Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft
File:                     AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json)
Hash identifier:          zQI07mVzSNXio/apEniLKS+xuUBDcWW5zsxW8nIrSM0=
Subject key identifier:   2E:9D:B6:FC:8B:B2:A3:F8:EC:43:ED:F6:19:4B:4B:7E:DF:E8:A1:3F
Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C
Certificate issuer:       /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C
Certificate serial:       688919D22D3E284DF53D4C4DC3E2A538FDBAC349
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft
Manifest number:          04A5
Signing time:             Thu 30 Jan 2025 23:11:03 +0000
Manifest this update:     Thu 30 Jan 2025 23:06:03 +0000
Manifest next update:     Mon 03 Feb 2025 04:37:03 +0000
Files and hashes:         1: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: gdiZ+9B8KYHztol8GGjqhlAvnuN313/tNDfyNie4eG4=)
                          2: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Y4jHaeY4QidDK/340ECCQ/4I5FQ55qG4YZL2AdrbzPk=)
                          3: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: sOYbE2bPNoIeusIS5/gU9/kZM6hoRlA7UGSNAkyE66E=)
                          4: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: sJLiD+0ejmoupyMGVx6CirdLJG++4SFUftxtfOcobHI=)
                          5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: u8Au9LMYXcHGihCwMXA0rXB8fgKyjCiixCQrB4ejbv0=)
                          6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: cI0UbQGK9a5poG2NKDvPV81pHS2ve8ooKRdlBJ4PSfs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:89:19:d2:2d:3e:28:4d:f5:3d:4c:4d:c3:e2:a5:38:fd:ba:c3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C
        Validity
            Not Before: Jan 30 23:06:03 2025 GMT
            Not After : Feb  3 04:37:03 2025 GMT
        Subject: CN=2E9DB6FC8BB2A3F8EC43EDF6194B4B7EDFE8A13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:c4:81:a8:63:46:17:16:22:d1:ce:f2:62:
                    05:3c:d9:33:a8:11:86:4c:62:97:73:1b:5f:a1:be:
                    09:9f:2b:ae:e8:d1:be:7b:6b:e1:47:01:6b:cf:84:
                    ce:07:d6:50:4a:e6:1b:5b:b9:ed:d4:8a:4a:75:cc:
                    74:b7:26:e0:27:45:e0:3c:de:52:da:4e:c5:a9:f2:
                    3d:76:d3:2a:78:d8:7a:0a:cc:57:a3:7d:bc:d1:77:
                    7a:3b:e8:0a:e9:3f:95:8e:79:a5:e6:b0:08:0c:f5:
                    a6:a4:b7:e0:4b:00:64:f1:f3:12:59:51:45:a3:d0:
                    b5:32:b6:b7:7e:9d:6a:d6:c9:91:ae:f1:33:2b:98:
                    2a:f8:ae:40:d9:f8:3e:2b:4f:13:be:07:78:63:4c:
                    7f:a1:dd:f5:4b:ff:9b:73:f0:b8:49:8b:d6:43:46:
                    12:31:95:da:74:c9:ab:19:a5:09:25:f2:b0:61:0d:
                    3b:b0:73:70:b1:ad:9f:13:2b:f1:6c:05:5f:1c:4c:
                    32:5e:e9:0e:f3:d0:1d:82:16:b5:85:a7:4b:f9:67:
