Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
File:                     10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json)
Hash identifier:          CaecnM87ROHp8vSsKn3T5+Bxdr1OU8VD3DUxxcB0Pxw=
Subject key identifier:   8F:57:E3:F3:84:C6:FC:85:48:37:D9:D6:BD:0A:27:DB:B3:90:4B:D5
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       31FA41C156F579BD9E173D333462D37276702058
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
Manifest number:          049F
Signing time:             Thu 30 Jan 2025 11:30:56 +0000
Manifest this update:     Thu 30 Jan 2025 11:25:56 +0000
Manifest next update:     Sun 02 Feb 2025 18:06:56 +0000
Files and hashes:         1: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: FXD9Xl9HQjE5rhTpZsmUh0+M9Gq4Zq3tqVQkODiT8rI=)
                          2: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: Gk747J2jBNpEXtir02tl58RV5f1YzhrWN3iKgxbQ7KE=)
                          3: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: eL7Y1izm4AtK8cu6bXuRjAi2YgKXj79o6hvPdbF1OWQ=)
                          4: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: hPcgJjVDE9m3tBKtqfCMvkuvUEnp8UYizUZsK3IRz8k=)
                          5: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: jdirswKR/sMhBcZEZCb+hNJxtZAgI0yR1Pp2R3iATb0=)
                          6: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: pBwebMpuYYJXTb5pShB2CNNWZl6DNw4TGc/uma6DMgE=)
                          7: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: H7qdxG0CJs/yYiQYilPVBOjCY0BNB2JobVkWTO7DC7g=)
                          8: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: 9WCeU5uurKdIma/RjBrGY6SbYw575daktwtbDsB0hn4=)
                          9: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: U+Nn2r5Sn/4yz+Dw8s2J+Cn+SRVePHMvbt6ShZoiqDk=)
                          10: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: ljwF6ITVZZqVtcMOWEgbQb3tCP2RBo+I4AZDViUqEJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fa:41:c1:56:f5:79:bd:9e:17:3d:33:34:62:d3:72:76:70:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jan 30 11:25:56 2025 GMT
            Not After : Feb  2 18:06:56 2025 GMT
        Subject: CN=8F57E3F384C6FC854837D9D6BD0A27DBB3904BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:2b:55:82:75:34:fb:9d:e7:06:e1:dd:b0:
                    0e:57:20:35:ef:62:00:bd:e5:6c:82:f7:2f:b2:a7:
                    ac:07:1e:81:c9:6a:35:3a:e7:21:bb:6a:2c:3e:ff:
                    6c:9a:2c:1b:e9:a0:3c:17:7f:43:a8:59:41:ef:13:
                    74:ce:5f:1a:b1:72:1f:d1:5f:64:00:a1:5f:53:26:
                    54:38:5f:8d:71:76:3c:9c:3c:ee:ac:6a:f9:d8:8c:
                    c0:dc:11:b1:6a:56:10:21:2a:94:0f:e4:7f:b1:c0:
                    69:dc:d5:4a:2f:17:f7:3f:74:6a:3c:22:64:2d:7f:
                    8a:17:5c:0e:c5:18:c9:d1:a9:d9:46:79:a4:47:62:
                    54:ad:cc:46:9e:d4:9c:40:8d:6e:81:18:b8:a6:c4:
