Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
File:                     401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json)
Hash identifier:          FdrKEhIySbOWjYOBpllTnIPbAnIKNG2AUu2iNmEYqL0=
Subject key identifier:   D6:0F:33:6A:29:C0:B3:E1:8A:7E:64:36:87:58:87:F5:EF:48:87:34
Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
Certificate issuer:       /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Certificate serial:       5D0BD79F0D5E72C6EFDDFB92B8D71C1152F1D30B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
Manifest number:          0187
Signing time:             Fri 31 Jan 2025 17:21:45 +0000
Manifest this update:     Fri 31 Jan 2025 17:16:45 +0000
Manifest next update:     Mon 03 Feb 2025 18:21:45 +0000
Files and hashes:         1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: KFpFx/38FMVzrhaNrGUmkNdli/YHnb1cJexpgon/xPs=)
                          2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=)
                          3: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=)
                          4: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0b:d7:9f:0d:5e:72:c6:ef:dd:fb:92:b8:d7:1c:11:52:f1:d3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
        Validity
            Not Before: Jan 31 17:16:45 2025 GMT
            Not After : Feb  3 18:21:45 2025 GMT
        Subject: CN=D60F336A29C0B3E18A7E6436875887F5EF488734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:63:31:33:f2:e2:5b:a4:65:d8:89:3e:ec:
                    2b:7b:62:01:17:02:8b:7a:02:34:c9:16:6b:13:a6:
                    b7:d8:e1:16:cc:c2:38:26:64:9c:56:cc:24:83:56:
                    45:0f:17:bb:61:c4:16:b3:81:74:49:97:c8:30:03:
                    19:69:c3:fd:8a:88:b1:55:77:89:f1:66:11:34:54:
                    6a:ea:37:42:d0:91:f9:ea:63:d1:cf:de:25:8c:56:
                    33:b7:17:0f:db:89:d7:e8:32:b8:36:eb:e8:e0:69:
                    e1:37:a6:e9:c4:46:0f:18:ad:db:30:93:f9:51:5b:
                    e1:bc:fd:58:0b:25:88:b0:3e:11:7f:58:4e:82:50:
                    1b:db:9f:35:c3:49:ac:d1:a5:5b:cd:35:5d:4a:bc:
                    97:15:d9:fb:d1:87:ea:13:7e:cb:bb:29:43:19:a6:
                    88:3a:e3:31:99:c3:ae:22:82:55:6d:c3:0c:8b:ce:
                    63:88:76:65:49:df:51:70:d4:51:df:ae:e1:75:5c:
                    e3:dc:b9:b6:ba:9f:79:e9:e3:c6:18:d7:4f:5b:7c:
                    3b:6d:01:31:5d:28:a6:0c:1b:17:74:0d:34:b7:70:
                    f9:c6:f0:e3:83:11:db:69:6b:4c:dd:01:cf:8c:ad:
                    d9:e3:05:30:d5:2f:2d:2a:47:c2:a7:c3:82:9f:6e:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:33:6A:29:C0:B3:E1:8A:7E:64:36:87:58:87:F5:EF:48:87:34
            X509v3 Authority Key Identifier:
                keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:e6:6e:4b:a9:49:8e:78:2e:50:29:d2:b5:be:b1:73:fb:
         af:39:36:ef:29:58:c3:47:ba:83:de:64:61:32:8c:4d:1b:33:
         4a:79:17:44:8b:ac:bb:ec:14:5b:7a:d0:d7:69:a9:fe:1d:a7:
         21:02:5e:6a:35:ad:f2:9f:98:62:32:be:aa:a2:55:e6:bf:c6:
         c9:5e:b4:90:64:27:67:8c:95:45:d9:2f:2e:5f:d2:77:16:47:
         de:e9:01:1f:9e:b4:c5:3c:5e:32:77:fd:45:4d:a5:98:10:46:
         16:a5:59:92:5b:95:bc:29:65:09:0f:06:ee:b7:86:4a:2e:a3:
         5f:99:1b:da:9d:b1:a0:99:ff:4d:76:cf:8c:34:69:87:b5:cc:
         78:5a:d5:dc:18:8f:8d:96:e5:6b:f9:cf:59:d3:81:a8:7e:24:
         1e:6c:ae:0a:50:5e:03:46:1a:da:1c:96:43:85:94:13:7c:19:
         1e:bd:9c:50:3e:4a:a5:9a:5a:58:2b:bc:16:f2:4f:60:5d:00:
         47:a8:5b:53:54:0f:1a:89:be:67:90:ad:1c:d5:5d:4e:7f:71:
         11:d4:9e:2f:26:86:02:c0:65:a4:6b:e8:f1:56:5b:09:e6:20:
         c9:ab:77:e5:9d:4f:ac:e7:0d:10:7b:42:91:a1:69:52:a9:61:
         67:97:e5:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXQvXnw1ecsbv3fuSuNccEVLx0wswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG
OURERTNERDAeFw0yNTAxMzExNzE2NDVaFw0yNTAyMDMxODIxNDVaMDMxMTAvBgNV
BAMTKEQ2MEYzMzZBMjlDMEIzRTE4QTdFNjQzNjg3NTg4N0Y1RUY0ODg3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhGMxM/LiW6Rl2Ik+7Ct7YgEX
Aot6AjTJFmsTprfY4RbMwjgmZJxWzCSDVkUPF7thxBazgXRJl8gwAxlpw/2KiLFV
d4nxZhE0VGrqN0LQkfnqY9HP3iWMVjO3Fw/bidfoMrg26+jgaeE3punERg8Yrdsw
k/lRW+G8/VgLJYiwPhF/WE6CUBvbnzXDSazRpVvNNV1KvJcV2fvRh+oTfsu7KUMZ
pog64zGZw64iglVtwwyLzmOIdmVJ31Fw1FHfruF1XOPcuba6n3np48YY109bfDtt
ATFdKKYMGxd0DTS3cPnG8OODEdtpa0zdAc+MrdnjBTDVLy0qR8Knw4KfbskHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1g8zainAs+GKfmQ2h1iH9e9IhzQwHwYDVR0j
BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1
OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE
RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5
YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz
RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKuG5m5LqUmOeC5QKdK1vrFz+685Nu8pWMNH
uoPeZGEyjE0bM0p5F0SLrLvsFFt60Ndpqf4dpyECXmo1rfKfmGIyvqqiVea/xsle
tJBkJ2eMlUXZLy5f0ncWR97pAR+etMU8XjJ3/UVNpZgQRhalWZJblbwpZQkPBu63
hkouo1+ZG9qdsaCZ/012z4w0aYe1zHha1dwYj42W5Wv5z1nTgah+JB5srgpQXgNG
GtoclkOFlBN8GR69nFA+SqWaWlgrvBbyT2BdAEeoW1NUDxqJvmeQrRzVXU5/cRHU
ni8mhgLAZaRr6PFWWwnmIMmrd+WdT6znDRB7QpGhaVKpYWeX5a8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:34 2025 by rpki-client