Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
File:                     95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json)
Hash identifier:          0tMZvkuHfmcyp6SaY6+dllAELx7judjYWqYYBy82tYQ=
Subject key identifier:   C4:A7:6A:04:08:1E:BA:61:9C:75:E4:29:BB:88:E1:F4:6A:49:E3:29
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       5B8C1F9D513D6F03E676CCFAB7C8BA90035EAB11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
Manifest number:          04A3
Signing time:             Fri 31 Jan 2025 09:21:39 +0000
Manifest this update:     Fri 31 Jan 2025 09:16:39 +0000
Manifest next update:     Mon 03 Feb 2025 18:00:39 +0000
Files and hashes:         1: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: sLu7RqiRGzYnQBrSMZHIelJFjQSR1Hs3pZgdklGokNI=)
                          2: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: j8AfGsExf9Z1d3r0akft+56xnsz2WsBFBLfSdrsxdS8=)
                          3: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: DhsUJ+0QPmB3umy124lOVAjIsaGFsn7lzyzelnOboow=)
                          4: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: IQUiR0JlPz/+uykrQRdA9C7xBIr9HwH3lFNNO16XUss=)
                          5: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: MThCKHaNiNYddIwLIGFazZagSvM+JD0vvd7OeoHuDGA=)
                          6: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: AzI/2bJav2Aj60o9IPwEY1AeK6Tbpch8Oq7GrpIqn/o=)
                          7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: ayWxpT8yZl1hhBQSv+ekeM1m9KqAyHCeTFs073YkKvk=)
                          8: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: PxZnjWPfJrMlHFV+vFpu4lzDV/NqacyuVyPH6Bygl6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8c:1f:9d:51:3d:6f:03:e6:76:cc:fa:b7:c8:ba:90:03:5e:ab:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jan 31 09:16:39 2025 GMT
            Not After : Feb  3 18:00:39 2025 GMT
        Subject: CN=C4A76A04081EBA619C75E429BB88E1F46A49E329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:ad:0f:89:ad:76:71:eb:5e:f9:76:67:a6:
                    ac:e4:b7:af:e4:be:87:9a:2c:9c:6e:e4:e5:1f:36:
                    94:d9:43:3f:b3:4c:80:4b:d0:48:d4:9f:da:da:dc:
                    ec:e7:2a:f4:22:29:18:e5:32:6b:6c:c5:b7:88:28:
                    79:e1:24:e7:76:ef:46:62:69:c5:9d:e0:8d:01:0e:
                    89:71:ca:a9:ef:4d:1e:96:e0:34:d2:d5:c3:4b:cf:
                    2d:b5:88:b2:a8:da:ed:93:6f:19:c5:7e:6c:76:46:
                    6a:15:22:78:c9:57:99:c3:d7:2d:d5:97:7f:17:c4:
                    ee:fe:ce:d7:b8:c2:20:f0:c9:68:e9:70:3f:56:b2:
                    33:8a:7f:4f:c0:47:5d:88:b2:2c:99:39:4b:45:59:
                    3d:c6:5e:8d:43:2d:e9:49:30:da:3b:af:85:d6:b3:
                    5f:ce:21:fc:b9:9b:0a:a1:9d:f8:72:77:0d:30:ea:
