Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
File:                     AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json)
Hash identifier:          oN0/tGnT0poERwGNKfWC2jRWdfI7UPb3NfUkGYqto7Y=
Subject key identifier:   8D:A7:CE:3A:A2:ED:C1:9B:58:AE:F2:10:57:7F:C1:50:CA:77:4D:C8
Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3
Certificate issuer:       /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
Certificate serial:       6E618981ED306713E98828798540039846D49CCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
Manifest number:          87
Signing time:             Wed 29 Jan 2025 20:31:24 +0000
Manifest this update:     Wed 29 Jan 2025 20:26:24 +0000
Manifest next update:     Sun 02 Feb 2025 02:33:24 +0000
Files and hashes:         1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 8FPhxDphugXh+NqSEJNKiuwL/Ju34oBivfOS3hLv1ao=)
                          2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: 7dVc4pPT2uPBtIrbk2mdi7Ht3Lb4vI+T1+sZiGR8pBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:61:89:81:ed:30:67:13:e9:88:28:79:85:40:03:98:46:d4:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
        Validity
            Not Before: Jan 29 20:26:24 2025 GMT
            Not After : Feb  2 02:33:24 2025 GMT
        Subject: CN=8DA7CE3AA2EDC19B58AEF210577FC150CA774DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9d:76:ec:5e:d3:64:23:7b:15:69:b3:71:36:
                    b4:34:8d:59:da:b3:f3:ca:b3:f3:db:c6:7f:fe:a9:
                    e0:5a:76:bc:30:be:ce:10:fb:4f:21:3c:c8:56:46:
                    57:92:64:1e:53:44:66:93:ca:00:fe:59:6e:f3:3c:
                    6f:6b:55:a7:fb:ab:aa:a6:67:c5:d4:34:2d:bf:8a:
                    8b:e6:53:91:56:b1:fc:e5:58:c4:8a:7d:53:0c:63:
                    26:65:be:74:9e:bf:53:eb:46:5d:94:34:62:b3:96:
                    1e:51:73:ae:4d:ce:c3:56:64:77:e2:30:5c:08:8b:
                    2e:f6:85:f7:af:55:83:c2:aa:c4:cf:d2:d2:25:ac:
                    e2:9f:c7:90:80:f5:70:44:0c:36:0e:cb:ef:20:10:
                    c6:6b:32:3c:8a:84:40:66:29:ef:a8:15:28:c5:e3:
                    f7:2f:3f:bd:01:fb:9d:88:f6:51:a9:63:13:3f:47:
                    86:f2:24:98:37:10:92:81:8c:96:4b:8c:2b:d0:8f:
                    bd:97:f9:f2:f3:35:2c:db:07:09:c6:8c:5a:ee:17:
                    c2:8a:15:4f:16:07:46:dc:44:2e:40:2b:4d:b4:c1:
                    5a:68:d1:12:33:73:03:77:4a:5b:62:a4:12:99:0f:
                    b2:f5:ef:bb:95:42:da:c3:a7:cf:a5:5b:da:ff:14:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:CE:3A:A2:ED:C1:9B:58:AE:F2:10:57:7F:C1:50:CA:77:4D:C8
            X509v3 Authority Key Identifier:
                keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:21:4e:72:97:05:8c:07:cd:6c:81:e7:16:31:c1:23:af:f8:
         cb:1c:87:1f:ee:e8:83:ff:49:da:f7:f0:f6:45:5a:3c:2a:36:
         cd:25:52:90:d2:0c:aa:31:72:99:8b:01:9f:82:47:27:4b:b3:
         b9:43:70:3d:fe:97:11:9b:6e:e7:2e:f7:ac:39:54:3c:a2:d5:
         38:a5:2b:b1:f1:8e:5c:63:3b:65:b6:d3:ce:8a:cb:f2:38:6b:
         27:ff:2b:e0:7e:3a:b0:fe:f4:ee:6e:d5:d8:6d:d8:6b:b9:70:
         79:35:33:4f:c9:7d:ec:f0:21:ce:0d:71:85:d7:07:da:ef:c6:
         07:d8:e6:49:4e:2f:ec:45:9a:86:dc:f3:4d:70:b0:ae:00:6c:
         38:bc:fe:cf:e1:c2:6c:97:eb:fd:92:76:12:d5:a5:3b:91:fb:
         20:d4:1c:b0:23:8c:f4:f5:c8:82:7c:11:ec:87:0b:10:2d:dd:
         b0:31:ee:e5:e9:b3:17:a2:3f:92:d1:58:53:46:40:bd:76:9b:
         1a:b3:18:86:21:56:48:45:ad:1c:13:61:8a:95:4c:04:df:e7:
         5c:48:3c:02:74:ad:ea:2d:66:f2:28:07:a4:eb:5b:00:76:ca:
         4e:8c:2d:b7:8e:43:f4:76:8d:fd:ef:a2:9b:3c:e2:02:e9:3e:
         c2:20:0a:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbmGJge0wZxPpiCh5hUADmEbUnMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2
MzQyQjRDMzAeFw0yNTAxMjkyMDI2MjRaFw0yNTAyMDIwMjMzMjRaMDMxMTAvBgNV
BAMTKDhEQTdDRTNBQTJFREMxOUI1OEFFRjIxMDU3N0ZDMTUwQ0E3NzREQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDznXbsXtNkI3sVabNxNrQ0jVna
s/PKs/Pbxn/+qeBadrwwvs4Q+08hPMhWRleSZB5TRGaTygD+WW7zPG9rVaf7q6qm
Z8XUNC2/iovmU5FWsfzlWMSKfVMMYyZlvnSev1PrRl2UNGKzlh5Rc65NzsNWZHfi
MFwIiy72hfevVYPCqsTP0tIlrOKfx5CA9XBEDDYOy+8gEMZrMjyKhEBmKe+oFSjF
4/cvP70B+52I9lGpYxM/R4byJJg3EJKBjJZLjCvQj72X+fLzNSzbBwnGjFruF8KK
FU8WB0bcRC5AK020wVpo0RIzcwN3SltipBKZD7L177uVQtrDp8+lW9r/FDSjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjafOOqLtwZtYrvIQV3/BUMp3TcgwHwYDVR0j
BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5
MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy
QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0
OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG
NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFwhTnKXBYwHzWyB5xYxwSOv+Mschx/u6IP/
Sdr38PZFWjwqNs0lUpDSDKoxcpmLAZ+CRydLs7lDcD3+lxGbbucu96w5VDyi1Til
K7HxjlxjO2W2086Ky/I4ayf/K+B+OrD+9O5u1dht2Gu5cHk1M0/JfezwIc4NcYXX
B9rvxgfY5klOL+xFmobc801wsK4AbDi8/s/hwmyX6/2SdhLVpTuR+yDUHLAjjPT1
yIJ8EeyHCxAt3bAx7uXpsxeiP5LRWFNGQL12mxqzGIYhVkhFrRwTYYqVTATf51xI
PAJ0reotZvIoB6TrWwB2yk6MLbeOQ/R2jf3vops84gLpPsIgCsg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:27 2025 by rpki-client