Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
File:                     4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json)
Hash identifier:          5lUpnLZ+eLqo/ohksOel4SGOplAPbF2JhqiYuFdERxk=
Subject key identifier:   4A:17:41:1D:52:EC:82:B9:FF:75:7E:87:B3:DF:DE:74:D8:00:AA:F4
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Certificate issuer:       /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial:       39A02344910DEC14CD3AABF7B03865CD0234969D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
Manifest number:          0281
Signing time:             Thu 30 Jan 2025 18:51:40 +0000
Manifest this update:     Thu 30 Jan 2025 18:46:40 +0000
Manifest next update:     Sun 02 Feb 2025 21:45:40 +0000
Files and hashes:         1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: UC4Vrp25Ltui2wofk+P42hGMh/4D1dH6raINsciXJQg=)
                          2: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: mcyagvywDhFYxC9mjPanY2s5lpKa+0hAXlf4jFVn9eM=)
                          3: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: D4EkIlEcE1wtYu4llvh2kzSAskHUdWXvwrriG+hYUDU=)
                          4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: FLVGwqj4yD54Hf3ac0cSht3WEYb1ToOJ+k3OEsbAbwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a0:23:44:91:0d:ec:14:cd:3a:ab:f7:b0:38:65:cd:02:34:96:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
        Validity
            Not Before: Jan 30 18:46:40 2025 GMT
            Not After : Feb  2 21:45:40 2025 GMT
        Subject: CN=4A17411D52EC82B9FF757E87B3DFDE74D800AAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:41:a8:9f:e2:39:d4:f1:ba:27:f8:53:9d:
                    5f:a2:99:ea:b8:8d:fb:1b:6c:40:f8:37:07:b4:36:
                    e9:b1:d6:99:82:2d:1f:ac:53:25:5a:33:18:3d:2e:
                    3a:b0:14:fd:ea:8c:59:e4:c3:cc:9e:b2:c5:bb:7e:
                    03:2e:db:e1:99:a5:8d:0c:66:23:2d:f7:89:2d:99:
                    a9:f3:d6:47:b5:cc:4b:df:b4:ef:f9:c8:fe:6d:55:
                    20:ba:c7:99:fc:52:1c:25:67:47:b1:0d:3c:4d:9c:
                    94:fa:5f:ef:79:2f:74:10:bb:2e:04:75:ef:bf:f5:
                    fb:d5:05:7e:4c:1e:31:3c:28:cf:e2:f4:ec:b5:59:
                    46:96:b7:f7:76:b1:5c:66:8a:86:61:55:58:b3:3e:
                    9a:7c:3c:9e:2f:44:16:8c:36:71:44:bc:fe:46:91:
                    45:8a:fb:93:6e:ac:27:63:49:33:41:fa:b3:c7:6a:
                    9e:cf:af:26:16:91:c5:58:38:61:62:16:4d:ca:31:
                    fb:36:79:cc:34:4c:03:11:5b:18:d9:e4:12:06:ab:
                    26:04:e6:5a:61:a1:a5:55:b7:db:c2:64:eb:c2:be:
                    6c:8e:a8:cf:86:d2:83:6e:89:1c:80:ec:17:a4:14:
                    12:15:a0:c8:48:ba:02:8c:41:df:52:3d:05:b7:0b:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:41:1D:52:EC:82:B9:FF:75:7E:87:B3:DF:DE:74:D8:00:AA:F4
            X509v3 Authority Key Identifier:
                keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:d7:d7:12:bd:b3:0d:fc:a9:a1:f1:06:73:2d:cf:74:5a:
         1f:c3:7a:55:28:40:22:d0:36:49:2d:5e:df:ed:95:18:0d:e4:
         cf:7b:f9:d4:7e:37:26:51:e3:13:93:ae:12:d6:2a:01:bf:90:
         2f:56:64:4e:c5:f7:77:ef:3f:04:3d:ef:cf:4c:18:8f:ab:b4:
         ea:fd:fd:12:eb:4b:81:de:02:60:43:82:ef:ab:64:63:c5:2a:
         2a:5d:89:39:22:b0:c5:9d:39:be:5b:7f:83:be:bb:b9:89:c9:
         ba:76:fe:ad:29:f4:f0:71:a4:f7:cd:85:0b:c5:dc:24:5a:19:
         96:b3:1f:0e:b5:69:98:9c:1c:12:1d:18:1c:a0:bc:39:c9:9c:
         30:96:85:d7:9a:8b:33:63:87:b9:22:2a:42:42:7d:07:a4:f8:
         80:39:e7:ad:fb:18:42:69:05:91:2d:46:63:ff:bd:b5:e7:ce:
         39:a9:22:31:fe:0a:9c:de:24:0e:4e:2f:4f:03:38:e3:7e:5f:
         60:a1:50:1a:84:de:3f:17:43:eb:d3:9c:cf:a3:5b:01:78:22:
         e1:f4:14:4b:30:5f:de:5d:8c:e3:fc:d2:8c:c2:fc:22:18:56:
         64:fe:88:85:20:bb:da:0c:d8:86:d6:78:5e:37:fa:8a:3d:60:
         d3:e6:b5:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOaAjRJEN7BTNOqv3sDhlzQI0lp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4
MzFDNUZBODAeFw0yNTAxMzAxODQ2NDBaFw0yNTAyMDIyMTQ1NDBaMDMxMTAvBgNV
BAMTKDRBMTc0MTFENTJFQzgyQjlGRjc1N0U4N0IzREZERTc0RDgwMEFBRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAkGon+I51PG6J/hTnV+imeq4
jfsbbED4Nwe0Numx1pmCLR+sUyVaMxg9LjqwFP3qjFnkw8yessW7fgMu2+GZpY0M
ZiMt94ktmanz1ke1zEvftO/5yP5tVSC6x5n8UhwlZ0exDTxNnJT6X+95L3QQuy4E
de+/9fvVBX5MHjE8KM/i9Oy1WUaWt/d2sVxmioZhVVizPpp8PJ4vRBaMNnFEvP5G
kUWK+5NurCdjSTNB+rPHap7PryYWkcVYOGFiFk3KMfs2ecw0TAMRWxjZ5BIGqyYE
5lphoaVVt9vCZOvCvmyOqM+G0oNuiRyA7BekFBIVoMhIugKMQd9SPQW3C6TzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUShdBHVLsgrn/dX6Hs9/edNgAqvQwHwYDVR0j
BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4
MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD
NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw
NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB
NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADG319cSvbMN/Kmh8QZzLc90Wh/DelUoQCLQ
NkktXt/tlRgN5M97+dR+NyZR4xOTrhLWKgG/kC9WZE7F93fvPwQ9789MGI+rtOr9
/RLrS4HeAmBDgu+rZGPFKipdiTkisMWdOb5bf4O+u7mJybp2/q0p9PBxpPfNhQvF
3CRaGZazHw61aZicHBIdGBygvDnJnDCWhdeaizNjh7kiKkJCfQek+IA55637GEJp
BZEtRmP/vbXnzjmpIjH+CpzeJA5OL08DOON+X2ChUBqE3j8XQ+vTnM+jWwF4IuH0
FEswX95djOP80ozC/CIYVmT+iIUgu9oM2IbWeF43+oo9YNPmtfA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:59 2025 by rpki-client