Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft
File:                     2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json)
Hash identifier:          yra0Epj5dItHVcf6qjfTDhRmG03XRwBKi4Ud1wMykM4=
Subject key identifier:   D1:0F:7C:CF:2E:81:98:F3:74:86:F7:51:7E:48:46:99:23:BB:72:D9
Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0
Certificate issuer:       /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0
Certificate serial:       74FDD7F52655CA3AA0ED303106E0C43719F593D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft
Manifest number:          2A
Signing time:             Thu 30 Jan 2025 05:51:45 +0000
Manifest this update:     Thu 30 Jan 2025 05:46:45 +0000
Manifest next update:     Sun 02 Feb 2025 06:11:45 +0000
Files and hashes:         1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: rnxDyHcVdyz350H5vfylboQf4uteFhaZEaALfKHvdmg=)
                          2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fd:d7:f5:26:55:ca:3a:a0:ed:30:31:06:e0:c4:37:19:f5:93:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0
        Validity
            Not Before: Jan 30 05:46:45 2025 GMT
            Not After : Feb  2 06:11:45 2025 GMT
        Subject: CN=D10F7CCF2E8198F37486F7517E48469923BB72D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:c3:68:10:95:d9:3d:f2:96:d4:2b:f5:d9:
                    7e:8f:75:e9:fd:d5:9b:b5:77:3e:84:be:69:fe:57:
                    6d:f9:2a:e0:45:99:44:b6:d8:dd:04:f1:95:4b:6d:
                    1b:92:85:8c:b2:cd:d8:f6:77:8f:d5:a7:b8:ce:39:
                    7f:e8:6a:09:10:fd:7b:63:a6:e7:2f:2b:4d:08:f7:
                    a0:96:73:24:62:db:95:72:42:bd:ac:a2:8d:85:33:
                    78:e7:57:29:6b:84:c8:8b:6c:c9:c8:a7:ce:f0:d6:
                    c3:3a:87:61:bc:66:64:fc:ac:a7:02:5c:8f:9f:72:
                    c1:ef:47:71:bd:ac:12:39:0f:97:e7:59:8a:c0:82:
                    26:91:85:ad:7d:33:f4:8e:25:21:f3:f9:0d:67:b4:
                    39:7c:39:e1:9f:52:8e:e9:86:03:7d:03:b8:26:1c:
                    b0:bf:e7:9b:09:43:76:a4:84:2d:ce:35:18:3a:82:
                    51:ae:dd:dc:e2:fe:84:b8:e6:89:e4:8e:ab:04:de:
                    30:3b:62:c8:3d:02:1a:11:65:84:ac:d2:69:97:ca:
                    18:ff:00:ee:56:82:5c:2b:b3:6c:f8:44:8a:66:5f:
                    5d:34:fa:ac:3e:62:8b:6f:eb:85:4f:39:2d:5d:4a:
                    89:c9:45:39:3c:f4:cf:4e:b7:1e:20:50:f2:64:44:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:7C:CF:2E:81:98:F3:74:86:F7:51:7E:48:46:99:23:BB:72:D9
            X509v3 Authority Key Identifier:
                keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:a7:2e:d5:43:51:49:dd:59:77:18:8f:d0:dd:ee:f5:a4:
         58:e0:26:d6:75:56:49:c0:0e:33:ca:c3:fc:f1:59:29:17:8a:
         6d:26:f1:4f:eb:22:d7:23:87:45:48:80:64:15:1e:9c:9c:98:
         97:b5:bc:81:26:ef:a3:a1:be:3a:f6:a0:6e:ef:b0:a7:ac:a4:
         0b:7a:20:2a:d3:53:57:da:66:ca:a0:41:fa:c2:44:a7:15:9c:
         d9:af:45:cb:45:2f:47:59:22:27:0d:61:0e:09:84:6f:17:58:
         73:b4:1f:99:41:6a:4d:28:64:98:08:a2:2e:b4:b8:e6:ef:26:
         3b:79:ca:b3:74:96:58:5b:c9:02:c6:4d:95:5a:d7:1f:90:3d:
         3b:57:f9:c5:b7:c6:9f:47:86:18:2a:89:62:67:b8:34:75:8e:
         cf:8e:96:cf:d8:46:24:4f:8e:ac:1d:82:12:12:1d:36:20:3e:
         7d:d4:71:b8:cd:fa:43:14:be:69:0c:d6:6a:df:36:e7:e5:5a:
         d3:34:05:5a:9c:39:ec:69:a0:9a:d8:49:44:59:58:81:fc:aa:
         83:b4:de:ff:e6:fd:c8:d3:d0:7d:00:c2:b8:1e:80:48:ed:44:
         04:66:d1:b7:9f:8f:bd:37:98:19:a1:9c:4d:95:6d:2b:b6:83:
         ba:93:be:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdP3X9SZVyjqg7TAxBuDENxn1k9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx
MUZERjNCMDAeFw0yNTAxMzAwNTQ2NDVaFw0yNTAyMDIwNjExNDVaMDMxMTAvBgNV
BAMTKEQxMEY3Q0NGMkU4MTk4RjM3NDg2Rjc1MTdFNDg0Njk5MjNCQjcyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQcNoEJXZPfKW1Cv12X6Pden9
1Zu1dz6Evmn+V235KuBFmUS22N0E8ZVLbRuShYyyzdj2d4/Vp7jOOX/oagkQ/Xtj
pucvK00I96CWcyRi25VyQr2soo2FM3jnVylrhMiLbMnIp87w1sM6h2G8ZmT8rKcC
XI+fcsHvR3G9rBI5D5fnWYrAgiaRha19M/SOJSHz+Q1ntDl8OeGfUo7phgN9A7gm
HLC/55sJQ3akhC3ONRg6glGu3dzi/oS45onkjqsE3jA7Ysg9AhoRZYSs0mmXyhj/
AO5Wglwrs2z4RIpmX100+qw+Yotv64VPOS1dSonJRTk89M9Otx4gUPJkRP6dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0Q98zy6BmPN0hvdRfkhGmSO7ctkwHwYDVR0j
BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw
MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE
RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0
N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF
RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEkupy7VQ1FJ3Vl3GI/Q3e71pFjgJtZ1VknA
DjPKw/zxWSkXim0m8U/rItcjh0VIgGQVHpycmJe1vIEm76Ohvjr2oG7vsKespAt6
ICrTU1faZsqgQfrCRKcVnNmvRctFL0dZIicNYQ4JhG8XWHO0H5lBak0oZJgIoi60
uObvJjt5yrN0llhbyQLGTZVa1x+QPTtX+cW3xp9HhhgqiWJnuDR1js+Ols/YRiRP
jqwdghISHTYgPn3UcbjN+kMUvmkM1mrfNuflWtM0BVqcOexpoJrYSURZWIH8qoO0
3v/m/cjT0H0AwrgegEjtRARm0befj703mBmhnE2VbSu2g7qTvtk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:43 2025 by rpki-client