Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
File:                     8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json)
Hash identifier:          ircHkgxOI7pbY4Vq1DOAJs2FB5QRhAcFSKhC8sTu3ow=
Subject key identifier:   55:7B:93:08:60:BE:39:2A:75:1B:FC:9C:8B:4B:5A:DD:7B:57:C1:44
Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17
Certificate issuer:       /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
Certificate serial:       7E5BE4DEAF23F0B053806D268E2A68995F31B0F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
Manifest number:          04A5
Signing time:             Fri 31 Jan 2025 08:41:37 +0000
Manifest this update:     Fri 31 Jan 2025 08:36:37 +0000
Manifest next update:     Mon 03 Feb 2025 20:14:37 +0000
Files and hashes:         1: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=)
                          2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: 5gR9+ixbVg1LP1uDXjaATazbJrEAK+uCvp7GyKYBWRI=)
                          3: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: etLtkveERdVsSDPjV94QMp+g6SlYR5qou7gk9Sa/WtE=)
                          4: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: KbszhduYQIrnDZTe+l2/4wHbcW+0A4j+CJHjbrOZWDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5b:e4:de:af:23:f0:b0:53:80:6d:26:8e:2a:68:99:5f:31:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
        Validity
            Not Before: Jan 31 08:36:37 2025 GMT
            Not After : Feb  3 20:14:37 2025 GMT
        Subject: CN=557B930860BE392A751BFC9C8B4B5ADD7B57C144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:b9:04:21:a5:5e:75:8e:26:f3:0d:54:9a:
                    e4:1e:cb:6b:b4:8c:09:42:e9:ed:e4:a5:a6:02:ca:
                    56:19:75:2a:e8:e7:ba:7d:c3:f3:ae:1e:7e:ca:0e:
                    20:f2:64:6f:bb:95:d1:cf:64:88:c5:cb:00:70:b7:
                    53:96:38:cd:d2:6b:77:5d:11:3c:3a:0d:14:f3:44:
                    68:5d:07:33:70:b4:3c:29:1f:96:8e:8d:14:71:f4:
                    79:b1:6c:f9:f7:78:d0:4f:36:33:52:06:d4:c1:3f:
                    07:66:ac:d6:2c:2b:6e:7e:d9:74:dc:d6:14:b8:45:
                    a3:67:13:e8:5b:d5:df:6d:af:1f:84:a1:8d:7d:c6:
                    85:cc:ab:a5:89:cf:19:9a:a3:85:8d:b9:1e:56:62:
                    10:5b:30:8d:8c:ce:ff:00:28:af:4d:b7:43:52:fb:
                    94:4b:ab:d8:69:c4:e8:4c:f5:ee:a9:94:87:f8:5f:
                    af:4d:b0:fb:91:4b:a2:17:75:6a:ad:a0:30:2f:95:
                    9b:e3:97:34:47:0f:b1:27:7c:80:98:8e:24:88:eb:
                    18:2a:78:82:b0:d5:ec:19:0c:f1:ba:6f:38:28:f3:
                    b1:c4:49:ba:b2:91:20:ab:7f:bc:8c:96:ed:d5:a1:
                    bf:f9:e3:e6:c1:f3:ed:eb:d2:ca:d9:cf:c3:91:95:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7B:93:08:60:BE:39:2A:75:1B:FC:9C:8B:4B:5A:DD:7B:57:C1:44
            X509v3 Authority Key Identifier:
                keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:17:f4:31:06:0d:40:27:ba:1a:b8:f0:29:7b:b0:c3:38:
         98:92:cf:21:7a:f0:49:8c:32:36:77:7b:ac:ff:c9:ed:82:1f:
         f4:1d:40:9a:a1:59:3b:53:44:65:d9:c5:64:2b:ab:b0:80:5c:
         f4:6a:d7:8b:98:bb:28:91:32:96:87:82:e9:0f:d9:e1:21:17:
         d4:74:16:8d:bb:9b:6b:95:ab:21:f4:ef:08:ea:76:d9:16:ff:
         14:8a:73:37:75:64:0b:c6:1a:e3:52:e3:31:dd:96:4e:98:e6:
         95:3e:da:c3:3a:03:b2:80:ae:8d:57:eb:86:a5:dd:3a:d3:e7:
         39:f0:a1:74:a5:f5:c1:71:e0:e8:51:fc:b4:bb:0b:df:2b:cd:
         07:2e:72:45:86:8b:c5:54:2e:4a:0d:21:74:0b:dc:15:b7:62:
         ac:ee:6b:41:22:24:cf:dc:36:c3:bc:be:49:28:c5:6a:5f:18:
         fd:88:91:a1:b7:d7:05:ff:da:7e:a7:0a:86:5c:3f:c7:da:d0:
         69:9d:30:ed:ff:92:57:c5:80:3c:8b:fb:39:08:4f:33:a0:de:
         5b:c6:7c:46:fd:b3:34:1f:cf:a3:c5:7f:e2:7a:1f:d2:a5:d7:
         08:54:2f:1e:e5:74:42:2d:94:5c:7d:55:ca:a7:24:b4:56:44:
         41:12:63:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUflvk3q8j8LBTgG0mjipomV8xsPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5
QjZBRjMxNzAeFw0yNTAxMzEwODM2MzdaFw0yNTAyMDMyMDE0MzdaMDMxMTAvBgNV
BAMTKDU1N0I5MzA4NjBCRTM5MkE3NTFCRkM5QzhCNEI1QUREN0I1N0MxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTrkEIaVedY4m8w1UmuQey2u0
jAlC6e3kpaYCylYZdSro57p9w/OuHn7KDiDyZG+7ldHPZIjFywBwt1OWOM3Sa3dd
ETw6DRTzRGhdBzNwtDwpH5aOjRRx9HmxbPn3eNBPNjNSBtTBPwdmrNYsK25+2XTc
1hS4RaNnE+hb1d9trx+EoY19xoXMq6WJzxmao4WNuR5WYhBbMI2Mzv8AKK9Nt0NS
+5RLq9hpxOhM9e6plIf4X69NsPuRS6IXdWqtoDAvlZvjlzRHD7EnfICYjiSI6xgq
eIKw1ewZDPG6bzgo87HESbqykSCrf7yMlu3Vob/54+bB8+3r0srZz8ORlVAtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVXuTCGC+OSp1G/yci0ta3XtXwUQwHwYDVR0j
BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD
ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB
RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5
YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx
QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADmPF/QxBg1AJ7oauPApe7DDOJiSzyF68EmM
MjZ3e6z/ye2CH/QdQJqhWTtTRGXZxWQrq7CAXPRq14uYuyiRMpaHgukP2eEhF9R0
Fo27m2uVqyH07wjqdtkW/xSKczd1ZAvGGuNS4zHdlk6Y5pU+2sM6A7KAro1X64al
3TrT5znwoXSl9cFx4OhR/LS7C98rzQcuckWGi8VULkoNIXQL3BW3Yqzua0EiJM/c
NsO8vkkoxWpfGP2IkaG31wX/2n6nCoZcP8fa0GmdMO3/klfFgDyL+zkITzOg3lvG
fEb9szQfz6PFf+J6H9Kl1whULx7ldEItlFx9VcqnJLRWREESY+0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:57 2025 by rpki-client