Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
File:                     D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json)
Hash identifier:          MOV/VImT9gkMahfBA8ROTUEzM8a0ItkOkPktDYTXNgM=
Subject key identifier:   8F:21:7C:A2:16:4A:79:66:AD:DC:23:05:FB:C4:5C:9C:AF:29:D6:0E
Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
Certificate issuer:       /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Certificate serial:       63DBCD8D96511A308DA5DFD6A13FEAF1FE995111
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
Manifest number:          01A0
Signing time:             Thu 30 Jan 2025 19:11:11 +0000
Manifest this update:     Thu 30 Jan 2025 19:06:11 +0000
Manifest next update:     Mon 03 Feb 2025 06:53:11 +0000
Files and hashes:         1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: ir5XqbuYDzNkACrKSM5OrQEIYHK8NKyduvvNTWtxaCY=)
                          2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: JeyEC5GT44T1l/mY8nDqe/JsiSipfq9Qfm+r93xH6/g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:db:cd:8d:96:51:1a:30:8d:a5:df:d6:a1:3f:ea:f1:fe:99:51:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
        Validity
            Not Before: Jan 30 19:06:11 2025 GMT
            Not After : Feb  3 06:53:11 2025 GMT
        Subject: CN=8F217CA2164A7966ADDC2305FBC45C9CAF29D60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:e4:f1:85:02:ff:d6:ae:ec:cd:04:c3:a9:
                    c1:73:29:68:24:7a:32:7e:4d:32:fc:d2:b8:e3:ea:
                    66:d3:41:c4:b5:01:0c:d1:ec:77:13:9f:6a:d1:e9:
                    4f:91:9e:2e:fd:e0:6c:8e:35:f2:eb:d7:14:ff:1e:
                    07:2b:8d:fa:a3:1a:f4:73:bf:ec:ba:60:98:1f:0c:
                    c7:fa:37:8b:e5:00:8b:db:45:c3:ff:fe:00:ae:96:
                    44:ce:60:73:61:a4:cb:d9:d4:87:dd:cf:2c:35:25:
                    4b:5f:05:a7:80:00:c1:ea:bb:af:dc:14:8c:cf:ff:
                    60:63:b1:b9:bd:37:7b:48:3b:3d:b8:43:c9:30:a0:
                    b4:97:2a:78:36:bc:d1:91:5e:89:a1:bb:a1:65:c1:
                    ba:be:bf:27:b2:e1:9c:c0:f5:1b:66:d9:8a:2f:ab:
                    30:15:c1:e9:19:6d:5a:a8:65:c8:3b:f7:73:fa:9b:
                    d3:9f:d0:b9:a7:ca:6d:83:9d:d6:60:02:94:8d:3b:
                    a6:1a:e7:b2:68:ce:26:91:7a:01:ef:45:81:ca:d3:
                    06:15:0f:4b:cf:e6:93:cb:57:7f:65:44:c0:4c:d1:
                    2b:9f:ee:5d:5b:77:31:f0:d5:04:34:bf:c7:e8:30:
                    b7:3f:86:2a:2b:37:2e:eb:19:76:82:8d:78:97:f4:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:7C:A2:16:4A:79:66:AD:DC:23:05:FB:C4:5C:9C:AF:29:D6:0E
            X509v3 Authority Key Identifier:
                keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:e4:a2:53:50:2d:55:c5:11:b6:04:5f:90:95:1b:d9:4e:
         27:10:05:89:d2:c6:2e:16:4b:9f:48:75:34:6d:97:2b:8c:42:
         3e:db:70:17:9e:ba:b0:dc:d0:ca:e4:3c:a7:b7:b2:22:df:9e:
         0a:4a:93:f6:ae:be:31:e2:37:37:50:92:2e:b8:83:f3:99:72:
         47:f8:d6:1a:1b:28:d4:1d:1d:f9:2c:85:92:39:74:a6:f0:97:
         f8:76:a0:81:52:e8:c1:e9:18:7f:6f:63:e1:a7:83:34:7a:20:
         ba:bb:e7:cb:1f:c7:bd:66:68:02:f4:d8:a3:16:df:83:d0:c3:
         a5:0e:99:3d:19:44:c0:bd:42:7d:6a:2a:51:9f:d7:6a:f2:61:
         16:b5:74:b7:f4:08:f2:9d:16:73:2f:60:3c:25:f2:6b:be:bb:
         25:50:6d:d1:c1:05:d8:56:95:34:ce:71:1f:48:68:a7:30:68:
         8d:f5:53:35:31:0d:b1:5a:9a:94:89:cf:1e:1c:86:ca:26:0b:
         1d:66:88:38:d7:db:1d:fb:ce:d3:d1:f0:ea:07:c0:29:f4:8b:
         04:57:ca:bb:bd:bf:2c:c5:53:d7:75:fc:cb:e3:2f:e3:08:7e:
         f6:ff:f9:4c:2f:22:31:fe:99:24:f7:dd:9a:dd:de:81:67:a8:
         6a:39:b9:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY9vNjZZRGjCNpd/WoT/q8f6ZUREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4
MTkxMURCQjAeFw0yNTAxMzAxOTA2MTFaFw0yNTAyMDMwNjUzMTFaMDMxMTAvBgNV
BAMTKDhGMjE3Q0EyMTY0QTc5NjZBRERDMjMwNUZCQzQ1QzlDQUYyOUQ2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qOTxhQL/1q7szQTDqcFzKWgk
ejJ+TTL80rjj6mbTQcS1AQzR7HcTn2rR6U+Rni794GyONfLr1xT/HgcrjfqjGvRz
v+y6YJgfDMf6N4vlAIvbRcP//gCulkTOYHNhpMvZ1Ifdzyw1JUtfBaeAAMHqu6/c
FIzP/2Bjsbm9N3tIOz24Q8kwoLSXKng2vNGRXomhu6Flwbq+vyey4ZzA9Rtm2Yov
qzAVwekZbVqoZcg793P6m9Of0Lmnym2DndZgApSNO6Ya57JoziaRegHvRYHK0wYV
D0vP5pPLV39lRMBM0Suf7l1bdzHw1QQ0v8foMLc/hiorNy7rGXaCjXiX9PxRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjyF8ohZKeWat3CMF+8RcnK8p1g4wHwYDVR0j
BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF
MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx
MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj
MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5
NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIxS5KJTUC1VxRG2BF+QlRvZTicQBYnSxi4W
S59IdTRtlyuMQj7bcBeeurDc0MrkPKe3siLfngpKk/auvjHiNzdQki64g/OZckf4
1hobKNQdHfkshZI5dKbwl/h2oIFS6MHpGH9vY+GngzR6ILq758sfx71maAL02KMW
34PQw6UOmT0ZRMC9Qn1qKlGf12ryYRa1dLf0CPKdFnMvYDwl8mu+uyVQbdHBBdhW
lTTOcR9IaKcwaI31UzUxDbFampSJzx4chsomCx1miDjX2x37ztPR8OoHwCn0iwRX
yru9vyzFU9d1/MvjL+MIfvb/+UwvIjH+mST33Zrd3oFnqGo5uTQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:54 2025 by rpki-client