Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
File:                     CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json)
Hash identifier:          mm1yGHPbjC2m3ix19sSUf2B7XUvzuBZlZToB/e+hBQs=
Subject key identifier:   DC:10:F4:09:4B:39:BE:2D:32:9D:F9:A8:FF:7E:A2:4A:16:8B:68:47
Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43
Certificate issuer:       /CN=CE118685D363E20B6D3B3955972062D9581B9E43
Certificate serial:       6FB11CDE2D29E419AC645D37F44F5F9E4AA1321A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
Manifest number:          017C
Signing time:             Thu 30 Jan 2025 02:30:43 +0000
Manifest this update:     Thu 30 Jan 2025 02:25:43 +0000
Manifest next update:     Sun 02 Feb 2025 07:04:43 +0000
Files and hashes:         1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: znZ8lvYTVN0U7aFlcE6DjC+W8oBGYZHge/KjTjdzl+s=)
                          2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: BZo1iQGJtOH0KYD7EjAIqb+6wWHVZqj9bpdNw1+DGvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:1c:de:2d:29:e4:19:ac:64:5d:37:f4:4f:5f:9e:4a:a1:32:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43
        Validity
            Not Before: Jan 30 02:25:43 2025 GMT
            Not After : Feb  2 07:04:43 2025 GMT
        Subject: CN=DC10F4094B39BE2D329DF9A8FF7EA24A168B6847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:cf:7d:22:3e:6b:d6:ec:98:a7:fe:e9:d7:
                    1b:46:ef:12:33:44:6b:1a:96:86:5c:25:45:cd:2f:
                    b8:0c:c0:c1:e4:43:94:9d:aa:90:c5:88:27:95:89:
                    41:4d:0c:5f:47:0b:ee:6a:c2:f7:69:47:f9:f4:10:
                    f4:1f:cf:50:b4:78:46:01:f3:21:9c:4a:df:40:a2:
                    5a:34:3f:d6:62:f1:6a:d0:cc:ed:f6:15:33:ed:32:
                    37:6b:26:5f:bc:4c:19:9b:59:3e:bd:fc:ce:cc:be:
                    d9:97:30:02:24:d3:2e:ee:21:3c:68:fa:3a:dc:29:
                    39:d0:6f:91:0c:2f:af:b0:98:f3:e7:31:39:92:9e:
                    be:5d:16:8d:2e:96:84:be:28:d4:2f:a4:d2:a4:33:
                    c9:bf:c7:da:e9:68:6e:d7:13:1f:36:c4:e3:be:43:
                    44:d6:4b:8b:f6:3f:35:f3:b4:0a:1a:09:a1:df:92:
                    d3:db:b3:eb:d7:ff:fe:01:8f:13:e7:1f:2e:ac:ef:
                    d1:7f:9f:a8:1f:b0:53:45:c3:db:96:90:4c:79:51:
                    03:df:b2:0f:10:5a:8f:93:ba:5c:04:c5:2b:e2:4c:
                    4e:2b:83:f7:42:04:57:30:6d:fa:45:b5:b5:d3:fb:
                    e4:b1:f8:bc:b6:ba:4b:cd:bf:d2:1a:79:c7:68:e3:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:10:F4:09:4B:39:BE:2D:32:9D:F9:A8:FF:7E:A2:4A:16:8B:68:47
            X509v3 Authority Key Identifier:
                keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:76:dc:76:bd:58:cf:90:90:6f:03:29:66:28:72:a4:60:
         d3:c9:f3:3e:0e:c8:26:01:54:25:ed:cf:ce:2d:d1:a1:47:cf:
         df:a3:22:4b:3d:cc:9e:d8:e3:88:14:b7:51:f9:51:0b:d8:98:
         c5:7d:ec:66:56:c6:d6:ea:53:f9:d1:58:8f:95:02:13:81:b8:
         f1:d7:82:cf:13:44:a0:ec:32:ab:d6:f5:6f:7c:3a:70:0a:5c:
         ec:07:eb:e4:b6:c4:f1:91:52:3f:5f:0b:4f:71:dd:68:82:20:
         03:41:bd:59:a2:63:17:5a:49:95:45:bf:f5:7d:2a:2e:fd:4c:
         98:d7:2f:f7:f4:f2:bd:83:35:a6:35:6e:3c:29:65:91:ce:69:
         58:fb:b1:37:1e:1d:cc:4e:6f:82:a5:4f:f3:e4:44:93:9d:6a:
         99:a9:9b:b3:62:0a:fc:56:11:df:3b:98:42:20:87:07:45:9e:
         11:92:ba:1a:e9:ad:ae:d1:2b:b8:9a:3c:f9:13:7c:3f:ea:6b:
         56:cd:a8:19:23:64:73:ea:24:16:03:f5:06:df:09:e3:3d:ab:
         65:ce:97:df:68:07:02:1a:0a:e3:9a:23:60:66:65:c6:c5:d5:
         97:9f:eb:1f:98:0c:36:aa:77:63:b1:92:91:e3:d5:09:fb:4d:
         a5:44:0b:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUb7Ec3i0p5BmsZF039E9fnkqhMhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1
ODFCOUU0MzAeFw0yNTAxMzAwMjI1NDNaFw0yNTAyMDIwNzA0NDNaMDMxMTAvBgNV
BAMTKERDMTBGNDA5NEIzOUJFMkQzMjlERjlBOEZGN0VBMjRBMTY4QjY4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXc99Ij5r1uyYp/7p1xtG7xIz
RGsaloZcJUXNL7gMwMHkQ5SdqpDFiCeViUFNDF9HC+5qwvdpR/n0EPQfz1C0eEYB
8yGcSt9Aolo0P9Zi8WrQzO32FTPtMjdrJl+8TBmbWT69/M7MvtmXMAIk0y7uITxo
+jrcKTnQb5EML6+wmPPnMTmSnr5dFo0uloS+KNQvpNKkM8m/x9rpaG7XEx82xOO+
Q0TWS4v2PzXztAoaCaHfktPbs+vX//4BjxPnHy6s79F/n6gfsFNFw9uWkEx5UQPf
sg8QWo+TulwExSviTE4rg/dCBFcwbfpFtbXT++Sx+Ly2ukvNv9Iaecdo44GjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3BD0CUs5vi0ynfmo/36iShaLaEcwHwYDVR0j
BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz
NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC
OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4
MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy
RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE01dtx2vVjPkJBvAylmKHKkYNPJ8z4OyCYB
VCXtz84t0aFHz9+jIks9zJ7Y44gUt1H5UQvYmMV97GZWxtbqU/nRWI+VAhOBuPHX
gs8TRKDsMqvW9W98OnAKXOwH6+S2xPGRUj9fC09x3WiCIANBvVmiYxdaSZVFv/V9
Ki79TJjXL/f08r2DNaY1bjwpZZHOaVj7sTceHcxOb4KlT/PkRJOdapmpm7NiCvxW
Ed87mEIghwdFnhGSuhrpra7RK7iaPPkTfD/qa1bNqBkjZHPqJBYD9QbfCeM9q2XO
l99oBwIaCuOaI2BmZcbF1Zef6x+YDDaqd2OxkpHj1Qn7TaVEC0o=
-----END CERTIFICATE-----