Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
File:                     3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json)
Hash identifier:          ff6lY5e9xsIf7c4b0KJw9FOb3bHKKaDGuhIGQgXg41o=
Subject key identifier:   AF:4B:94:46:37:A3:A3:7E:6C:E5:F7:92:12:FB:B0:18:2C:A1:9A:33
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Certificate issuer:       /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial:       5794770F60350EDDD46DAD2EBCD8BEB8ADA9C1E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
Manifest number:          8B
Signing time:             Fri 31 Jan 2025 13:40:51 +0000
Manifest this update:     Fri 31 Jan 2025 13:35:51 +0000
Manifest next update:     Tue 04 Feb 2025 01:11:51 +0000
Files and hashes:         1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: wfBLV7crHpRvOvrkP8sO7cSqml5P6MQ5e6U//U3tlqI=)
                          2: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: 6yxEzMHU7+PK4cNWhmMKI17RRSRn17jRj5uNQ7q+KnY=)
                          3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: J/Wg5I3AAWGTjt0qXGXk8aEhIm0PYlLw1GdX0NdjbV8=)
                          4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 3pQvTbCuYBm6Vo1nBcoEIrPxsYdZ+bSd9Ar6iUoXGJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:77:0f:60:35:0e:dd:d4:6d:ad:2e:bc:d8:be:b8:ad:a9:c1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
        Validity
            Not Before: Jan 31 13:35:51 2025 GMT
            Not After : Feb  4 01:11:51 2025 GMT
        Subject: CN=AF4B944637A3A37E6CE5F79212FBB0182CA19A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:ad:8b:9b:15:e5:36:ba:33:72:b7:a9:1b:
                    29:47:da:69:69:1d:2e:2f:c6:ec:85:f4:ac:22:83:
                    64:aa:b8:c1:7e:b9:a4:d0:44:5e:5d:88:d6:b8:f0:
                    5a:f2:55:91:3b:3a:68:7b:df:de:aa:1b:20:88:99:
                    bf:05:45:d3:d7:6c:26:cc:20:d6:98:3b:ef:ab:ff:
                    27:d0:e5:5d:04:32:af:9d:c6:24:61:9d:db:6f:6e:
                    8b:dc:5f:a0:41:b0:69:c5:d2:9c:d7:38:99:9e:bf:
                    47:28:6a:09:9e:84:4e:3b:9e:68:cc:11:25:e1:ce:
                    10:97:45:8a:bf:89:9b:c9:cb:93:2e:2f:93:6b:76:
                    52:1c:c9:9a:17:28:91:ee:cf:17:34:eb:41:1d:2e:
                    2a:d3:16:db:76:fd:aa:96:dd:7a:2f:d6:0a:5c:cf:
                    eb:ed:f0:d4:54:d1:1b:6e:ae:3d:dd:48:4d:5b:5a:
                    a1:db:89:d4:79:c7:e8:67:e8:85:b8:05:c1:30:09:
                    5c:af:6c:f9:89:cc:80:80:92:20:2b:2f:c4:e5:a5:
                    cd:92:bb:b5:bc:84:0c:e8:ae:44:22:9b:53:cb:4d:
                    f9:33:f5:f0:df:a2:82:9c:f7:1e:46:e9:52:80:50:
                    aa:7b:5c:53:ee:80:e6:18:ea:9a:44:05:82:55:ce:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4B:94:46:37:A3:A3:7E:6C:E5:F7:92:12:FB:B0:18:2C:A1:9A:33
            X509v3 Authority Key Identifier:
                keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:88:74:c2:32:77:14:79:08:17:90:f8:61:82:c3:c3:89:ff:
         e9:37:fc:9f:3c:20:2d:96:ea:be:23:a8:5a:2c:93:36:69:c0:
         f9:82:18:8b:4a:e7:f4:95:7c:fa:96:95:cc:5b:8f:20:b3:d5:
         95:ef:d2:01:82:fe:dc:1f:8a:52:73:e4:8c:c3:70:b5:65:f0:
         dc:37:c7:77:60:f5:ea:5d:22:10:de:b4:1f:0a:43:8f:8f:e0:
         20:26:1b:d1:4b:34:40:f8:d0:3b:23:73:7d:dd:97:f0:04:7e:
         c3:d2:e2:61:31:b2:f5:58:f6:60:10:26:49:2a:86:e0:19:1f:
         67:b6:57:8e:1e:3b:4d:fc:01:d9:e4:9f:13:1f:4a:c4:ab:eb:
         a4:05:85:ed:ac:b6:5c:07:3c:ca:46:f9:9a:d2:fa:83:68:1c:
         94:f1:db:c0:53:23:22:bf:df:66:78:e0:34:17:c4:7b:70:cd:
         05:49:5a:37:72:76:04:f2:f0:33:61:3c:8a:55:2e:85:5c:2d:
         81:51:f3:ad:2e:35:54:e8:b2:8e:8d:e0:74:52:57:08:51:23:
         e0:bc:07:2e:1e:c7:65:df:e9:9c:96:80:4d:96:21:b3:53:5a:
         c6:ad:b2:11:3e:ae:ac:f3:aa:d6:44:bb:e4:21:25:f7:cc:50:
         0f:d6:61:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV5R3D2A1Dt3Uba0uvNi+uK2pwecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF
MzREMjlBQjAeFw0yNTAxMzExMzM1NTFaFw0yNTAyMDQwMTExNTFaMDMxMTAvBgNV
BAMTKEFGNEI5NDQ2MzdBM0EzN0U2Q0U1Rjc5MjEyRkJCMDE4MkNBMTlBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZE62LmxXlNrozcrepGylH2mlp
HS4vxuyF9Kwig2SquMF+uaTQRF5diNa48FryVZE7Omh7396qGyCImb8FRdPXbCbM
INaYO++r/yfQ5V0EMq+dxiRhndtvbovcX6BBsGnF0pzXOJmev0coagmehE47nmjM
ESXhzhCXRYq/iZvJy5MuL5NrdlIcyZoXKJHuzxc060EdLirTFtt2/aqW3Xov1gpc
z+vt8NRU0Rturj3dSE1bWqHbidR5x+hn6IW4BcEwCVyvbPmJzICAkiArL8Tlpc2S
u7W8hAzorkQim1PLTfkz9fDfooKc9x5G6VKAUKp7XFPugOYY6ppEBYJVzuDtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr0uURjejo35s5feSEvuwGCyhmjMwHwYDVR0j
BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2
MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE
MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl
Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE
NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEmIdMIydxR5CBeQ+GGCw8OJ/+k3/J88IC2W
6r4jqFoskzZpwPmCGItK5/SVfPqWlcxbjyCz1ZXv0gGC/twfilJz5IzDcLVl8Nw3
x3dg9epdIhDetB8KQ4+P4CAmG9FLNED40Dsjc33dl/AEfsPS4mExsvVY9mAQJkkq
huAZH2e2V44eO038AdnknxMfSsSr66QFhe2stlwHPMpG+ZrS+oNoHJTx28BTIyK/
32Z44DQXxHtwzQVJWjdydgTy8DNhPIpVLoVcLYFR860uNVToso6N4HRSVwhRI+C8
By4ex2Xf6ZyWgE2WIbNTWsatshE+rqzzqtZEu+QhJffMUA/WYUQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:08 2025 by rpki-client