Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
File:                     2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json)
Hash identifier:          KnLhOr9wXZ2Cj9CImbzI4JvXsoAQurccKM6SXaMX2qQ=
Subject key identifier:   4B:52:EB:06:BA:F6:52:C7:95:DE:FB:48:79:35:25:DE:6D:BD:18:F1
Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
Certificate issuer:       /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Certificate serial:       53FB4940F161ECA89CA2DFCE56B42414605AF64C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
Manifest number:          01A8
Signing time:             Thu 30 Jan 2025 14:10:51 +0000
Manifest this update:     Thu 30 Jan 2025 14:05:51 +0000
Manifest next update:     Sun 02 Feb 2025 19:29:51 +0000
Files and hashes:         1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: hpmksd9eMNwc5kNsNmYaL/Pd8BPAaDkCFnInyCLaFn8=)
                          2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=)
                          3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: eiRbNyy+2Cfq6J3LhynMxy6A7hN5h3MYyc0wfj6gskU=)
                          4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: T9xbeJ35Lm7RzIFwdUSgD9eYzn+NsCleRQjtKlR/aew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fb:49:40:f1:61:ec:a8:9c:a2:df:ce:56:b4:24:14:60:5a:f6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
        Validity
            Not Before: Jan 30 14:05:51 2025 GMT
            Not After : Feb  2 19:29:51 2025 GMT
        Subject: CN=4B52EB06BAF652C795DEFB48793525DE6DBD18F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:ea:ba:78:b1:f3:46:0e:90:ce:6f:b3:cf:
                    cc:a1:10:b4:f0:48:a2:2d:46:65:54:fb:29:b6:0e:
                    10:69:2a:65:bb:82:54:1e:19:54:a3:a8:57:4c:48:
                    0c:c7:04:f2:c2:60:1c:bc:fa:15:90:e5:d4:57:99:
                    9e:0c:e1:9f:27:16:65:e1:f5:9c:d8:e1:21:43:96:
                    21:9d:eb:96:14:28:89:cc:b2:8d:18:43:d5:7d:08:
                    17:c4:dc:95:d1:64:d3:b9:d3:d3:ad:08:25:15:83:
                    38:4c:b8:5c:84:7d:6f:b8:4e:dd:a5:4b:75:ce:f1:
                    9d:c1:ae:54:b6:d9:03:30:67:74:11:89:bf:d4:f0:
                    4b:fa:e4:c2:32:7c:12:e5:1a:be:7b:a3:ac:43:8c:
                    54:1d:c9:b6:20:10:8a:5b:72:2a:94:2f:bd:5c:81:
                    98:4a:b0:69:22:91:c1:ad:86:8c:05:27:e0:b4:c0:
                    26:3d:0f:9b:65:8d:0e:bd:4f:77:26:63:40:52:b3:
                    de:30:94:c5:ec:fe:05:61:7c:b0:3e:2a:04:76:03:
                    b1:a1:f5:28:05:95:a5:e5:a0:1a:d7:eb:b0:e8:fe:
                    e2:f3:57:d2:e5:46:b0:0f:27:a6:61:a3:ec:2f:a9:
                    87:6e:09:2e:4f:27:29:61:7d:0e:8f:4a:a1:46:a7:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:52:EB:06:BA:F6:52:C7:95:DE:FB:48:79:35:25:DE:6D:BD:18:F1
            X509v3 Authority Key Identifier:
                keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e9:b0:65:69:b7:72:58:21:44:e4:70:15:b7:f5:8c:1b:d4:
         1c:c0:f8:b8:0c:19:8e:0f:94:34:6f:42:68:62:70:24:44:a7:
         49:ac:71:5d:d5:18:d1:bc:00:32:37:cb:2f:93:b1:70:68:2f:
         a3:51:19:52:32:81:1a:b7:92:60:24:77:ac:2a:22:63:08:44:
         4a:7a:de:42:ef:cb:32:b0:d9:1c:eb:13:7d:69:13:e5:b0:83:
         86:39:56:8e:8d:b3:6f:9c:a4:5d:54:45:90:1f:8f:b6:47:db:
         b6:0d:ab:fb:84:e7:ce:a9:4c:58:ab:7d:14:35:1a:a3:47:b1:
         d8:05:61:57:03:8b:cc:50:c3:36:d8:40:01:91:15:90:b0:31:
         73:31:92:f6:6e:25:43:3a:d1:73:cd:b3:c9:6b:74:e2:84:ea:
         97:99:ef:5c:85:07:b4:6d:9c:f3:b3:18:11:40:f2:77:44:ea:
         68:d8:ee:e3:a7:42:a1:fb:ce:ac:e8:f7:51:22:27:f7:6b:15:
         ac:bf:6b:27:36:2b:b7:05:a1:7b:43:4b:64:24:4e:94:65:fb:
         74:1d:bf:70:03:87:f3:c4:a4:02:0a:68:49:04:4f:79:81:5c:
         04:fa:bf:15:7f:2a:56:ae:77:aa:9a:18:0b:f9:94:80:53:da:
         0b:db:8f:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU/tJQPFh7Kicot/OVrQkFGBa9kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1
RjMyQ0VCNTAeFw0yNTAxMzAxNDA1NTFaFw0yNTAyMDIxOTI5NTFaMDMxMTAvBgNV
BAMTKDRCNTJFQjA2QkFGNjUyQzc5NURFRkI0ODc5MzUyNURFNkRCRDE4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4Oq6eLHzRg6Qzm+zz8yhELTw
SKItRmVU+ym2DhBpKmW7glQeGVSjqFdMSAzHBPLCYBy8+hWQ5dRXmZ4M4Z8nFmXh
9ZzY4SFDliGd65YUKInMso0YQ9V9CBfE3JXRZNO509OtCCUVgzhMuFyEfW+4Tt2l
S3XO8Z3BrlS22QMwZ3QRib/U8Ev65MIyfBLlGr57o6xDjFQdybYgEIpbciqUL71c
gZhKsGkikcGthowFJ+C0wCY9D5tljQ69T3cmY0BSs94wlMXs/gVhfLA+KgR2A7Gh
9SgFlaXloBrX67Do/uLzV9LlRrAPJ6Zho+wvqYduCS5PJylhfQ6PSqFGp8kxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUS1LrBrr2UseV3vtIeTUl3m29GPEwHwYDVR0j
BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz
MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy
Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh
ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND
NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKzpsGVpt3JYIUTkcBW39Ywb1BzA+LgMGY4P
lDRvQmhicCREp0mscV3VGNG8ADI3yy+TsXBoL6NRGVIygRq3kmAkd6wqImMIREp6
3kLvyzKw2RzrE31pE+Wwg4Y5Vo6Ns2+cpF1URZAfj7ZH27YNq/uE586pTFirfRQ1
GqNHsdgFYVcDi8xQwzbYQAGRFZCwMXMxkvZuJUM60XPNs8lrdOKE6peZ71yFB7Rt
nPOzGBFA8ndE6mjY7uOnQqH7zqzo91EiJ/drFay/ayc2K7cFoXtDS2QkTpRl+3Qd
v3ADh/PEpAIKaEkET3mBXAT6vxV/Klaud6qaGAv5lIBT2gvbj5o=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:43 2025 by rpki-client