Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
File:                     21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json)
Hash identifier:          KqwEq5PdblZokYmgV1TPu+oVgi8glw8TYwlO26hujYw=
Subject key identifier:   3D:3E:29:9E:D0:50:FC:30:2D:6A:E8:69:18:5F:56:A5:46:1D:FA:41
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       2C039D8DCEF87E4F4EEBDCAFAA50AC3F2D2E6E43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
Manifest number:          4F
Signing time:             Wed 29 Jan 2025 22:31:48 +0000
Manifest this update:     Wed 29 Jan 2025 22:26:48 +0000
Manifest next update:     Sat 01 Feb 2025 22:34:48 +0000
Files and hashes:         1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=)
                          2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=)
                          3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=)
                          4: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: lEdHwrwaZ1Tfve5AOANqGDiLdF4pBWlSz64WJ433VFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:03:9d:8d:ce:f8:7e:4f:4e:eb:dc:af:aa:50:ac:3f:2d:2e:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: Jan 29 22:26:48 2025 GMT
            Not After : Feb  1 22:34:48 2025 GMT
        Subject: CN=3D3E299ED050FC302D6AE869185F56A5461DFA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:8e:68:89:de:fa:85:bc:39:d4:90:2c:b9:
                    63:6f:8d:5f:f7:32:83:25:e8:29:d8:94:d1:23:f8:
                    42:d1:a8:a6:e3:5f:de:10:3a:5a:d1:ff:68:6f:be:
                    f2:b5:18:f8:31:93:79:a7:2d:a1:18:c9:20:d7:56:
                    95:b8:b2:a0:8b:42:97:0f:76:08:e7:c6:b5:1d:23:
                    34:2e:3a:53:a3:9d:32:9d:a5:72:74:6b:03:1b:46:
                    2e:1b:51:2f:81:b9:bf:bc:eb:f3:3c:25:f2:65:96:
                    d9:68:e8:64:84:1d:93:37:b8:3f:15:d3:f4:4c:c1:
                    8f:d2:be:bf:ed:53:d5:c7:4b:ea:bf:9b:d8:d5:a4:
                    0f:21:ec:9a:09:30:36:91:e4:82:ce:f9:ff:b9:14:
                    44:d8:fc:50:88:38:0a:4b:70:98:de:b7:b6:f6:34:
                    cf:f1:5d:fd:bf:f1:ad:40:06:69:85:db:11:da:a4:
                    f0:20:6f:b8:2f:80:87:1d:9b:88:45:00:63:fe:87:
                    66:9e:ec:53:35:48:d0:29:59:76:33:f4:a1:c6:fc:
                    60:d9:46:90:9a:14:8c:f4:ed:0f:11:a1:c7:df:a0:
                    d0:6a:51:ca:e1:c7:6d:98:7e:ab:f0:d1:3d:6a:31:
                    7e:ac:78:cb:bc:8b:f4:a5:25:eb:72:f2:53:96:3b:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:29:9E:D0:50:FC:30:2D:6A:E8:69:18:5F:56:A5:46:1D:FA:41
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:d8:09:e7:53:5a:89:82:58:e9:99:2a:02:cd:70:d5:67:
         a6:26:75:64:f0:ad:83:55:d1:61:57:7c:1f:57:ef:37:a8:eb:
         fd:67:a9:5a:67:b8:50:71:28:6f:ca:6b:87:6d:54:63:11:50:
         59:77:a0:d4:b6:ef:09:c6:ba:83:f2:b6:89:ca:c1:fb:07:76:
         4c:29:b9:c9:d7:28:bc:23:a5:33:2d:f6:f4:3f:e5:45:74:1e:
         66:96:b2:68:eb:6c:2c:05:9d:ed:8c:5e:00:9e:9e:0b:00:c3:
         ae:1d:34:87:57:5a:95:bd:96:7a:9d:c8:8c:62:c2:c3:71:c0:
         9e:0a:1a:46:4c:b8:93:ac:2f:fb:f6:04:8e:56:7c:a3:2e:c5:
         ea:6b:fd:95:74:65:bd:ea:36:6a:23:0e:a1:3d:12:6d:1c:dc:
         af:0c:c7:97:09:9d:e8:c4:49:0d:75:80:ac:ec:e1:06:4b:32:
         0d:58:b6:73:c0:c4:fc:26:a5:42:5c:73:66:81:f9:b5:e1:82:
         c3:47:f2:65:08:18:43:8f:91:ff:7e:e9:cd:a6:e6:dc:75:10:
         37:a8:88:24:d1:a0:a9:ad:ce:83:77:f4:25:ad:29:fd:c4:e7:
         ad:c1:7f:5e:60:3b:de:78:8f:3c:7b:22:9e:f0:d8:2f:fb:36:
         d8:e3:72:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULAOdjc74fk9O69yvqlCsPy0ubkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx
QTQ2MzQ0MjAeFw0yNTAxMjkyMjI2NDhaFw0yNTAyMDEyMjM0NDhaMDMxMTAvBgNV
BAMTKDNEM0UyOTlFRDA1MEZDMzAyRDZBRTg2OTE4NUY1NkE1NDYxREZBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqvo5oid76hbw51JAsuWNvjV/3
MoMl6CnYlNEj+ELRqKbjX94QOlrR/2hvvvK1GPgxk3mnLaEYySDXVpW4sqCLQpcP
dgjnxrUdIzQuOlOjnTKdpXJ0awMbRi4bUS+Bub+86/M8JfJlltlo6GSEHZM3uD8V
0/RMwY/Svr/tU9XHS+q/m9jVpA8h7JoJMDaR5ILO+f+5FETY/FCIOApLcJjet7b2
NM/xXf2/8a1ABmmF2xHapPAgb7gvgIcdm4hFAGP+h2ae7FM1SNApWXYz9KHG/GDZ
RpCaFIz07Q8RocffoNBqUcrhx22Yfqvw0T1qMX6seMu8i/SlJety8lOWO9gDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPT4pntBQ/DAtauhpGF9WpUYd+kEwHwYDVR0j
BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4
NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2
MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh
ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC
ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAy72AnnU1qJgljpmSoCzXDVZ6YmdWTwrYNV
0WFXfB9X7zeo6/1nqVpnuFBxKG/Ka4dtVGMRUFl3oNS27wnGuoPytonKwfsHdkwp
ucnXKLwjpTMt9vQ/5UV0HmaWsmjrbCwFne2MXgCengsAw64dNIdXWpW9lnqdyIxi
wsNxwJ4KGkZMuJOsL/v2BI5WfKMuxepr/ZV0Zb3qNmojDqE9Em0c3K8Mx5cJnejE
SQ11gKzs4QZLMg1YtnPAxPwmpUJcc2aB+bXhgsNH8mUIGEOPkf9+6c2m5tx1EDeo
iCTRoKmtzoN39CWtKf3E563Bf15gO954jzx7Ip7w2C/7Ntjjcuk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:37 2025 by rpki-client