Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File:                     9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier:          vzX2yjU9GTkLtj5JyG2o2zPmy3eiT5yUgi1ibpeRX6k=
Subject key identifier:   9B:79:13:15:A5:FE:83:B0:09:A3:6A:EA:16:A2:E9:45:8B:28:87:86
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       011232547F6BC2F0614974618D5F995B42E03BD3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number:          01A5
Signing time:             Wed 29 Jan 2025 14:51:00 +0000
Manifest this update:     Wed 29 Jan 2025 14:46:00 +0000
Manifest next update:     Sat 01 Feb 2025 20:33:00 +0000
Files and hashes:         1: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: ea794U0mB9D7yt1RLUOewhCL7ZzhCbLteGL9jlKUQmM=)
                          2: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: DDhB1UWaDE6P24QJZxUdnx+M6AZP5VTGOQm7w6ZXYXs=)
                          3: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: 8mxCgLVTTXr9uMhOXDuMPKDKiJwHLUA2DMdve6SEZ9A=)
                          4: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: ubfkcwoP+EJOky16d2lhV2rF6G2jtCAE2sDJk1UP4io=)
                          5: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: 0p8J1uUqepwRyvnKGYdZJZ+VKIbHRsXq/69mcxzrCBY=)
                          6: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: 76HgHjTj2qx3bKF+rx+QL1oKIpW6ZcXUIoHYdoNTV+U=)
                          7: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: gKKJk7HQuK+ONKXoaPidzNFpfrELPeLEIef5HUItiMs=)
                          8: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: qT9ZpCyRzuPT9kwnm0vlIIe2/5uUJXzepolKRYxLNyY=)
                          9: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=)
                          10: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: /9/xdwcs+kCWsTXH6/SBJuUINEh3WMXFFR2lTGVloS4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:32:54:7f:6b:c2:f0:61:49:74:61:8d:5f:99:5b:42:e0:3b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Jan 29 14:46:00 2025 GMT
            Not After : Feb  1 20:33:00 2025 GMT
        Subject: CN=9B791315A5FE83B009A36AEA16A2E9458B288786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:17:3a:0d:73:72:6e:59:18:c9:f1:5d:48:
                    9d:4c:4c:8e:d3:c7:19:fe:5c:c8:b4:b6:13:87:aa:
                    07:42:4b:e7:4f:5f:60:ea:0a:0e:ab:dd:47:6d:73:
                    0f:c1:cf:24:dc:4e:a8:98:ed:8a:28:58:80:ae:5a:
                    63:e4:68:c2:a5:78:03:e0:ef:87:d0:05:a2:2b:32:
                    2a:07:9d:37:3d:da:2a:0a:be:3a:c9:df:c9:34:1e:
                    a7:d5:9d:c1:6b:cf:23:06:e9:7a:d1:05:61:1f:4c:
                    a5:09:f7:75:21:d3:c7:1d:c3:b8:22:d0:6e:99:c0:
                    b7:e2:eb:fd:2e:b0:fe:06:0f:85:de:84:3d:99:b4:
                    17:3d:5b:37:dc:99:89:f1:6a:96:24:aa:01:8f:c4:
                    34:cc:cd:a0:66:4b:b4:06:cc:64:9a:dd:9a:74:f1:
