Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
File:                     490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json)
Hash identifier:          xwdxV2TbElLnEsJZY8jMHQPChr6AHVVubmCkZo5ryU0=
Subject key identifier:   F2:49:CB:08:E6:CA:36:73:8F:25:BC:1A:F2:1C:2C:9C:A4:01:7E:0F
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       33B0354317E55AE58D13617EB8B326B32C9A9A7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
Manifest number:          04A8
Signing time:             Fri 31 Jan 2025 15:41:00 +0000
Manifest this update:     Fri 31 Jan 2025 15:36:00 +0000
Manifest next update:     Mon 03 Feb 2025 20:45:00 +0000
Files and hashes:         1: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: i0/B7nXI703MPmdWfX/Z+J0Srfwgd7YoJQtpAqoqaYA=)
                          2: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: i0k8diaTpdGEA+1RnifMXA8toR7ceP46n+4PEFdgPCI=)
                          3: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=)
                          4: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: d+qfmJX6WG8MNu+fGfy0UM9kQ8qVSJz1W4rWMZJ2HL0=)
                          5: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: 2xjLAoUthqLolTYw8fUKOsWqs/c7S8uY9JLSigkrYUk=)
                          6: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: EwNPctz3GEA8b4HEhWJU+9J961tRLY7I9c2qIR6c9pU=)
                          7: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: pXz40XnCPDHjX6ETU549n8DZU0gFVrvM11PQ2EVGj3Q=)
                          8: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=)
                          9: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: W5YLdWhnOdLeAXEY1MixBlpWbhGhQrghXBcYMuYDx9E=)
                          10: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 4bch934Vv2mVexj5yORxeulNe94hD9yd+8wpN2L0zkw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:35:43:17:e5:5a:e5:8d:13:61:7e:b8:b3:26:b3:2c:9a:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Jan 31 15:36:00 2025 GMT
            Not After : Feb  3 20:45:00 2025 GMT
        Subject: CN=F249CB08E6CA36738F25BC1AF21C2C9CA4017E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:c0:a3:11:55:22:9b:1c:da:77:07:11:6c:
                    17:a1:9b:a4:25:44:97:07:ab:9b:fa:53:76:dd:43:
                    3a:2e:71:12:0b:f5:0d:80:8c:e4:9a:ec:85:9c:85:
                    9a:4e:fb:43:2d:63:5d:63:e4:0b:7d:0c:82:df:66:
                    b2:59:dc:61:ca:2d:e8:f1:06:77:4a:1e:63:09:13:
                    f9:0a:94:aa:2d:74:3f:53:2d:a6:67:94:fd:8a:d1:
                    bf:da:1c:39:1d:1d:c1:59:b1:45:a7:e1:53:6a:2a:
                    a3:15:d6:eb:16:80:1d:1c:c8:87:d8:46:a2:aa:9e:
                    15:4b:c8:20:94:23:32:4f:de:c3:12:c8:0d:be:a4:
                    26:01:59:96:e9:71:f1:02:dd:f3:a9:2a:41:79:34:
