Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
File:                     C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json)
Hash identifier:          BZRjBmoblskD9iBkE+WOYLpKGaDnPFXw0T018oZP1b0=
Subject key identifier:   8B:2A:9B:CD:CD:55:1E:07:F9:C6:09:7C:B3:F1:76:CE:16:A1:48:FD
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Certificate issuer:       /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial:       3CE564C3CD23AF13DA36FED53E75CFBAB68ED984
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
Manifest number:          046A
Signing time:             Thu 30 Jan 2025 09:50:04 +0000
Manifest this update:     Thu 30 Jan 2025 09:45:04 +0000
Manifest next update:     Sun 02 Feb 2025 21:35:04 +0000
Files and hashes:         1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=)
                          2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: YO37Y3eimIDdIo7K6UBGoqei0FiSorzSwQwRwyZtXq8=)
                          3: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: W5RdYlxV1+7ACNuGx8k0oEZmDcqvrxp8L4DTYHWchdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e5:64:c3:cd:23:af:13:da:36:fe:d5:3e:75:cf:ba:b6:8e:d9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
        Validity
            Not Before: Jan 30 09:45:04 2025 GMT
            Not After : Feb  2 21:35:04 2025 GMT
        Subject: CN=8B2A9BCDCD551E07F9C6097CB3F176CE16A148FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:28:71:90:08:60:e3:34:8c:b9:08:31:38:
                    ef:c5:c6:0f:c1:cf:57:07:95:67:f9:d2:c8:7f:09:
                    a7:57:8e:91:eb:e6:70:80:f5:fa:d8:2f:50:33:c1:
                    cc:de:70:9f:84:bd:b3:87:a3:06:bc:45:17:77:30:
                    da:eb:a8:3f:84:6b:01:78:ca:c5:37:33:8a:eb:d0:
                    ec:eb:5c:ad:60:a2:f0:ed:09:8b:8b:1b:fe:17:a4:
                    ed:a6:53:77:a8:f3:f4:8c:4a:2c:59:4d:2d:a3:3f:
                    af:a6:34:55:53:c1:a0:42:b5:2a:8f:f4:89:f0:e5:
                    bf:26:cc:62:04:eb:01:99:0e:49:87:04:00:59:f5:
                    67:44:e8:9d:fa:33:1b:a0:7b:e0:9d:94:e6:8d:d9:
                    60:08:34:03:70:8c:a6:af:32:42:dc:d7:5f:bb:fa:
                    fd:42:d4:0e:76:ea:fb:29:c0:9b:3c:f1:74:ee:4a:
                    c8:d7:5a:28:c2:09:0d:7c:c8:c4:32:ba:27:5f:40:
                    13:be:57:81:7b:e9:b6:da:07:8d:40:82:9f:9c:c8:
                    68:e0:0d:d4:53:b0:64:18:12:39:b8:73:4e:99:3c:
                    ca:f9:ab:4b:dc:f2:ea:7d:80:16:96:33:25:4a:8f:
                    f0:de:54:30:21:d6:34:18:21:b8:e1:35:15:ef:b0:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:9B:CD:CD:55:1E:07:F9:C6:09:7C:B3:F1:76:CE:16:A1:48:FD
            X509v3 Authority Key Identifier:
                keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:e0:db:a4:7f:04:89:d5:bf:bb:9e:54:3e:d1:77:6f:af:
         88:97:e2:a0:46:34:15:07:15:6e:82:42:52:f4:22:82:fc:04:
         1f:6c:9e:8d:2a:8e:31:64:c7:10:07:77:81:9c:d0:d2:b1:df:
         e4:d9:fc:ee:e6:f4:51:7b:0c:eb:71:ee:9d:46:60:98:17:4b:
         5d:cd:ca:c8:33:5f:58:00:a0:88:3c:0d:04:cf:48:d2:de:c8:
         7f:73:d1:94:15:74:76:70:b8:be:f4:79:e6:a4:09:df:ea:57:
         e1:31:4f:bf:20:9e:42:51:2d:65:e1:1a:1b:63:eb:c1:9b:9e:
         80:ef:10:a3:05:08:95:c2:b5:cb:11:44:69:af:08:dc:a9:bc:
         18:5d:90:94:30:1f:fc:83:20:91:1c:ad:4f:93:7a:d2:b7:37:
         ba:5b:52:07:4d:21:7d:10:0a:ac:bc:6b:32:b7:45:7e:6a:49:
         ab:86:7c:5f:ed:37:7a:c7:e9:2a:91:d9:f5:f1:83:7a:de:fa:
         11:49:ad:5f:e5:5a:4a:6d:02:62:76:4d:24:db:34:2f:80:fe:
         5c:48:4a:c2:02:b7:10:c0:0d:55:bb:3d:d0:29:f2:fe:ba:b6:
         e3:6d:23:27:26:6c:4c:4e:33:c4:53:60:9a:90:5a:e8:34:af:
         e7:56:e6:4c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPOVkw80jrxPaNv7VPnXPuraO2YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE
QTA4RjE5MDAeFw0yNTAxMzAwOTQ1MDRaFw0yNTAyMDIyMTM1MDRaMDMxMTAvBgNV
BAMTKDhCMkE5QkNEQ0Q1NTFFMDdGOUM2MDk3Q0IzRjE3NkNFMTZBMTQ4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4yhxkAhg4zSMuQgxOO/Fxg/B
z1cHlWf50sh/CadXjpHr5nCA9frYL1AzwczecJ+EvbOHowa8RRd3MNrrqD+EawF4
ysU3M4rr0OzrXK1govDtCYuLG/4XpO2mU3eo8/SMSixZTS2jP6+mNFVTwaBCtSqP
9Inw5b8mzGIE6wGZDkmHBABZ9WdE6J36Mxuge+CdlOaN2WAINANwjKavMkLc11+7
+v1C1A526vspwJs88XTuSsjXWijCCQ18yMQyuidfQBO+V4F76bbaB41Agp+cyGjg
DdRTsGQYEjm4c06ZPMr5q0vc8up9gBaWMyVKj/DeVDAh1jQYIbjhNRXvsAX9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiyqbzc1VHgf5xgl8s/F2zhahSP0wHwYDVR0j
BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC
MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4
RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3
YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC
ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH2v4NukfwSJ1b+7nlQ+0Xdvr4iX4qBGNBUH
FW6CQlL0IoL8BB9sno0qjjFkxxAHd4Gc0NKx3+TZ/O7m9FF7DOtx7p1GYJgXS13N
ysgzX1gAoIg8DQTPSNLeyH9z0ZQVdHZwuL70eeakCd/qV+ExT78gnkJRLWXhGhtj
68GbnoDvEKMFCJXCtcsRRGmvCNypvBhdkJQwH/yDIJEcrU+TetK3N7pbUgdNIX0Q
Cqy8azK3RX5qSauGfF/tN3rH6SqR2fXxg3re+hFJrV/lWkptAmJ2TSTbNC+A/lxI
SsICtxDADVW7PdAp8v66tuNtIycmbExOM8RTYJqQWug0r+dW5kw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:12 2025 by rpki-client