                    1d:e9:17:86:e5:14:ad:eb:ca:b5:15:99:10:57:2c:
                    db:c2:0a:c7:d9:32:97:11:3a:10:83:94:9f:72:b3:
                    49:7f:46:37:0a:02:25:cb:4e:5a:36:40:5f:44:fd:
                    1a:cd:7f:97:c1:07:d0:8a:9b:ac:57:16:26:f1:24:
                    e5:b1:86:3b:af:ce:4e:5f:1b:50:0d:68:0c:cc:14:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:6A:04:08:1E:BA:61:9C:75:E4:29:BB:88:E1:F4:6A:49:E3:29
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:25:91:d0:cd:1a:08:d4:a5:b1:3a:98:f0:73:18:78:49:fb:
         2b:61:d8:93:52:26:ac:e2:08:f6:52:3a:d1:99:2e:aa:46:63:
         cf:58:72:e2:3c:b7:00:f9:67:50:dc:d3:93:ac:ef:2c:02:d9:
         78:15:83:af:86:42:61:0f:e1:9c:2c:75:4f:53:3f:7c:35:f6:
         1a:bd:31:d1:9b:57:9e:06:09:39:d8:15:18:37:e3:1f:ad:8a:
         e2:84:65:71:11:13:db:38:65:08:60:69:0d:04:62:c5:ec:2f:
         e4:8c:61:ad:9e:6e:13:cd:72:0b:ff:3d:66:ff:fb:be:e6:a5:
         bc:8e:2f:32:b2:48:b8:6f:cb:ca:5d:17:47:c9:0f:8d:d6:43:
         4a:db:b1:e8:a8:c7:57:29:37:d8:75:14:33:dd:c2:63:5a:87:
         87:fd:38:3e:3e:b7:6f:ab:08:0f:cd:a6:15:bc:41:d3:0c:17:
         2b:76:d3:e0:f9:a9:e4:5d:4d:90:7a:bb:08:31:c3:db:00:e0:
         94:98:3f:34:5d:f1:46:32:cd:74:dd:67:a5:d6:2c:93:bc:e3:
         14:5d:d9:ee:9d:ed:c5:29:a4:ae:c0:45:75:4a:35:78:f0:d6:
         fd:28:d8:48:a6:65:5f:4e:46:38:0d:9d:c9:9e:e6:1d:07:f8:
         47:a7:b1:4d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW4wfnVE9bwPmdsz6t8i6kANeqxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF
NzRFMkE2RDAeFw0yNTAxMzEwOTE2MzlaFw0yNTAyMDMxODAwMzlaMDMxMTAvBgNV
BAMTKEM0QTc2QTA0MDgxRUJBNjE5Qzc1RTQyOUJCODhFMUY0NkE0OUUzMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAK0Pia12cete+XZnpqzkt6/k
voeaLJxu5OUfNpTZQz+zTIBL0EjUn9ra3OznKvQiKRjlMmtsxbeIKHnhJOd270Zi
acWd4I0BDolxyqnvTR6W4DTS1cNLzy21iLKo2u2TbxnFfmx2RmoVInjJV5nD1y3V
l38XxO7+zte4wiDwyWjpcD9WsjOKf0/AR12IsiyZOUtFWT3GXo1DLelJMNo7r4XW
s1/OIfy5mwqhnfhydw0w6h3pF4blFK3ryrUVmRBXLNvCCsfZMpcROhCDlJ9ys0l/
RjcKAiXLTlo2QF9E/RrNf5fBB9CKm6xXFibxJOWxhjuvzk5fG1ANaAzMFEnlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxKdqBAgeumGcdeQpu4jh9GpJ4ykwHwYDVR0j
BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG
NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF
MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5
NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3
NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGolkdDNGgjUpbE6mPBzGHhJ+yth2JNSJqzi
CPZSOtGZLqpGY89YcuI8twD5Z1Dc05Os7ywC2XgVg6+GQmEP4ZwsdU9TP3w19hq9
MdGbV54GCTnYFRg34x+tiuKEZXERE9s4ZQhgaQ0EYsXsL+SMYa2ebhPNcgv/PWb/
+77mpbyOLzKySLhvy8pdF0fJD43WQ0rbseiox1cpN9h1FDPdwmNah4f9OD4+t2+r
CA/NphW8QdMMFyt20+D5qeRdTZB6uwgxw9sA4JSYPzRd8UYyzXTdZ6XWLJO84xRd
2e6d7cUppK7ARXVKNXjw1v0o2EimZV9ORjgNncme5h0H+EensU0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:15 2025 by rpki-client