                    51:be:7a:40:40:95:e5:c7:56:67:3d:dd:e8:2e:34:
                    ee:d0:55:a7:05:b4:d9:7d:6f:4a:8c:2a:02:64:98:
                    1c:e8:33:71:a9:7e:eb:f3:1a:5c:b5:c9:c0:d2:56:
                    f5:fd:eb:8d:ac:bf:f5:61:65:81:d0:d5:96:a1:75:
                    69:5a:9a:6a:f4:ea:2e:5b:c5:c1:9c:23:60:9e:07:
                    ca:07:0e:b8:a8:28:0b:97:dd:3b:90:4b:e1:5e:b8:
                    5a:6d:59:b8:85:bc:fb:97:42:a9:96:3c:18:d9:6f:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:CB:08:E6:CA:36:73:8F:25:BC:1A:F2:1C:2C:9C:A4:01:7E:0F
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:54:8f:fa:3c:70:07:31:e6:3a:8b:24:57:16:0b:ab:e9:99:
         25:37:5d:aa:8a:72:c6:9f:de:58:01:e6:d6:84:4f:ad:f2:17:
         d0:a7:fb:63:53:f9:10:bb:e6:9f:f8:c8:2a:00:3d:a5:7d:6d:
         b5:4e:7d:c5:98:0f:11:1e:27:4e:74:f3:50:45:84:13:27:ad:
         88:81:1d:9e:4b:ee:84:cc:b2:1c:8e:25:c9:a6:0d:03:1c:ce:
         d1:17:ba:09:8c:b6:38:fc:03:17:b6:65:c4:9d:fa:e2:92:63:
         02:dd:08:3c:de:3b:bd:f3:b0:12:e2:2c:ec:f9:0b:fe:10:5b:
         7b:55:09:18:26:10:6c:2d:f1:d9:1f:8a:9d:cc:f6:9a:92:c8:
         3c:19:35:e8:31:35:75:ea:e8:5c:a9:9e:53:ba:62:66:48:63:
         c0:2d:9d:54:7b:60:13:6a:43:d9:82:64:6e:7e:2a:56:54:47:
         21:3d:5c:97:b3:4d:db:35:42:27:7e:b6:da:fa:82:15:e9:b9:
         dd:c4:1a:da:e3:1d:3d:af:e6:a2:96:92:c2:65:3b:1b:38:19:
         7c:a6:8f:69:cb:2a:e2:76:7e:63:48:a5:05:fc:aa:4b:9d:a5:
         03:d7:f9:d8:1d:f9:f6:b9:26:46:54:11:b8:50:42:4a:8e:ab:
         09:ba:60:6a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM7A1QxflWuWNE2F+uLMmsyyamnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNTAxMzExNTM2MDBaFw0yNTAyMDMyMDQ1MDBaMDMxMTAvBgNV
BAMTKEYyNDlDQjA4RTZDQTM2NzM4RjI1QkMxQUYyMUMyQzlDQTQwMTdFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A8CjEVUimxzadwcRbBehm6Ql
RJcHq5v6U3bdQzoucRIL9Q2AjOSa7IWchZpO+0MtY11j5At9DILfZrJZ3GHKLejx
BndKHmMJE/kKlKotdD9TLaZnlP2K0b/aHDkdHcFZsUWn4VNqKqMV1usWgB0cyIfY
RqKqnhVLyCCUIzJP3sMSyA2+pCYBWZbpcfEC3fOpKkF5NFG+ekBAleXHVmc93egu
NO7QVacFtNl9b0qMKgJkmBzoM3GpfuvzGly1ycDSVvX9642sv/VhZYHQ1ZahdWla
mmr06i5bxcGcI2CeB8oHDrioKAuX3TuQS+FeuFptWbiFvPuXQqmWPBjZb/1tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8knLCObKNnOPJbwa8hwsnKQBfg8wHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl
ZTQtM2VmNGI4ZDMwMmRkLzAvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3
QkM1MDU3QUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGZUj/o8cAcx5jqLJFcWC6vpmSU3XaqKcsaf
3lgB5taET63yF9Cn+2NT+RC75p/4yCoAPaV9bbVOfcWYDxEeJ05081BFhBMnrYiB
HZ5L7oTMshyOJcmmDQMcztEXugmMtjj8Axe2ZcSd+uKSYwLdCDzeO73zsBLiLOz5
C/4QW3tVCRgmEGwt8dkfip3M9pqSyDwZNegxNXXq6FypnlO6YmZIY8AtnVR7YBNq
Q9mCZG5+KlZURyE9XJezTds1Qid+ttr6ghXpud3EGtrjHT2v5qKWksJlOxs4GXym
j2nLKuJ2fmNIpQX8qkudpQPX+dgd+fa5JkZUEbhQQkqOqwm6YGo=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:59 2025 by rpki-client