Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File:                     8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier:          OsV1gi21+E0GZRgsLrnl21QWhiB1GSq4uxFdBRJeKic=
Subject key identifier:   DF:D7:76:97:1A:70:C3:39:61:89:04:28:EA:81:E6:A9:94:99:8B:05
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer:       /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial:       0282A6B5AC77F87EE41B7EBBF2C81B319CCF5558
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number:          67
Signing time:             Wed 29 Jan 2025 22:22:09 +0000
Manifest this update:     Wed 29 Jan 2025 22:17:09 +0000
Manifest next update:     Sun 02 Feb 2025 02:42:09 +0000
Files and hashes:         1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: LQZmNBMeuq1prbaiXxW4JaiefrWrLLJvTCpQclU5FMA=)
                          2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: kF4axGTcKEpCTJTyR+1QJKRuXKhmsNk0BFgRuTyj800=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:a6:b5:ac:77:f8:7e:e4:1b:7e:bb:f2:c8:1b:31:9c:cf:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
        Validity
            Not Before: Jan 29 22:17:09 2025 GMT
            Not After : Feb  2 02:42:09 2025 GMT
        Subject: CN=DFD776971A70C33961890428EA81E6A994998B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:96:fe:1d:9c:b6:3e:b5:7f:65:c9:d7:a2:
                    b0:3d:56:f9:31:dd:1e:3b:86:26:25:0a:b5:12:1c:
                    03:8e:d6:82:7e:ec:fb:75:bf:c9:fa:a0:63:75:e9:
                    e9:ff:0e:96:e6:1b:e4:0e:9c:10:46:8b:a6:cf:74:
                    ec:7f:47:f1:3f:21:8d:f0:b9:2a:b9:a8:8c:0f:8e:
                    a1:37:d7:9e:76:a8:40:b8:94:23:b7:7e:52:9c:54:
                    30:b7:4e:0d:27:23:d8:35:98:3b:2a:9e:ec:a4:c7:
                    f0:c9:91:55:f0:81:41:51:d5:b0:46:c2:05:7d:46:
                    63:f1:96:e5:e5:7b:84:8f:bf:ea:bc:5f:86:b9:e0:
                    d0:5c:8d:10:6a:fe:23:f6:be:df:38:a5:06:23:d5:
                    a2:9f:3f:49:24:cd:7b:36:8b:3c:4a:a9:a7:76:33:
                    37:fe:a3:58:79:4a:c9:d8:f2:ac:6b:01:4f:09:62:
                    db:fc:69:65:bf:c8:b8:21:d9:20:e9:e5:cd:f8:a3:
                    a3:ff:70:21:00:9b:ea:c9:24:49:ab:c9:e9:ff:11:
                    d4:7a:bf:48:d5:94:d9:f2:5b:17:0d:2b:ac:bb:31:
                    c4:04:fb:9b:06:84:6b:c1:3d:a5:c9:df:4f:9f:23:
                    1f:da:27:54:07:d7:68:8b:d5:7d:f2:12:b5:51:74:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:76:97:1A:70:C3:39:61:89:04:28:EA:81:E6:A9:94:99:8B:05
            X509v3 Authority Key Identifier:
                keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:48:f4:61:9a:b5:4c:e0:6e:56:0c:c6:c2:87:a7:b9:ad:1b:
         6f:c0:f9:e6:82:a7:bd:86:f8:b0:0d:d1:c0:41:5b:52:29:0b:
         6c:53:14:7f:2b:ca:ce:7a:22:41:e7:8b:37:9e:28:a3:5f:7b:
         96:8f:61:06:02:2f:a7:4f:bf:11:4a:f1:f8:54:69:90:10:87:
         b4:50:21:74:06:95:ee:63:66:92:85:e7:ca:33:f5:ff:e4:07:
         af:97:f5:7a:46:bf:6b:0c:b4:65:e9:22:56:93:55:ab:62:23:
         15:75:bf:2f:20:1b:bc:47:4d:55:96:5e:e0:78:a6:c3:dc:0e:
         af:78:c0:3d:11:83:50:25:2e:b2:79:0d:5e:14:51:25:d4:63:
         5b:e7:28:68:74:fa:25:c5:a1:dd:32:91:d9:0c:04:d8:c0:48:
         56:7d:32:1d:cd:93:46:3c:e1:7c:cc:49:80:eb:6d:12:13:87:
         67:0d:bc:51:35:08:eb:6e:63:d6:b9:90:2c:b9:08:90:55:6b:
         00:59:1b:cc:7a:0e:93:ae:ca:f0:58:6d:3b:5d:b7:c0:24:f2:
         db:f7:a3:2d:93:05:ad:51:af:44:73:ab:3a:7c:8b:2a:0d:f7:
         74:c5:f1:8c:2f:65:0d:23:75:35:50:4d:3c:a1:b3:eb:80:e6:
         4d:cd:33:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAoKmtax3+H7kG3678sgbMZzPVVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw
ODI0NEYyOTAeFw0yNTAxMjkyMjE3MDlaFw0yNTAyMDIwMjQyMDlaMDMxMTAvBgNV
BAMTKERGRDc3Njk3MUE3MEMzMzk2MTg5MDQyOEVBODFFNkE5OTQ5OThCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++Zb+HZy2PrV/ZcnXorA9Vvkx
3R47hiYlCrUSHAOO1oJ+7Pt1v8n6oGN16en/DpbmG+QOnBBGi6bPdOx/R/E/IY3w
uSq5qIwPjqE31552qEC4lCO3flKcVDC3Tg0nI9g1mDsqnuykx/DJkVXwgUFR1bBG
wgV9RmPxluXle4SPv+q8X4a54NBcjRBq/iP2vt84pQYj1aKfP0kkzXs2izxKqad2
Mzf+o1h5SsnY8qxrAU8JYtv8aWW/yLgh2SDp5c34o6P/cCEAm+rJJEmryen/EdR6
v0jVlNnyWxcNK6y7McQE+5sGhGvBPaXJ30+fIx/aJ1QH12iL1X3yErVRdOqXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU39d2lxpwwzlhiQQo6oHmqZSZiwUwHwYDVR0j
BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4
NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0
NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB
REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHNI9GGatUzgblYMxsKHp7mtG2/A+eaCp72G
+LAN0cBBW1IpC2xTFH8rys56IkHnizeeKKNfe5aPYQYCL6dPvxFK8fhUaZAQh7RQ
IXQGle5jZpKF58oz9f/kB6+X9XpGv2sMtGXpIlaTVatiIxV1vy8gG7xHTVWWXuB4
psPcDq94wD0Rg1AlLrJ5DV4UUSXUY1vnKGh0+iXFod0ykdkMBNjASFZ9Mh3Nk0Y8
4XzMSYDrbRITh2cNvFE1COtuY9a5kCy5CJBVawBZG8x6DpOuyvBYbTtdt8Ak8tv3
oy2TBa1Rr0Rzqzp8iyoN93TF8YwvZQ0jdTVQTTyhs+uA5k3NMw0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:41 2025 by rpki-client