                    2e:37:46:7d:3c:3b:32:7a:01:be:a7:2a:7b:72:f1:
                    eb:f2:28:61:9d:4e:58:2f:c9:0a:37:bb:94:42:2f:
                    cc:b5:db:58:0a:a9:a6:a9:7e:30:87:b5:8e:f7:cb:
                    89:c2:2c:f0:a8:24:04:96:3f:ab:75:c4:27:91:3e:
                    f4:2a:71:3b:3a:18:fc:b3:cf:5b:68:dd:bb:e9:1e:
                    e6:a9:cc:de:77:0f:54:a2:77:7f:08:9c:5a:ed:6d:
                    bb:a4:3e:bc:80:da:55:f5:b9:ee:30:e2:d4:67:9a:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:57:E3:F3:84:C6:FC:85:48:37:D9:D6:BD:0A:27:DB:B3:90:4B:D5
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:be:54:ab:ac:12:c8:84:5c:d5:48:9d:d5:15:0b:c0:e7:e2:
         95:9c:14:93:90:17:fd:57:c2:5d:16:a6:1a:53:00:5a:e9:60:
         57:ce:3b:9f:57:d5:93:9b:69:bd:4d:81:53:c2:18:f5:b3:c2:
         2e:25:cf:59:b0:26:f7:88:98:6b:8c:22:e8:63:d9:dc:24:fa:
         1a:40:d6:65:f3:f1:4c:8b:f8:54:5f:2a:57:dc:cc:87:06:eb:
         60:e2:b1:8a:8e:8e:4d:b3:d6:f5:0d:c8:e1:bb:c2:48:47:0f:
         89:8b:cc:1d:83:1e:85:ab:6e:80:ce:80:46:36:12:28:dc:89:
         ef:f6:a4:c6:99:45:db:00:54:e0:96:67:26:aa:1b:b8:0a:ab:
         87:56:72:70:44:9d:af:fc:62:cb:dc:12:b0:37:6d:db:28:31:
         33:64:3d:44:83:40:a7:bf:3a:a8:8d:09:ee:d0:64:92:20:78:
         62:34:ca:4a:22:d5:bc:fb:d1:aa:06:2e:7f:d3:57:29:db:76:
         08:96:4a:3f:40:96:8c:15:b0:73:74:d3:f8:1e:97:72:45:db:
         e0:a7:f0:f8:22:20:cc:8d:c8:c1:11:64:bd:b2:aa:f2:de:76:
         60:75:9e:41:0b:2a:3c:30:29:e9:33:06:a1:79:6b:05:00:84:
         a7:1e:55:62
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMfpBwVb1eb2eFz0zNGLTcnZwIFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy
N0MxOTFBNjAeFw0yNTAxMzAxMTI1NTZaFw0yNTAyMDIxODA2NTZaMDMxMTAvBgNV
BAMTKDhGNTdFM0YzODRDNkZDODU0ODM3RDlENkJEMEEyN0RCQjM5MDRCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8CtVgnU0+53nBuHdsA5XIDXv
YgC95WyC9y+yp6wHHoHJajU65yG7aiw+/2yaLBvpoDwXf0OoWUHvE3TOXxqxch/R
X2QAoV9TJlQ4X41xdjycPO6savnYjMDcEbFqVhAhKpQP5H+xwGnc1UovF/c/dGo8
ImQtf4oXXA7FGMnRqdlGeaRHYlStzEae1JxAjW6BGLimxC43Rn08OzJ6Ab6nKnty
8evyKGGdTlgvyQo3u5RCL8y121gKqaapfjCHtY73y4nCLPCoJASWP6t1xCeRPvQq
cTs6GPyzz1to3bvpHuapzN53D1Sid38InFrtbbukPryA2lX1ue4w4tRnmsQJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj1fj84TG/IVIN9nWvQon27OQS9UwHwYDVR0j
BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG
QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx
OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5
ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy
MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACe+VKusEsiEXNVIndUVC8Dn4pWcFJOQF/1X
wl0WphpTAFrpYFfOO59X1ZObab1NgVPCGPWzwi4lz1mwJveImGuMIuhj2dwk+hpA
1mXz8UyL+FRfKlfczIcG62DisYqOjk2z1vUNyOG7wkhHD4mLzB2DHoWrboDOgEY2
Eijcie/2pMaZRdsAVOCWZyaqG7gKq4dWcnBEna/8YsvcErA3bdsoMTNkPUSDQKe/
OqiNCe7QZJIgeGI0ykoi1bz70aoGLn/TVynbdgiWSj9AlowVsHN00/gel3JF2+Cn
8PgiIMyNyMERZL2yqvLedmB1nkELKjwwKekzBqF5awUAhKceVWI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:13 2025 by rpki-client