Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
File:                     DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json)
Hash identifier:          QU8Nqw/no+6W04VZJw+dZ9Gr8kmwxaZkZOvEU+PvEEY=
Subject key identifier:   F6:96:7F:7B:21:D0:CC:F0:A6:08:08:2F:5D:D9:CF:6F:23:7B:E4:75
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       6CCA0533E920A83C4C55B7234A8111E73B2885E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
Manifest number:          04A3
Signing time:             Thu 30 Jan 2025 06:30:37 +0000
Manifest this update:     Thu 30 Jan 2025 06:25:37 +0000
Manifest next update:     Sun 02 Feb 2025 12:15:37 +0000
Files and hashes:         1: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: LoLufTnc5BXgQAwz8IAwhh6gen7shuK6oaJlp6HnPwM=)
                          2: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: tqUKv7tErLGQvp6ntAe6oI+l6KjJLTNQkTevpmkwiwA=)
                          3: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: qB5I9SZzbVoPygBuyJA1K93AyAMM3PavIllsE1xXJ8Y=)
                          4: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 9x98XoLgB5n+u7mpQXGTvRK2RowXcZ6wi/CQh+FfyR8=)
                          5: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 7/FOTR+Rqt1leDK8dBKstHSCymrmqo5dgA2OK8mRPQw=)
                          6: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: gYKpABPCZPAwfSakQwPekqx1ImCAYMUVjZIaoSefgv8=)
                          7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: 0zHHmymmAg7KzILmxTwSb0pVLlyNqlqsvk/nikoNMwE=)
                          8: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: uRRS1BI3sCqvIVYrv7xZEsjdYK2j2pu3KFfDFYmGVqg=)
                          9: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 5BVtDmEV06VuIEBqGHWc5TU1extMlSEbp67LFRJHJ4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ca:05:33:e9:20:a8:3c:4c:55:b7:23:4a:81:11:e7:3b:28:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jan 30 06:25:37 2025 GMT
            Not After : Feb  2 12:15:37 2025 GMT
        Subject: CN=F6967F7B21D0CCF0A608082F5DD9CF6F237BE475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a2:15:8a:ac:6d:f1:4c:9f:48:4d:90:f7:9c:
                    eb:06:90:f2:6d:1e:c5:1b:1a:46:39:01:39:0e:5c:
                    25:49:04:64:d4:2d:f8:1c:6d:87:8e:d2:82:a1:fb:
                    e5:76:24:66:68:79:c1:33:26:58:09:94:8c:b5:1e:
                    80:cf:c2:d2:16:0d:e6:c0:fb:0f:56:87:a5:42:d2:
                    bb:1a:71:48:8a:a7:1f:53:42:76:49:28:8f:a1:4c:
                    c5:ea:27:cf:48:12:e0:0f:67:06:70:56:62:51:ac:
                    46:02:cb:21:3f:e5:80:69:4c:14:37:16:ed:19:1f:
                    64:77:01:fe:a6:65:65:24:04:2c:99:e8:22:0b:95:
                    ff:01:6c:6e:71:a5:47:23:f1:04:ee:1a:d9:8b:be:
                    20:08:5d:01:aa:93:af:b6:1c:03:a8:f3:98:ad:f8:
