Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft
File:                     2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json)
Hash identifier:          Deq+tD7xEe9aTasOm/UYvNqxHdPbag3tFy93jdrmKSE=
Subject key identifier:   3D:24:29:0D:E5:17:00:B3:A1:94:89:02:5E:AC:5C:E2:E2:36:9B:7E
Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36
Certificate issuer:       /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036
Certificate serial:       52B5DE6D509FED06361C08062DC99466E9371D0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft
Manifest number:          019C
Signing time:             Thu 30 Jan 2025 14:01:11 +0000
Manifest this update:     Thu 30 Jan 2025 13:56:11 +0000
Manifest next update:     Sun 02 Feb 2025 14:32:11 +0000
Files and hashes:         1: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: KPo4wuLbGzX/6ydQMeGG4vRz99frNxB88+YZBW4aDp8=)
                          2: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: 3UvnBcui87LYPA2SbYIlZDaFPGGGRUhi+1qABcYcN4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b5:de:6d:50:9f:ed:06:36:1c:08:06:2d:c9:94:66:e9:37:1d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036
        Validity
            Not Before: Jan 30 13:56:11 2025 GMT
            Not After : Feb  2 14:32:11 2025 GMT
        Subject: CN=3D24290DE51700B3A19489025EAC5CE2E2369B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:e2:df:72:77:1f:40:2f:7f:1e:8b:25:c5:
                    c2:21:b7:18:4a:8a:6e:f7:48:a6:ae:34:47:0c:21:
                    f2:7b:88:1c:06:4d:ba:55:4f:ab:cc:0a:85:7f:cd:
                    a5:12:8f:e3:ea:b4:93:fe:83:55:42:2d:40:5c:05:
                    3e:26:b8:3f:6f:2b:b3:bc:d2:a3:79:50:01:27:86:
                    33:c6:58:29:ac:4b:43:d5:03:f3:42:db:22:e9:b0:
                    64:94:a8:78:e9:eb:84:a3:6f:78:9d:21:1c:ad:48:
                    6c:7a:4d:ba:5a:be:5f:cc:c4:4e:5e:4d:a7:89:69:
                    ed:0f:6b:eb:12:b9:94:be:2c:47:81:70:f0:15:d8:
                    a3:03:fb:5a:3d:9c:7a:cd:ae:b4:95:3d:4d:42:f3:
                    73:d3:0b:fe:b1:21:1f:99:7f:05:be:e5:2b:b1:ac:
                    df:4d:e8:22:74:83:eb:83:45:bc:e8:b5:05:e7:16:
                    ac:18:32:a6:91:9f:46:35:e9:35:8e:0f:17:72:c0:
                    bd:cf:e8:26:d2:27:d8:95:a3:12:79:9f:f8:e0:d2:
                    58:e5:7c:24:31:59:c8:45:04:31:46:8e:54:9b:81:
                    d4:63:9d:3e:d2:de:b2:00:d3:dd:94:ae:c8:39:5f:
                    97:56:66:99:55:87:f7:e9:d0:b4:6f:b0:ea:8b:50:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:24:29:0D:E5:17:00:B3:A1:94:89:02:5E:AC:5C:E2:E2:36:9B:7E
            X509v3 Authority Key Identifier:
                keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:45:5b:eb:39:a9:fc:b9:1e:02:98:2c:21:df:0d:74:56:
         53:be:d2:59:6b:b7:67:2d:c1:de:84:c9:b9:b5:78:1f:e9:29:
         56:35:3c:1d:fa:79:2e:9f:db:ff:4b:02:42:57:78:94:09:77:
         92:1b:66:23:d0:9e:05:34:2b:b1:3f:3e:0a:72:38:f2:e9:33:
         2c:d0:32:36:5c:df:98:58:37:eb:80:42:ba:1f:80:80:73:02:
         ca:10:82:c6:e8:f4:15:71:7f:05:c1:00:d2:65:81:d8:73:b9:
         41:19:26:39:ed:90:7d:eb:d3:46:5c:1e:20:a4:37:37:bf:67:
         24:09:d2:dd:9c:2b:ca:13:23:df:ce:93:46:f4:bc:29:b4:a6:
         6a:86:7e:77:04:06:91:40:6f:e6:c1:17:89:f0:5e:2f:9c:06:
         c3:ff:25:e3:b1:1a:47:4e:6c:38:ba:c2:52:49:82:e0:20:e2:
         94:f5:7a:85:40:5f:b5:27:24:9a:1c:8d:98:62:1d:83:ad:4f:
         60:61:a0:69:77:2b:b3:07:18:3b:df:18:a5:3f:3d:8e:3b:6e:
         f7:d6:b4:0e:89:bb:d9:05:bb:60:d4:54:7e:12:09:2d:c7:ab:
         a0:57:e1:27:68:56:5b:85:83:11:cb:c4:f7:ba:f5:fc:9e:e7:
         c8:8b:58:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUrXebVCf7QY2HAgGLcmUZuk3HQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw
QUM2QTAzNjAeFw0yNTAxMzAxMzU2MTFaFw0yNTAyMDIxNDMyMTFaMDMxMTAvBgNV
BAMTKDNEMjQyOTBERTUxNzAwQjNBMTk0ODkwMjVFQUM1Q0UyRTIzNjlCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtuLfcncfQC9/HoslxcIhtxhK
im73SKauNEcMIfJ7iBwGTbpVT6vMCoV/zaUSj+PqtJP+g1VCLUBcBT4muD9vK7O8
0qN5UAEnhjPGWCmsS0PVA/NC2yLpsGSUqHjp64Sjb3idIRytSGx6Tbpavl/MxE5e
TaeJae0Pa+sSuZS+LEeBcPAV2KMD+1o9nHrNrrSVPU1C83PTC/6xIR+ZfwW+5Sux
rN9N6CJ0g+uDRbzotQXnFqwYMqaRn0Y16TWODxdywL3P6CbSJ9iVoxJ5n/jg0ljl
fCQxWchFBDFGjlSbgdRjnT7S3rIA092Ursg5X5dWZplVh/fp0LRvsOqLUMiZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPSQpDeUXALOhlIkCXqxc4uI2m34wHwYDVR0j
BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx
NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2
QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5
NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2
ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL1ARVvrOan8uR4CmCwh3w10VlO+0llrt2ct
wd6Eybm1eB/pKVY1PB36eS6f2/9LAkJXeJQJd5IbZiPQngU0K7E/PgpyOPLpMyzQ
MjZc35hYN+uAQrofgIBzAsoQgsbo9BVxfwXBANJlgdhzuUEZJjntkH3r00ZcHiCk
Nze/ZyQJ0t2cK8oTI9/Ok0b0vCm0pmqGfncEBpFAb+bBF4nwXi+cBsP/JeOxGkdO
bDi6wlJJguAg4pT1eoVAX7UnJJocjZhiHYOtT2BhoGl3K7MHGDvfGKU/PY47bvfW
tA6Ju9kFu2DUVH4SCS3Hq6BX4SdoVluFgxHLxPe69fye58iLWME=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:07 2025 by rpki-client