUREkSvwu8E52lr5Jit/bLvuqHbF0wHwYDVR0j
BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE
NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD
QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3
OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5
NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEPmUe4SFnhks4ZdLhiY3zxIVNxEHGbu0/2l
A1FdcMZMzj0BNlYAU82JtWlQtnhIQjgWOi369dSMBjOYwvKozxEr6O+N0IkLywk7
oM1U010YlucLc9SYtnqhpS+00RkLNxEjIW74eW7inwc1g/Iqhch7c0ebQLlM+N57
+Jx5QCbOMKYLRtAJpFIerPbrmuZYIcsVWGWC4K555S+0D36CI4gVzYVGmuMKRW4s
1Y/QrDsko0RZDarlbodV3ye9fe2k3EzPzAVS47+A8mBply//FODiIrEt1I4M0WR6
WGaJHo5K3LefCC8N69vticL4/Y/kTzYi6ysejB9ZtIor/3TV5MA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:15 2025 by rpki-client