Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft
File:                     AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json)
Hash identifier:          2dLg2eUzqQ2Yi6Tlb9oY3XQMn5mct74XIx5GRygBmRE=
Subject key identifier:   81:62:EC:C3:B4:16:69:0D:8A:4F:02:B0:C1:57:72:D1:09:49:73:A2
Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B
Certificate issuer:       /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B
Certificate serial:       30B74FFC4BF854B9ED061D4B388919E1ABA3176A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft
Manifest number:          01AD
Signing time:             Fri 31 Jan 2025 13:11:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:06:19 +0000
Manifest next update:     Tue 04 Feb 2025 00:58:19 +0000
Files and hashes:         1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: JVwjfITPIiXwaoLA1+VjmhWI9oDXDt0QXKsa+BUATOo=)
                          2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: QALO5w9j6D6asnPm99DU2SyZRUqtqgg2W8H+aXnIbRQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b7:4f:fc:4b:f8:54:b9:ed:06:1d:4b:38:89:19:e1:ab:a3:17:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B
        Validity
            Not Before: Jan 31 13:06:19 2025 GMT
            Not After : Feb  4 00:58:19 2025 GMT
        Subject: CN=8162ECC3B416690D8A4F02B0C15772D1094973A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:d3:6e:a0:96:4a:c4:16:eb:0e:89:ac:31:
                    cf:2c:3f:81:a1:3e:4d:f2:42:7d:ac:11:9e:c4:b5:
                    e7:4d:86:40:43:b6:a3:85:94:91:55:d8:99:a7:e3:
                    25:c2:f4:65:42:cd:1d:e5:6a:ff:05:21:83:fa:15:
                    c0:d3:30:14:9b:ed:1e:d7:c3:3b:f2:9f:5f:92:82:
                    36:66:17:bc:69:56:16:5a:4a:d9:f5:34:c7:00:79:
                    4b:4d:94:a6:e8:cb:d4:1b:45:74:b5:61:13:e4:2a:
                    e6:95:a6:43:6c:ec:03:4e:7a:3c:54:cc:8d:2c:d4:
                    a3:9f:00:3b:91:9d:a8:65:e7:b5:f9:a9:ed:77:74:
                    b7:48:11:66:a1:c5:11:70:a5:25:4a:74:4e:c9:74:
                    5c:6a:b9:7e:77:37:a6:36:b0:65:3d:f0:5e:ed:0d:
                    81:9c:9a:65:64:36:8d:36:3e:78:cf:2a:6f:45:73:
                    2c:50:08:b9:65:39:fc:58:96:af:61:0e:cb:44:6f:
                    9c:85:b6:05:59:c8:69:fc:83:4f:7e:d4:1d:e4:98:
                    59:5b:d1:78:46:3e:33:50:8f:4d:9a:b8:c9:52:d3:
                    11:72:3a:7e:e8:d7:b5:5c:e3:93:75:6b:9e:f0:29:
                    51:8e:b3:dc:6f:54:3e:b8:56:26:8e:b6:48:48:95:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:62:EC:C3:B4:16:69:0D:8A:4F:02:B0:C1:57:72:D1:09:49:73:A2
            X509v3 Authority Key Identifier:
                keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:20:5d:9d:d0:e3:86:de:f4:c2:4b:a1:a7:78:2b:31:31:
         4e:82:56:b3:92:88:b4:15:30:f8:9b:ea:08:83:c5:0c:cb:98:
         cb:9a:29:80:01:a1:54:a9:a5:bf:bf:51:44:cf:0f:1e:82:9b:
         b3:b8:2b:ff:22:92:14:3b:c8:0a:c7:a5:cd:76:c6:3a:9a:59:
         09:f2:62:a0:ae:05:64:b1:3d:12:66:9a:88:65:3d:bb:88:6a:
         84:37:9b:b7:76:62:4d:64:ab:fe:f8:be:8d:73:46:41:24:ad:
         c8:f7:ed:c3:ad:3a:31:dc:f1:02:04:a6:1c:d0:6c:ba:4b:f0:
         ec:9f:e8:a0:a3:cf:cc:d1:2c:cd:e3:fe:56:a1:1a:f4:fb:11:
         5d:b4:fe:d3:9d:3d:b4:f8:39:2f:2b:7a:68:c3:28:0e:9f:58:
         af:71:d4:98:07:c2:69:0e:f7:0d:d7:c2:08:71:2e:ec:dd:82:
         e2:d0:ec:46:0a:03:0f:34:6e:16:64:a4:61:dc:e2:12:0d:b9:
         c1:4a:95:7e:14:aa:e3:4c:f6:52:84:b2:66:73:a5:3f:e6:68:
         03:87:12:58:e0:a1:32:eb:60:9c:8d:a7:ab:0f:aa:23:3d:9d:
         0d:a9:a5:09:c8:08:65:d8:ba:dc:2c:01:22:73:6f:2a:ad:42:
         18:e4:a8:21
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMLdP/Ev4VLntBh1LOIkZ4aujF2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB
MEQwNkQ0QjAeFw0yNTAxMzExMzA2MTlaFw0yNTAyMDQwMDU4MTlaMDMxMTAvBgNV
BAMTKDgxNjJFQ0MzQjQxNjY5MEQ4QTRGMDJCMEMxNTc3MkQxMDk0OTczQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oNNuoJZKxBbrDomsMc8sP4Gh
Pk3yQn2sEZ7EtedNhkBDtqOFlJFV2Jmn4yXC9GVCzR3lav8FIYP6FcDTMBSb7R7X
wzvyn1+SgjZmF7xpVhZaStn1NMcAeUtNlKboy9QbRXS1YRPkKuaVpkNs7ANOejxU
zI0s1KOfADuRnahl57X5qe13dLdIEWahxRFwpSVKdE7JdFxquX53N6Y2sGU98F7t
DYGcmmVkNo02PnjPKm9FcyxQCLllOfxYlq9hDstEb5yFtgVZyGn8g09+1B3kmFlb
0XhGPjNQj02auMlS0xFyOn7o17Vc45N1a57wKVGOs9xvVD64ViaOtkhIlT+xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgWLsw7QWaQ2KTwKwwVdy0QlJc6IwHwYDVR0j
BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3
NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw
NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy
NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG
MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAClLIF2d0OOG3vTCS6GneCsxMU6CVrOSiLQV
MPib6giDxQzLmMuaKYABoVSppb+/UUTPDx6Cm7O4K/8ikhQ7yArHpc12xjqaWQny
YqCuBWSxPRJmmohlPbuIaoQ3m7d2Yk1kq/74vo1zRkEkrcj37cOtOjHc8QIEphzQ
bLpL8Oyf6KCjz8zRLM3j/lahGvT7EV20/tOdPbT4OS8remjDKA6fWK9x1JgHwmkO
9w3XwghxLuzdguLQ7EYKAw80bhZkpGHc4hINucFKlX4UquNM9lKEsmZzpT/maAOH
EljgoTLrYJyNp6sPqiM9nQ2ppQnICGXYutwsASJzbyqtQhjkqCE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:42 2025 by rpki-client