Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
File:                     B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json)
Hash identifier:          RV8g8fHRYoNh4KUKNiLdb3JperGKVGFfHIsl01/c30s=
Subject key identifier:   68:93:90:B0:18:A7:B5:8A:1D:F9:61:5D:70:57:74:A7:85:6C:F7:D8
Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
Certificate issuer:       /CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Certificate serial:       60C22B7DE6290E0C7F76BB18BDA8FB9C7DC8D697
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
Manifest number:          0425
Signing time:             Thu 30 Jan 2025 10:21:02 +0000
Manifest this update:     Thu 30 Jan 2025 10:16:02 +0000
Manifest next update:     Sun 02 Feb 2025 21:12:02 +0000
Files and hashes:         1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=)
                          2: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=)
                          3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=)
                          4: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: ISDiPdLyvjvulqWLPiTsSNkBunrCQyO2E/Fg7l2Anko=)
                          5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=)
                          6: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=)
                          7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:2b:7d:e6:29:0e:0c:7f:76:bb:18:bd:a8:fb:9c:7d:c8:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471
        Validity
            Not Before: Jan 30 10:16:02 2025 GMT
            Not After : Feb  2 21:12:02 2025 GMT
        Subject: CN=689390B018A7B58A1DF9615D705774A7856CF7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:33:94:36:06:54:c0:6e:1b:2c:de:62:48:
                    4b:94:74:98:f8:fa:61:19:c4:b5:97:ca:9f:31:ea:
                    04:0e:68:27:e1:39:51:0e:4d:dc:e2:50:b0:45:d9:
                    3a:bd:20:7f:54:48:b7:eb:42:c2:e9:49:06:57:66:
                    9e:2c:58:4b:cb:fd:ad:2f:0e:eb:e1:4f:2b:2f:fa:
                    55:b0:96:d2:e5:d2:95:10:c3:b0:5f:39:6a:ca:46:
                    47:1e:ae:fa:d4:9f:3b:03:e9:7f:d7:8b:b0:1a:6c:
                    e7:ad:f7:d9:cf:76:af:5f:df:8f:ca:1e:9c:97:93:
                    b5:fe:c6:08:58:7d:2c:02:96:da:b0:4b:f8:97:a8:
                    74:3e:5d:79:37:42:ec:a4:f8:de:57:d3:7a:de:30:
                    2e:4b:ea:eb:29:e2:f3:49:bb:59:60:71:5d:d1:36:
                    c0:9e:ce:8b:99:9b:32:b6:e2:02:26:2b:62:db:36:
                    ab:52:dc:1c:2f:a5:ce:fc:be:c1:d3:4d:2f:b8:64:
                    f5:21:74:a3:14:cd:2f:5a:5f:c0:8c:01:c5:23:91:
                    f9:ee:db:89:f0:8c:7b:72:b8:a8:ac:0f:23:42:95:
                    1a:aa:e9:08:6b:95:6d:6b:9c:10:24:10:22:6b:57:
                    98:be:6f:3a:48:0c:ae:03:51:61:0e:c4:87:a4:8b:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:90:B0:18:A7:B5:8A:1D:F9:61:5D:70:57:74:A7:85:6C:F7:D8
            X509v3 Authority Key Identifier:
                keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:0a:c0:3d:dd:31:6b:a4:2f:31:c6:f3:0a:f7:60:a1:1e:
         60:34:54:47:48:2b:92:29:fd:df:fc:8c:35:fa:09:4a:1b:ae:
         80:69:bc:29:43:07:86:1d:c4:52:84:96:32:b0:a8:e9:22:4c:
         e6:ce:89:d5:61:81:cd:d6:6e:8d:f2:84:78:90:4a:08:85:bb:
         58:23:f8:e8:9c:92:3f:57:c2:97:26:7b:60:67:05:ac:e8:61:
         89:fd:ae:b2:68:64:a4:e6:5e:1f:a4:29:8d:5e:a7:52:a1:8d:
         f5:c3:9e:86:1c:79:fd:0e:5d:51:bd:7a:c4:50:70:90:a7:dd:
         87:d8:e4:18:07:21:85:90:fb:ba:44:fb:81:1d:0e:82:97:da:
         94:67:0a:d0:bd:ed:11:ed:ae:8b:68:08:43:cf:45:2b:b7:e7:
         98:d4:04:e1:92:2f:31:80:2f:23:bc:12:65:5a:67:e0:8f:2d:
         7f:fd:3f:ef:cb:c4:70:ee:22:76:b3:d7:d1:18:d9:07:ae:1d:
         24:d2:eb:60:1c:78:64:64:a8:27:14:d8:8b:f7:65:03:03:f8:
         bd:71:fb:41:2a:3e:e9:af:ed:c9:c9:4b:b1:f8:39:0e:fd:27:
         89:c5:85:03:0c:a9:6b:7a:3b:35:fd:a2:98:7b:2a:99:fd:d1:
         e6:db:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:35 2025 by rpki-client