Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File:                     28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier:          fGkQsTmbzFaK63LwURF3K4R2TM0VinVq6pYJe5oBrpM=
Subject key identifier:   74:BE:4C:9B:73:B7:FF:5F:7F:F2:27:EC:39:15:55:45:7E:08:45:6C
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       177D3C17E4617022C5FE831BB7DF53B2F43FA493
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number:          0173
Signing time:             Fri 31 Jan 2025 02:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 01:56:00 +0000
Manifest next update:     Mon 03 Feb 2025 05:37:00 +0000
Files and hashes:         1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=)
                          2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: jkenm5l/Yn/tc0NK3srzZODy9FOvju80Swg45K2wlrY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7d:3c:17:e4:61:70:22:c5:fe:83:1b:b7:df:53:b2:f4:3f:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: Jan 31 01:56:00 2025 GMT
            Not After : Feb  3 05:37:00 2025 GMT
        Subject: CN=74BE4C9B73B7FF5F7FF227EC391555457E08456C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:2e:ec:0d:74:1a:da:03:9e:dc:c1:cc:f3:
                    33:7c:2f:58:62:75:1e:9b:ac:89:08:14:c9:49:51:
                    be:57:52:2b:61:7d:2c:14:d6:58:6d:79:e0:fd:0f:
                    1c:29:1c:d3:59:de:10:14:7d:fe:ac:c3:61:bd:15:
                    fb:5f:3c:6e:2a:46:d6:10:34:a9:1d:95:b5:ad:f2:
                    d1:b2:78:03:55:3c:45:bc:92:3b:e2:fc:8a:bd:3b:
                    e5:fb:76:b2:e9:31:31:9f:b2:7f:f1:30:0a:37:dc:
                    d5:4e:a6:ab:95:5f:a8:84:83:0c:01:df:c3:14:e3:
                    3e:ae:5c:88:3d:b4:29:17:da:9c:2f:17:70:4a:db:
                    1a:90:b4:0b:72:ca:9b:ae:92:a6:08:5d:3b:95:9d:
                    3e:0b:7e:60:6f:c1:65:34:0b:8d:bb:ba:ad:e0:f0:
                    be:c1:76:04:9a:c4:7f:1f:db:60:b6:1f:ee:63:a0:
                    60:fe:51:2d:a7:62:8c:44:ef:b6:56:ab:f3:b0:69:
                    f0:06:f6:1d:c3:a0:d4:8d:f5:7a:44:aa:92:6b:32:
                    c4:82:35:d4:a0:de:62:3c:31:ae:1b:72:e5:6e:9b:
                    5b:f9:8a:04:88:f9:0b:91:fc:66:a1:71:ee:dd:75:
                    3b:34:3f:64:c7:ba:10:fd:ad:7c:54:87:75:a7:f6:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:4C:9B:73:B7:FF:5F:7F:F2:27:EC:39:15:55:45:7E:08:45:6C
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:4b:17:8c:8f:1a:d5:32:bf:d6:c9:72:fb:ec:77:c2:46:
         fd:44:d7:75:96:ae:e8:be:c2:b8:6a:d0:e0:f7:d3:2b:e4:71:
         d7:52:47:dc:a0:9a:69:2b:dd:9d:3a:31:e7:5f:cc:96:39:00:
         6e:56:b8:eb:e8:c6:d0:f8:70:ec:c0:9f:6c:b9:85:d3:a1:96:
         c2:1a:05:ed:48:1d:bb:05:6b:8c:43:cf:c4:46:08:db:2d:e3:
         4c:52:e6:10:f4:c7:5b:91:e0:32:63:e6:f2:0f:7d:ce:1b:95:
         fd:14:a5:1d:1c:95:e5:f2:3c:d8:6b:e9:ed:94:fa:3e:06:8e:
         54:f5:6c:f3:4e:81:14:ad:38:a4:d0:fc:ca:48:1d:0c:a5:cb:
         b6:a0:5d:04:00:8f:58:34:4d:92:80:df:b3:69:fa:60:90:6c:
         c7:3d:5e:cc:64:18:96:48:92:c9:4d:ba:d8:93:e7:db:1f:91:
         05:df:44:e9:7c:1f:73:cd:47:da:c1:98:30:54:08:0f:06:92:
         56:49:69:95:13:f5:0e:91:cc:40:82:0d:cb:bb:4f:59:73:88:
         2b:df:2e:b6:50:43:f7:aa:14:94:17:14:a3:18:99:5f:d7:ad:
         f1:b1:99:38:41:9d:d1:69:3f:28:e9:10:e1:e4:70:82:e1:ae:
         88:a8:4e:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF308F+RhcCLF/oMbt99TsvQ/pJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE
ODA3NzIxNTAeFw0yNTAxMzEwMTU2MDBaFw0yNTAyMDMwNTM3MDBaMDMxMTAvBgNV
BAMTKDc0QkU0QzlCNzNCN0ZGNUY3RkYyMjdFQzM5MTU1NTQ1N0UwODQ1NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKC7sDXQa2gOe3MHM8zN8L1hi
dR6brIkIFMlJUb5XUithfSwU1lhteeD9DxwpHNNZ3hAUff6sw2G9FftfPG4qRtYQ
NKkdlbWt8tGyeANVPEW8kjvi/Iq9O+X7drLpMTGfsn/xMAo33NVOpquVX6iEgwwB
38MU4z6uXIg9tCkX2pwvF3BK2xqQtAtyypuukqYIXTuVnT4LfmBvwWU0C427uq3g
8L7BdgSaxH8f22C2H+5joGD+US2nYoxE77ZWq/OwafAG9h3DoNSN9XpEqpJrMsSC
NdSg3mI8Ma4bcuVum1v5igSI+QuR/Gahce7ddTs0P2THuhD9rXxUh3Wn9uDjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdL5Mm3O3/19/8ifsORVVRX4IRWwwHwYDVR0j
BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1
QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3
NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi
MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4
NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGljSxeMjxrVMr/WyXL77HfCRv1E13WWrui+
wrhq0OD30yvkcddSR9ygmmkr3Z06MedfzJY5AG5WuOvoxtD4cOzAn2y5hdOhlsIa
Be1IHbsFa4xDz8RGCNst40xS5hD0x1uR4DJj5vIPfc4blf0UpR0cleXyPNhr6e2U
+j4GjlT1bPNOgRStOKTQ/MpIHQyly7agXQQAj1g0TZKA37Np+mCQbMc9XsxkGJZI
kslNutiT59sfkQXfROl8H3PNR9rBmDBUCA8GklZJaZUT9Q6RzECCDcu7T1lziCvf
LrZQQ/eqFJQXFKMYmV/XrfGxmThBndFpPyjpEOHkcILhroioTsk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:18 2025 by rpki-client