Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft
File:                     1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json)
Hash identifier:          18D/xt8fPuOwHiEotDx0LHdBL+gKYc8HpzH9k7IQLJE=
Subject key identifier:   B4:89:8C:DF:49:5B:EB:B0:94:35:80:D7:3C:18:3C:FC:79:4D:10:45
Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19
Certificate issuer:       /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
Certificate serial:       42C6C5C845142675AAADBEC2046BB1A960F3EA0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft
Manifest number:          0474
Signing time:             Thu 30 Jan 2025 16:11:43 +0000
Manifest this update:     Thu 30 Jan 2025 16:06:43 +0000
Manifest next update:     Mon 03 Feb 2025 01:54:43 +0000
Files and hashes:         1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: uhbTS40xOE2iorcFCGhU6uKqyXCDewHO7yiFkBSc5gw=)
                          2: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: cpwQPOshbZqAxARkDdYqjpvJZLU0Mn5NGVBdHrBMD2I=)
                          3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: UaGmn4kTfe+1TDn5eCuN9O53yKjU57F4Hz3jxRXHWWY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:c5:c8:45:14:26:75:aa:ad:be:c2:04:6b:b1:a9:60:f3:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
        Validity
            Not Before: Jan 30 16:06:43 2025 GMT
            Not After : Feb  3 01:54:43 2025 GMT
        Subject: CN=B4898CDF495BEBB0943580D73C183CFC794D1045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:eb:38:28:a1:75:d6:4c:bd:e0:e0:ee:f3:
                    bf:74:e4:8b:b9:b5:6f:f1:19:6c:6d:39:cd:f6:81:
                    e8:65:ee:9a:a4:40:57:93:3b:09:82:0e:5c:33:ec:
                    9e:e7:96:e0:74:74:62:78:ed:ed:e5:19:9f:1e:c6:
                    de:f1:eb:ce:e1:1b:77:85:43:bb:30:51:85:9e:09:
                    52:72:80:16:11:09:c3:eb:a5:cb:ff:eb:19:09:7f:
                    13:eb:f7:56:4f:47:8e:22:d8:91:7a:fb:83:01:96:
                    87:a4:3c:54:64:cb:61:1b:96:30:45:f4:02:e2:5d:
                    f6:e6:87:9d:b0:f9:a4:8d:6b:03:45:9f:6e:d5:db:
                    ef:b6:d8:0c:1e:18:67:1f:62:42:fd:38:05:71:f8:
                    d0:80:ae:16:33:0f:27:56:9d:ca:e2:f9:8f:43:4a:
                    39:49:56:f3:88:5b:a3:45:00:53:3d:09:f7:e2:94:
                    9c:ff:f4:e5:ef:04:37:5f:18:89:ba:c8:a8:4e:8b:
                    c3:44:d6:94:27:69:b9:2d:70:40:a7:60:cf:d0:a3:
                    dc:c9:8f:05:04:37:9f:52:5a:5c:27:81:4b:7a:88:
                    4f:57:44:06:48:bd:6e:c4:af:d0:ef:0c:27:18:52:
                    c2:3a:bb:71:0b:dd:76:b0:83:5e:92:2a:b6:9a:4d:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:8C:DF:49:5B:EB:B0:94:35:80:D7:3C:18:3C:FC:79:4D:10:45
            X509v3 Authority Key Identifier:
                keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:98:9e:e3:fc:83:ae:51:21:02:0c:62:43:a2:18:5e:3a:
         44:10:f7:e1:35:cf:f3:c1:2f:78:26:77:2a:58:ea:75:9a:21:
         18:da:2a:f2:a7:99:13:7c:79:c6:43:5d:00:a6:a9:47:46:ae:
         15:30:36:d7:1a:74:57:6b:0c:d5:f2:a8:3b:59:f5:3b:36:73:
         21:17:fb:11:5a:c2:de:2d:fb:10:22:ff:b8:c8:13:85:03:d2:
         c2:9e:be:72:57:e1:6d:0e:aa:22:ff:22:0a:29:22:02:26:48:
         7e:81:81:11:cd:bf:8a:a3:f5:2b:02:5c:38:f2:3d:31:77:8b:
         4d:16:c2:03:5a:76:39:5d:16:22:5e:0d:d2:f2:d9:53:21:55:
         0d:4f:00:96:10:67:7d:b4:93:b9:48:e7:e5:23:5e:30:37:d1:
         9a:2a:b2:f8:7d:f3:5b:61:73:c8:c2:24:a9:d4:a9:6a:c1:b0:
         73:0a:e4:5b:fe:8a:76:68:25:a0:f3:3d:cc:d5:06:ee:de:6d:
         79:24:54:91:85:25:fa:a0:6e:16:e6:8a:68:f0:f6:aa:82:67:
         75:6e:fc:d1:eb:99:c5:56:53:e2:12:0d:fe:d4:61:59:a8:98:
         a0:ee:00:45:50:c5:b6:be:8c:79:93:48:39:63:01:d1:bd:ea:
         34:b7:df:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQsbFyEUUJnWqrb7CBGuxqWDz6g8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2
OEY4MDQxOTAeFw0yNTAxMzAxNjA2NDNaFw0yNTAyMDMwMTU0NDNaMDMxMTAvBgNV
BAMTKEI0ODk4Q0RGNDk1QkVCQjA5NDM1ODBENzNDMTgzQ0ZDNzk0RDEwNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXm+s4KKF11ky94ODu87905Iu5
tW/xGWxtOc32gehl7pqkQFeTOwmCDlwz7J7nluB0dGJ47e3lGZ8ext7x687hG3eF
Q7swUYWeCVJygBYRCcPrpcv/6xkJfxPr91ZPR44i2JF6+4MBloekPFRky2EbljBF
9ALiXfbmh52w+aSNawNFn27V2++22AweGGcfYkL9OAVx+NCArhYzDydWncri+Y9D
SjlJVvOIW6NFAFM9CffilJz/9OXvBDdfGIm6yKhOi8NE1pQnabktcECnYM/Qo9zJ
jwUEN59SWlwngUt6iE9XRAZIvW7Er9DvDCcYUsI6u3EL3Xawg16SKraaTfHrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtImM30lb67CUNYDXPBg8/HlNEEUwHwYDVR0j
BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy
OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4
MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz
ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2
QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ/9mJ7j/IOuUSECDGJDohheOkQQ9+E1z/PB
L3gmdypY6nWaIRjaKvKnmRN8ecZDXQCmqUdGrhUwNtcadFdrDNXyqDtZ9Ts2cyEX
+xFawt4t+xAi/7jIE4UD0sKevnJX4W0OqiL/IgopIgImSH6BgRHNv4qj9SsCXDjy
PTF3i00WwgNadjldFiJeDdLy2VMhVQ1PAJYQZ320k7lI5+UjXjA30Zoqsvh981th
c8jCJKnUqWrBsHMK5Fv+inZoJaDzPczVBu7ebXkkVJGFJfqgbhbmimjw9qqCZ3Vu
/NHrmcVWU+ISDf7UYVmomKDuAEVQxba+jHmTSDljAdG96jS332E=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:53 2025 by rpki-client