Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
File:                     665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json)
Hash identifier:          Ak1xAUT/nHe88ts5gOXG9ezDCfUvtYJtI6kRboq48sI=
Subject key identifier:   74:F7:C0:55:38:9E:BA:96:2C:65:CB:48:2C:6D:B9:47:58:41:89:68
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Certificate issuer:       /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial:       31FD2675CE1BB731E30785F55F015ED7609FD74A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
Manifest number:          01A3
Signing time:             Fri 31 Jan 2025 12:30:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:25:49 +0000
Manifest next update:     Mon 03 Feb 2025 17:59:49 +0000
Files and hashes:         1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 6NM2JtdhX90m+VlJDD0Xg2sEmVKmsuZw8hZh/CIJeyM=)
                          2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: 5NKocRK927f+PthCxNwWyuJcW5U+abm7JPSlEEusBcA=)
                          3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: Iwe0dzDJZkpbM2oh646F2V9fsbgZmXXnVXfbPIdM3Aw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:26:75:ce:1b:b7:31:e3:07:85:f5:5f:01:5e:d7:60:9f:d7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
        Validity
            Not Before: Jan 31 12:25:49 2025 GMT
            Not After : Feb  3 17:59:49 2025 GMT
        Subject: CN=74F7C055389EBA962C65CB482C6DB94758418968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:f0:8c:f9:41:3c:95:89:20:38:39:0c:4b:
                    9c:e0:5d:30:0f:95:0a:db:c4:97:8f:09:63:b0:b1:
                    44:f8:d1:8a:b2:c7:54:6a:49:b5:0a:19:1b:b1:58:
                    99:3e:21:8a:04:ff:b7:45:83:bc:56:ea:df:0d:a9:
                    0d:86:a4:40:45:ef:4b:8a:5d:08:f7:3f:ce:9c:37:
                    77:ca:40:2f:eb:43:58:e2:f2:8b:9b:1e:a6:c4:94:
                    b2:25:bc:08:88:dd:63:9a:32:b0:33:ea:48:8f:31:
                    02:d8:df:ae:a9:2d:08:95:9a:89:b7:e9:2c:30:3d:
                    f5:8f:96:a4:26:9d:f1:aa:44:bf:b2:4a:be:93:36:
                    48:35:aa:1d:83:a7:53:53:38:b6:7c:bd:49:cc:6e:
                    da:bf:87:f8:84:97:8b:b7:22:45:a6:a5:27:fb:e6:
                    9c:86:76:e8:ce:25:c1:ed:57:bc:8b:1a:35:03:56:
                    7d:41:e7:b8:c0:e2:f0:ac:63:44:52:68:f2:26:1f:
                    2a:01:2c:40:bc:12:b2:a1:cc:5b:ba:1b:03:00:44:
                    9a:15:ad:5d:eb:87:6f:01:45:57:7a:b2:d2:88:9f:
                    dd:a2:84:8e:44:86:29:a5:2f:dd:ce:d7:e7:84:f6:
                    3d:2d:13:87:e2:c1:c8:84:21:94:f2:b5:b7:74:cc:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:C0:55:38:9E:BA:96:2C:65:CB:48:2C:6D:B9:47:58:41:89:68
            X509v3 Authority Key Identifier:
                keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:fe:6c:d0:11:91:a5:88:2e:05:00:76:b7:c4:e7:78:8c:
         bd:10:fd:bd:6d:cf:07:95:f6:60:89:47:8e:0e:ab:ce:65:1f:
         18:68:60:67:41:1c:8e:ad:7b:cd:31:d5:3c:62:6d:aa:1c:7a:
         d9:3f:ab:a6:01:57:fd:85:55:b6:db:e5:15:a8:ec:2a:98:c1:
         8a:59:fb:34:7e:75:8f:45:18:e8:32:e5:72:f0:ec:b4:e1:a2:
         08:1a:8f:e1:84:ee:96:d5:03:e6:73:f9:34:5b:d3:67:e0:9e:
         dc:33:ad:43:70:e1:8a:46:eb:93:c4:39:94:9d:b4:6b:f0:76:
         6c:83:10:3a:29:d0:25:85:c3:d6:f3:99:95:76:7b:82:5c:73:
         b7:08:80:53:23:55:d4:b5:79:25:2c:ba:c2:9d:b6:8a:44:9f:
         e3:bc:8e:1c:b3:69:93:83:48:fa:91:3d:fd:81:29:e1:e2:35:
         45:1c:52:9f:83:76:ef:eb:90:46:aa:21:e3:a5:b2:68:ad:ad:
         71:be:c7:0c:bd:98:44:73:bc:ae:f0:e3:b9:6a:3a:5e:17:a2:
         fe:88:cc:5c:a7:35:29:ca:fd:a8:b5:8d:aa:66:fe:ec:50:18:
         26:07:0f:29:06:46:28:26:1e:09:c3:19:8e:74:29:51:0b:d5:
         58:f8:92:fd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMf0mdc4btzHjB4X1XwFe12Cf10owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4
RjIzOEFGMDAeFw0yNTAxMzExMjI1NDlaFw0yNTAyMDMxNzU5NDlaMDMxMTAvBgNV
BAMTKDc0RjdDMDU1Mzg5RUJBOTYyQzY1Q0I0ODJDNkRCOTQ3NTg0MTg5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNF/CM+UE8lYkgODkMS5zgXTAP
lQrbxJePCWOwsUT40Yqyx1RqSbUKGRuxWJk+IYoE/7dFg7xW6t8NqQ2GpEBF70uK
XQj3P86cN3fKQC/rQ1ji8oubHqbElLIlvAiI3WOaMrAz6kiPMQLY366pLQiVmom3
6SwwPfWPlqQmnfGqRL+ySr6TNkg1qh2Dp1NTOLZ8vUnMbtq/h/iEl4u3IkWmpSf7
5pyGdujOJcHtV7yLGjUDVn1B57jA4vCsY0RSaPImHyoBLEC8ErKhzFu6GwMARJoV
rV3rh28BRVd6stKIn92ihI5EhimlL93O1+eE9j0tE4fiwciEIZTytbd0zJYdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdPfAVTieupYsZctILG25R1hBiWgwHwYDVR0j
BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx
NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz
OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz
YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5
NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHpA/mzQEZGliC4FAHa3xOd4jL0Q/b1tzweV
9mCJR44Oq85lHxhoYGdBHI6te80x1Txibaocetk/q6YBV/2FVbbb5RWo7CqYwYpZ
+zR+dY9FGOgy5XLw7LThoggaj+GE7pbVA+Zz+TRb02fgntwzrUNw4YpG65PEOZSd
tGvwdmyDEDop0CWFw9bzmZV2e4Jcc7cIgFMjVdS1eSUsusKdtopEn+O8jhyzaZOD
SPqRPf2BKeHiNUUcUp+Ddu/rkEaqIeOlsmitrXG+xwy9mERzvK7w47lqOl4Xov6I
zFynNSnK/ai1japm/uxQGCYHDykGRigmHgnDGY50KVEL1Vj4kv0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:19 2025 by rpki-client