                    36:cd:8a:8a:03:ac:0c:72:8f:d5:82:c0:98:a4:0d:
                    91:fb:25:4a:e4:a1:e7:69:b1:dc:ee:78:b1:58:4e:
                    ab:07:8c:ab:84:7f:a5:b2:4e:e5:78:e6:05:4a:11:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:B6:FC:8B:B2:A3:F8:EC:43:ED:F6:19:4B:4B:7E:DF:E8:A1:3F
            X509v3 Authority Key Identifier:
                keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:5e:13:f5:fa:98:9e:77:45:08:d9:2d:03:fc:42:5d:22:
         1f:97:3f:d8:d9:00:88:d4:fc:f3:bb:b8:d2:df:9c:a1:6a:63:
         1f:2c:d8:1f:b1:2a:0e:bf:f3:72:2f:2b:39:44:d2:a2:e9:ae:
         60:d8:23:9f:b9:09:11:7e:83:a3:ff:45:ba:e1:30:0f:e9:1b:
         a1:90:f7:1b:2c:0f:62:eb:e7:08:16:db:de:56:c7:b0:72:5a:
         31:40:8b:1c:bb:4f:6d:32:ef:06:42:2a:6d:09:9f:a9:14:89:
         fb:06:d6:f6:ef:a2:c2:4a:2e:db:7b:9e:8f:88:ef:3a:83:58:
         7f:18:54:88:d3:f9:8e:d4:23:e6:99:77:0b:83:68:d5:72:fa:
         62:7d:5d:5b:d2:d8:58:fc:34:27:2c:e3:85:5b:a9:99:a6:0f:
         f1:b9:ab:56:d3:07:07:7a:87:0d:82:3c:1f:1c:b6:6a:7b:22:
         af:01:31:91:9c:86:e1:fd:71:cc:83:27:fa:73:d3:3b:3a:77:
         85:1c:93:bc:27:d9:3a:92:07:31:18:1a:1e:6a:92:7f:df:fe:
         a5:8c:e4:f9:b0:04:35:38:98:d5:42:5b:e6:94:a1:8e:d3:c8:
         18:a4:e7:66:aa:4a:4a:03:d2:2d:c7:2b:d6:39:0e:41:ad:0a:
         80:68:db:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaIkZ0i0+KE31PUxNw+KlOP26w0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx
MDZBNTk0QzAeFw0yNTAxMzAyMzA2MDNaFw0yNTAyMDMwNDM3MDNaMDMxMTAvBgNV
BAMTKDJFOURCNkZDOEJCMkEzRjhFQzQzRURGNjE5NEI0QjdFREZFOEExM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0MSBqGNGFxYi0c7yYgU82TOo
EYZMYpdzG1+hvgmfK67o0b57a+FHAWvPhM4H1lBK5htbue3Uikp1zHS3JuAnReA8
3lLaTsWp8j120yp42HoKzFejfbzRd3o76ArpP5WOeaXmsAgM9aakt+BLAGTx8xJZ
UUWj0LUytrd+nWrWyZGu8TMrmCr4rkDZ+D4rTxO+B3hjTH+h3fVL/5tz8LhJi9ZD
RhIxldp0yasZpQkl8rBhDTuwc3CxrZ8TK/FsBV8cTDJe6Q7z0B2CFrWFp0v5ZzbN
iooDrAxyj9WCwJikDZH7JUrkoedpsdzueLFYTqsHjKuEf6WyTuV45gVKEZbpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULp22/Iuyo/jsQ+32GUtLft/ooT8wHwYDVR0j
BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF
NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB
NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm
ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE
QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEKMXhP1+pied0UI2S0D/EJdIh+XP9jZAIjU
/PO7uNLfnKFqYx8s2B+xKg6/83IvKzlE0qLprmDYI5+5CRF+g6P/RbrhMA/pG6GQ
9xssD2Lr5wgW295Wx7ByWjFAixy7T20y7wZCKm0Jn6kUifsG1vbvosJKLtt7no+I
7zqDWH8YVIjT+Y7UI+aZdwuDaNVy+mJ9XVvS2Fj8NCcs44VbqZmmD/G5q1bTBwd6
hw2CPB8ctmp7Iq8BMZGchuH9ccyDJ/pz0zs6d4Uck7wn2TqSBzEYGh5qkn/f/qWM
5PmwBDU4mNVCW+aUoY7TyBik52aqSkoD0i3HK9Y5DkGtCoBo21k=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:59 2025 by rpki-client