Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft
File:                     4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json)
Hash identifier:          p0NIWZL0IvrnQNjJie0AYKEkBlM6Zlap+xlJFLJ/FpU=
Subject key identifier:   99:77:A8:BD:1B:2D:49:43:68:A6:7F:FB:B7:11:AA:FD:57:B4:16:3F
Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2
Certificate issuer:       /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2
Certificate serial:       5677B7D5EC119E0F65C3F9A97F3B5D2DFC51968F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft
Manifest number:          45
Signing time:             Thu 30 Jan 2025 00:11:52 +0000
Manifest this update:     Thu 30 Jan 2025 00:06:52 +0000
Manifest next update:     Sun 02 Feb 2025 01:47:52 +0000
Files and hashes:         1: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: iiMZJOJE0I/AUErV1vyRCE+uPLpfCmgdzT+r6epJErs=)
                          2: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: ABcl7hjRsw3Xa0yDPigEjdLuUfujbY1jm15mYQSG+s4=)
                          3: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: ag28+P+eOQyfadN0gMKVSJkR4d5GNG+hqCdbSGTg4aA=)
                          4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: xB/XqJ5dJTYe2nf2B7toQua0M24fdekoYi8o2PugdP4=)
                          5: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: TD2xB1HLXamIjjFpw2dotgVlnTzLq7PRhXP0sb7oneE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:77:b7:d5:ec:11:9e:0f:65:c3:f9:a9:7f:3b:5d:2d:fc:51:96:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2
        Validity
            Not Before: Jan 30 00:06:52 2025 GMT
            Not After : Feb  2 01:47:52 2025 GMT
        Subject: CN=9977A8BD1B2D494368A67FFBB711AAFD57B4163F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:66:51:6d:91:53:f3:71:7d:39:15:2d:50:
                    dc:32:f9:56:8b:3f:3c:3e:22:43:3e:ac:96:6d:34:
                    06:e9:d8:6f:d7:07:28:44:09:ba:47:21:e4:7b:1c:
                    cb:13:a2:63:9e:96:4d:7c:48:0f:33:25:a3:66:2b:
                    a3:88:80:52:5d:23:52:e8:8a:b4:34:29:ef:78:af:
                    e9:23:7f:f6:89:c9:aa:ef:e8:57:bc:72:c6:eb:67:
                    2a:b9:87:2e:cc:43:15:84:ef:9d:45:0f:b3:2d:71:
                    c2:92:5a:85:2a:92:42:d8:e4:97:13:7f:2f:88:b8:
                    52:b7:02:94:c5:bc:f8:4b:2d:24:73:50:31:1f:46:
                    79:4e:eb:30:76:34:09:14:75:b0:fc:fc:be:6f:eb:
                    ba:81:00:42:df:f5:78:aa:08:2f:0d:63:19:e1:cb:
                    74:8c:67:bc:9d:70:9b:86:51:fc:69:b2:76:82:6d:
                    92:9e:ab:70:23:15:c7:ed:4c:cf:eb:ee:22:88:0a:
                    8e:02:81:2c:6c:98:00:ca:a0:1d:36:6b:59:64:a9:
                    91:a3:81:8f:ee:78:ee:24:49:5a:0c:c1:b9:aa:b0:
                    5a:cb:4e:9e:97:09:f7:64:86:cf:7a:16:2e:65:c8:
                    51:c2:8d:b4:42:e1:b5:18:dd:ce:91:19:5f:44:6e:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:77:A8:BD:1B:2D:49:43:68:A6:7F:FB:B7:11:AA:FD:57:B4:16:3F
            X509v3 Authority Key Identifier:
                keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:6f:70:5c:9d:de:5a:a0:9a:92:ab:29:2e:48:07:9c:08:
         a6:e5:0e:6e:2b:43:dd:f9:9e:97:28:0f:4b:8e:07:f6:35:7c:
         1f:ce:4c:ba:63:6c:10:7d:82:f9:3f:24:a3:a2:be:0f:53:18:
         1f:03:6c:78:91:8b:c5:5e:b8:bc:7a:e4:a0:a9:fa:8a:60:7e:
         3c:73:6e:e2:a7:ac:73:db:85:18:2b:a7:a0:3e:08:a0:0d:62:
         81:2f:bd:11:d6:cd:3b:6d:54:40:d9:6e:60:a0:b0:e9:a2:8c:
         68:c4:db:71:76:ac:34:aa:39:0b:7d:5b:04:f5:f4:bd:df:0f:
         7f:89:ec:58:c7:75:ea:58:08:d3:46:8f:a7:ec:fa:b7:1d:a9:
         52:1f:6b:0f:39:41:71:74:7b:38:f7:32:8b:5c:b5:19:24:00:
         f5:e2:7c:6e:75:3b:b7:58:ef:b1:40:c0:2b:3d:04:23:39:25:
         c2:23:b1:3e:26:a2:1d:63:b4:bd:a1:81:b0:a2:f8:f3:4f:6a:
         27:06:0a:32:20:7c:a5:bf:46:0f:b0:8c:98:6a:66:89:6f:8d:
         8d:2f:ba:c1:20:df:ed:e4:ea:9e:cf:72:ab:a4:17:d8:b1:30:
         09:76:1d:74:35:4b:a1:0a:2b:48:a7:81:be:31:2f:0e:cc:61:
         71:67:cd:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVne31ewRng9lw/mpfztdLfxRlo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz
NEM0OEFGMjAeFw0yNTAxMzAwMDA2NTJaFw0yNTAyMDIwMTQ3NTJaMDMxMTAvBgNV
BAMTKDk5NzdBOEJEMUIyRDQ5NDM2OEE2N0ZGQkI3MTFBQUZENTdCNDE2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8WZRbZFT83F9ORUtUNwy+VaL
Pzw+IkM+rJZtNAbp2G/XByhECbpHIeR7HMsTomOelk18SA8zJaNmK6OIgFJdI1Lo
irQ0Ke94r+kjf/aJyarv6Fe8csbrZyq5hy7MQxWE751FD7MtccKSWoUqkkLY5JcT
fy+IuFK3ApTFvPhLLSRzUDEfRnlO6zB2NAkUdbD8/L5v67qBAELf9XiqCC8NYxnh
y3SMZ7ydcJuGUfxpsnaCbZKeq3AjFcftTM/r7iKICo4CgSxsmADKoB02a1lkqZGj
gY/ueO4kSVoMwbmqsFrLTp6XCfdkhs96Fi5lyFHCjbRC4bUY3c6RGV9Ebur/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmXeovRstSUNopn/7txGq/Ve0Fj8wHwYDVR0j
BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5
RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0
OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw
MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx
MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIIOb3Bcnd5aoJqSqykuSAecCKblDm4rQ935
npcoD0uOB/Y1fB/OTLpjbBB9gvk/JKOivg9TGB8DbHiRi8VeuLx65KCp+opgfjxz
buKnrHPbhRgrp6A+CKANYoEvvRHWzTttVEDZbmCgsOmijGjE23F2rDSqOQt9WwT1
9L3fD3+J7FjHdepYCNNGj6fs+rcdqVIfaw85QXF0ezj3MotctRkkAPXifG51O7dY
77FAwCs9BCM5JcIjsT4moh1jtL2hgbCi+PNPaicGCjIgfKW/Rg+wjJhqZolvjY0v
usEg3+3k6p7PcqukF9ixMAl2HXQ1S6EKK0ingb4xLw7MYXFnzXk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:44 2025 by rpki-client