Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File:                     31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier:          7VCVPj3YwC0htbHQcBEAEgol3ZC3J13I7Pa/1bHMS7s=
Subject key identifier:   13:10:9C:17:37:84:E0:19:D8:87:0E:31:00:1F:83:C8:0A:4F:80:7B
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer:       /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial:       448D25349BBD2D3D3A7D771F5A62DC20B3B3442B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number:          33
Signing time:             Thu 30 Jan 2025 10:51:20 +0000
Manifest this update:     Thu 30 Jan 2025 10:46:20 +0000
Manifest next update:     Sun 02 Feb 2025 15:32:20 +0000
Files and hashes:         1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=)
                          2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: LprDaP1gZ1bG9gDsFxFWqIonpec4+jOngRkD0oHI7wA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:25:34:9b:bd:2d:3d:3a:7d:77:1f:5a:62:dc:20:b3:b3:44:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
        Validity
            Not Before: Jan 30 10:46:20 2025 GMT
            Not After : Feb  2 15:32:20 2025 GMT
        Subject: CN=13109C173784E019D8870E31001F83C80A4F807B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:6f:15:4d:a4:bd:2a:6c:22:a5:ad:17:97:
                    27:9c:d1:15:97:a0:09:0c:36:a4:e7:2e:60:31:1d:
                    d1:19:d5:8a:64:19:f6:60:11:98:e5:95:a0:4c:7b:
                    74:8b:53:88:6d:74:5c:5d:1e:87:e6:09:94:4b:1f:
                    b7:e5:97:64:90:0b:a2:c6:0f:9d:f0:0c:c9:a7:10:
                    5c:ff:8f:94:f5:1e:6a:a8:6e:13:30:71:84:53:dd:
                    f8:14:bd:7d:3f:5f:0d:9b:be:74:d0:7e:8e:5f:30:
                    61:17:1b:2f:b7:c4:12:37:92:ad:05:41:27:b5:f5:
                    41:fb:1c:20:30:d1:cd:f7:ce:ec:e9:c4:03:24:c7:
                    f3:c3:d3:00:e5:36:83:a1:ae:73:81:39:3e:e4:07:
                    13:be:ca:ce:f0:2b:7a:59:37:dd:5f:ae:3e:fe:eb:
                    e0:dd:ab:e1:b7:ae:ae:a3:0d:0d:e6:c3:97:f3:7a:
                    20:4e:05:f5:3e:89:8a:51:fd:12:e9:94:16:22:56:
                    6b:8d:e0:08:fb:65:62:97:03:80:e0:1c:30:02:ab:
                    97:44:70:8c:f3:2a:95:cc:d8:be:51:40:47:d3:8c:
                    1d:49:56:24:5f:ad:7a:c4:5e:33:20:23:23:d9:1b:
                    d9:99:d2:5c:f8:dc:ef:39:dd:8c:63:01:1c:42:c1:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:10:9C:17:37:84:E0:19:D8:87:0E:31:00:1F:83:C8:0A:4F:80:7B
            X509v3 Authority Key Identifier:
                keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:02:cc:b4:ce:b7:e3:62:c4:5d:3f:c4:48:19:9d:6b:d9:
         25:c3:ec:05:ad:9f:9f:72:cb:36:09:c2:9f:a1:b3:91:a6:ec:
         af:db:d8:b9:45:19:a9:f7:2d:50:fd:07:ad:15:be:36:d0:36:
         2f:b8:c2:0a:40:0d:8f:88:0d:02:8d:67:a1:c1:a4:b1:58:2c:
         e6:0b:82:c3:14:55:eb:f1:50:e5:4d:7f:89:c7:3a:6d:03:cd:
         80:5f:b8:56:81:a0:c6:c3:01:ac:8d:ec:ae:3c:b7:0e:d8:cd:
         6f:b9:0f:a7:59:78:00:e6:06:2f:cc:ed:7c:99:b3:f5:62:c8:
         2c:e2:a5:11:77:3e:d0:99:8b:7b:40:b4:6e:99:7d:fe:d5:55:
         66:f7:46:ca:4c:af:fe:45:c0:46:24:85:87:96:35:aa:7e:5a:
         95:77:ab:77:e1:86:23:b0:d2:d8:d2:86:7a:25:61:19:ff:71:
         09:89:a5:d9:af:9b:c1:d7:3f:93:3a:bd:09:fe:aa:db:4a:e8:
         cf:42:93:7c:08:12:f6:02:34:43:5e:68:ca:59:54:d7:69:99:
         8d:80:82:04:67:ef:9e:c7:cb:2a:88:69:1c:55:d2:93:5b:72:
         89:15:2f:e0:74:e2:e3:9d:ee:24:23:c1:ae:0d:fa:49:88:75:
         d1:12:14:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURI0lNJu9LT06fXcfWmLcILOzRCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy
RjQwNkFDNjAeFw0yNTAxMzAxMDQ2MjBaFw0yNTAyMDIxNTMyMjBaMDMxMTAvBgNV
BAMTKDEzMTA5QzE3Mzc4NEUwMTlEODg3MEUzMTAwMUY4M0M4MEE0RjgwN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKW8VTaS9Kmwipa0Xlyec0RWX
oAkMNqTnLmAxHdEZ1YpkGfZgEZjllaBMe3SLU4htdFxdHofmCZRLH7fll2SQC6LG
D53wDMmnEFz/j5T1HmqobhMwcYRT3fgUvX0/Xw2bvnTQfo5fMGEXGy+3xBI3kq0F
QSe19UH7HCAw0c33zuzpxAMkx/PD0wDlNoOhrnOBOT7kBxO+ys7wK3pZN91frj7+
6+Ddq+G3rq6jDQ3mw5fzeiBOBfU+iYpR/RLplBYiVmuN4Aj7ZWKXA4DgHDACq5dE
cIzzKpXM2L5RQEfTjB1JViRfrXrEXjMgIyPZG9mZ0lz43O853YxjARxCwRfbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUExCcFzeE4BnYhw4xAB+DyApPgHswHwYDVR0j
BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1
MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw
NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl
ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz
NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI1WAsy0zrfjYsRdP8RIGZ1r2SXD7AWtn59y
yzYJwp+hs5Gm7K/b2LlFGan3LVD9B60VvjbQNi+4wgpADY+IDQKNZ6HBpLFYLOYL
gsMUVevxUOVNf4nHOm0DzYBfuFaBoMbDAayN7K48tw7YzW+5D6dZeADmBi/M7XyZ
s/ViyCzipRF3PtCZi3tAtG6Zff7VVWb3RspMr/5FwEYkhYeWNap+WpV3q3fhhiOw
0tjShnolYRn/cQmJpdmvm8HXP5M6vQn+qttK6M9Ck3wIEvYCNENeaMpZVNdpmY2A
ggRn757HyyqIaRxV0pNbcokVL+B04uOd7iQjwa4N+kmIddESFBY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:59 2025 by rpki-client