                    98:5c:96:89:b7:5a:a9:b8:68:a4:f8:2d:b3:d1:24:
                    e6:a9:bd:ce:ab:c8:b2:81:46:b0:10:0a:08:71:45:
                    40:ca:f6:c3:7a:ec:89:b3:f2:21:59:7c:93:61:88:
                    22:1e:69:e3:a1:19:d7:c5:96:f0:5f:f5:fd:70:33:
                    d9:56:61:43:a9:fb:6d:32:c2:43:6e:f4:ef:90:16:
                    c6:32:a0:ac:95:8f:53:fb:d0:62:29:73:54:c7:8b:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:96:7F:7B:21:D0:CC:F0:A6:08:08:2F:5D:D9:CF:6F:23:7B:E4:75
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:07:d7:be:96:ff:d9:e2:32:19:d7:61:e2:91:89:4e:f9:8a:
         0f:11:a5:05:5a:62:15:1a:9d:f8:e9:7f:e4:fa:aa:f9:71:6e:
         0e:0e:da:d3:c5:81:f9:5d:04:dd:e5:a0:de:49:f0:c8:e3:a7:
         2d:99:04:96:50:c3:93:05:68:64:c6:53:7d:d3:f2:6d:1a:09:
         0d:40:3c:e4:7f:c0:61:36:62:6c:fe:dc:11:a9:85:da:42:45:
         8f:ce:b7:f5:68:ad:33:40:bd:36:ee:33:99:d7:02:7d:91:f6:
         62:97:f9:4c:42:b3:bc:53:d8:ea:48:66:7f:e7:0b:18:d7:cb:
         96:d4:ae:7b:f4:b3:22:e1:86:c0:92:ad:5c:06:d0:39:d7:2a:
         f1:3f:e5:c4:6e:83:5e:f9:9b:3f:52:32:bb:a3:d7:e2:16:47:
         8e:65:3f:e1:7a:5d:89:76:f1:47:50:d3:ac:67:8f:49:43:d3:
         51:ee:72:26:35:cc:5c:ba:af:02:65:46:97:8e:6b:28:12:4e:
         71:3d:82:48:c9:e3:db:12:08:41:09:d7:7c:65:ef:5b:05:7e:
         08:05:0b:ca:5e:8b:9e:39:ae:45:08:f5:ab:88:6b:c7:da:9b:
         83:1e:11:cc:cf:f9:4a:cc:b2:50:9d:ab:18:dc:77:19:33:ed:
         ca:0f:72:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbMoFM+kgqDxMVbcjSoER5zsoheQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx
QkMwNkVCNzAeFw0yNTAxMzAwNjI1MzdaFw0yNTAyMDIxMjE1MzdaMDMxMTAvBgNV
BAMTKEY2OTY3RjdCMjFEMENDRjBBNjA4MDgyRjVERDlDRjZGMjM3QkU0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlohWKrG3xTJ9ITZD3nOsGkPJt
HsUbGkY5ATkOXCVJBGTULfgcbYeO0oKh++V2JGZoecEzJlgJlIy1HoDPwtIWDebA
+w9Wh6VC0rsacUiKpx9TQnZJKI+hTMXqJ89IEuAPZwZwVmJRrEYCyyE/5YBpTBQ3
Fu0ZH2R3Af6mZWUkBCyZ6CILlf8BbG5xpUcj8QTuGtmLviAIXQGqk6+2HAOo85it
+Jhclom3Wqm4aKT4LbPRJOapvc6ryLKBRrAQCghxRUDK9sN67Imz8iFZfJNhiCIe
aeOhGdfFlvBf9f1wM9lWYUOp+20ywkNu9O+QFsYyoKyVj1P70GIpc1THi7MnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9pZ/eyHQzPCmCAgvXdnPbyN75HUwHwYDVR0j
BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB
NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw
NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw
NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz
QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJQH176W/9niMhnXYeKRiU75ig8RpQVaYhUa
nfjpf+T6qvlxbg4O2tPFgfldBN3loN5J8Mjjpy2ZBJZQw5MFaGTGU33T8m0aCQ1A
POR/wGE2Ymz+3BGphdpCRY/Ot/VorTNAvTbuM5nXAn2R9mKX+UxCs7xT2OpIZn/n
CxjXy5bUrnv0syLhhsCSrVwG0DnXKvE/5cRug175mz9SMruj1+IWR45lP+F6XYl2
8UdQ06xnj0lD01HuciY1zFy6rwJlRpeOaygSTnE9gkjJ49sSCEEJ13xl71sFfggF
C8pei545rkUI9auIa8fam4MeEczP+UrMslCdqxjcdxkz7coPco0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:19 2025 by rpki-client