                    39:35:0f:12:ab:19:f3:e2:cf:85:af:7b:c4:04:8e:
                    d9:a9:fe:6b:95:04:5d:de:c6:75:5b:55:7a:dc:54:
                    5b:e7:98:10:5b:4f:6a:33:47:68:c3:de:07:32:c1:
                    ce:d1:84:0f:ed:86:ff:0b:5e:8d:7d:e6:c6:e7:99:
                    ef:d3:60:5e:cb:54:63:55:57:e0:4d:38:dc:e3:da:
                    4b:1d:96:28:d9:43:76:71:57:42:3b:28:28:cc:17:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:79:13:15:A5:FE:83:B0:09:A3:6A:EA:16:A2:E9:45:8B:28:87:86
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:01:bb:de:96:12:00:84:c3:78:bc:9e:4f:b1:53:52:e9:e2:
         ed:6a:a0:14:ea:56:14:a6:25:27:65:27:0d:16:ff:6c:15:0e:
         92:d7:a2:29:35:21:9c:1a:7a:a6:20:26:ed:f3:12:f1:64:5d:
         a0:46:4c:35:e7:b3:bc:64:af:1c:99:c2:3d:97:c2:f6:25:5c:
         75:1e:4f:9c:6c:68:b1:c4:a0:3b:25:96:7a:78:38:60:f8:69:
         40:97:46:f3:27:40:d2:e4:88:d7:6f:56:0b:dc:97:3a:28:5e:
         61:d0:5c:8e:e4:e3:2f:6e:ec:d1:5d:0b:0e:17:df:79:e4:b6:
         77:ce:50:48:ec:9a:08:24:57:dd:cd:7e:15:2a:66:a1:0b:ae:
         01:36:94:25:0e:35:6e:52:f6:b4:56:be:f7:f6:d1:b2:19:11:
         7c:9c:8c:b9:88:5a:c6:92:f6:03:99:19:6a:78:a6:e6:c6:92:
         b4:2c:f4:f0:80:e0:5e:f6:de:eb:70:88:2f:d8:82:f9:be:b0:
         c9:71:af:75:0f:70:2a:81:d2:f9:3b:1e:fa:10:a2:64:db:3a:
         ef:35:61:70:c8:2a:fb:fe:df:1a:73:82:64:47:48:c8:5b:bd:
         ea:4a:89:78:1a:08:96:1e:28:4a:e5:e4:01:cc:bd:b6:70:b6:
         ad:9e:61:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUARIyVH9rwvBhSXRhjV+ZW0LgO9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB
NTlGOTlENzAeFw0yNTAxMjkxNDQ2MDBaFw0yNTAyMDEyMDMzMDBaMDMxMTAvBgNV
BAMTKDlCNzkxMzE1QTVGRTgzQjAwOUEzNkFFQTE2QTJFOTQ1OEIyODg3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQhc6DXNyblkYyfFdSJ1MTI7T
xxn+XMi0thOHqgdCS+dPX2DqCg6r3Udtcw/BzyTcTqiY7YooWICuWmPkaMKleAPg
74fQBaIrMioHnTc92ioKvjrJ38k0HqfVncFrzyMG6XrRBWEfTKUJ93Uh08cdw7gi
0G6ZwLfi6/0usP4GD4XehD2ZtBc9WzfcmYnxapYkqgGPxDTMzaBmS7QGzGSa3Zp0
8Tk1DxKrGfPiz4Wve8QEjtmp/muVBF3exnVbVXrcVFvnmBBbT2ozR2jD3gcywc7R
hA/thv8LXo195sbnme/TYF7LVGNVV+BNONzj2ksdlijZQ3ZxV0I7KCjMFx7vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm3kTFaX+g7AJo2rqFqLpRYsoh4YwHwYDVR0j
BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE
NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG
OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5
NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw
QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADMBu96WEgCEw3i8nk+xU1Lp4u1qoBTqVhSm
JSdlJw0W/2wVDpLXoik1IZwaeqYgJu3zEvFkXaBGTDXns7xkrxyZwj2XwvYlXHUe
T5xsaLHEoDsllnp4OGD4aUCXRvMnQNLkiNdvVgvclzooXmHQXI7k4y9u7NFdCw4X
33nktnfOUEjsmggkV93NfhUqZqELrgE2lCUONW5S9rRWvvf20bIZEXycjLmIWsaS
9gOZGWp4pubGkrQs9PCA4F723utwiC/Ygvm+sMlxr3UPcCqB0vk7HvoQomTbOu81
YXDIKvv+3xpzgmRHSMhbvepKiXgaCJYeKErl5AHMvbZwtq2eYVk=
-----END CERTIFICATE-----
Generated at Thu May 1 18:01:16 2025 by rpki-client