Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
File:                     846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json)
Hash identifier:          MUHjIjozIFf6NoaQOFnVzdki5OlYbZv21TrdhaW0CQo=
Subject key identifier:   46:A4:45:80:94:EA:20:31:6A:A2:8F:E5:1F:3B:CD:32:C5:1F:A6:3C
Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
Certificate issuer:       /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Certificate serial:       43F2CC4D035076122663560AFF3DA5ADD13E5ED6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
Manifest number:          0321
Signing time:             Fri 28 Mar 2025 07:31:48 +0000
Manifest this update:     Fri 28 Mar 2025 07:26:48 +0000
Manifest next update:     Mon 31 Mar 2025 12:33:48 +0000
Files and hashes:         1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: JSLppFIaKMZFFoV72nx5SkRvCdWygKCy3uVHtD2h28I=)
                          2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XrO+qd1BLoaQBLZxMj2i0RtL9NTY4yJgufeeYQXCG4g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:cc:4d:03:50:76:12:26:63:56:0a:ff:3d:a5:ad:d1:3e:5e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
        Validity
            Not Before: Mar 28 07:26:48 2025 GMT
            Not After : Mar 31 12:33:48 2025 GMT
        Subject: CN=46A4458094EA20316AA28FE51F3BCD32C51FA63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:76:d3:63:f7:16:f8:7d:c5:5d:a1:51:90:
                    7e:46:55:b5:0c:dd:e6:dc:c9:1e:b4:03:f1:f3:b6:
                    6a:68:8b:1c:fb:84:aa:16:da:7d:69:87:08:74:c9:
                    03:66:00:0e:78:9f:48:3f:64:73:d0:b6:ac:38:c2:
                    77:e7:da:c3:9a:a6:a1:6c:cc:3f:de:9f:0a:86:a1:
                    69:11:b2:8e:50:94:df:66:58:0a:00:a9:31:a4:78:
                    d0:97:80:4c:ea:8a:b4:af:64:31:7c:7d:54:01:59:
                    94:05:10:bc:73:ef:ec:69:80:cc:f2:60:e3:3b:82:
                    d1:1e:16:f5:2e:8b:44:f7:94:80:b2:67:1b:8f:37:
                    5e:f8:03:7d:e2:b8:91:07:11:e5:40:cc:46:0c:db:
                    27:bb:8f:67:2b:14:22:39:43:de:8d:01:61:71:eb:
                    9b:71:12:43:14:48:e7:bf:43:b1:90:d7:58:ad:de:
                    fd:f2:4e:05:7a:be:2c:ea:5a:52:8d:67:8c:f5:b6:
                    5c:07:50:77:1e:9e:98:2a:4d:bb:5c:b8:c8:ee:60:
                    b9:03:09:00:60:5e:69:c2:b7:06:77:93:cb:22:94:
                    09:50:01:89:8d:4e:59:b0:26:97:4e:9a:17:35:a6:
                    e9:a6:b0:cc:82:ac:dd:49:4b:80:8a:41:17:aa:8d:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A4:45:80:94:EA:20:31:6A:A2:8F:E5:1F:3B:CD:32:C5:1F:A6:3C
            X509v3 Authority Key Identifier:
                keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:7b:d3:d9:3e:6a:20:c3:36:86:17:87:b9:c9:03:c8:76:
         87:35:4d:51:1d:c3:23:8b:49:ed:5e:a6:08:bc:4e:d9:54:d3:
         7d:23:88:c4:76:13:a5:4e:7f:f6:3d:35:81:b3:f2:5a:b0:ea:
         f0:9e:10:31:45:fb:56:0d:8c:cb:ec:b3:75:1a:d4:fd:b4:f3:
         4e:9c:66:b5:e7:5d:4f:c0:b2:56:b2:62:49:0f:36:d2:b0:19:
         a4:aa:f8:01:51:e2:74:78:f7:53:1b:28:1b:ef:df:75:15:33:
         47:02:63:17:74:0f:71:fb:39:60:ff:6b:fe:72:08:cf:da:41:
         29:df:da:30:4f:27:95:01:68:81:81:84:db:af:e6:54:27:66:
         47:0d:d6:6b:19:b0:af:35:8c:b9:67:93:f6:35:93:b0:b9:15:
         7b:27:c2:55:98:6f:24:39:ea:0e:e9:d0:eb:19:b2:89:21:20:
         1b:aa:b4:4b:32:fc:75:96:15:ec:5a:59:f3:bf:f5:86:fb:8e:
         44:70:d8:46:89:8a:ab:fd:51:eb:7f:3b:6c:c4:e9:fb:eb:65:
         0e:73:8c:3c:1e:37:4c:39:4c:b7:9c:a6:f9:a9:42:72:30:a2:
         bd:98:28:37:28:2a:9e:c9:30:4d:cc:79:6f:cf:d7:84:a4:97:
         68:36:03:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ/LMTQNQdhImY1YK/z2lrdE+XtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF
NzQyMEVEMDAeFw0yNTAzMjgwNzI2NDhaFw0yNTAzMzExMjMzNDhaMDMxMTAvBgNV
BAMTKDQ2QTQ0NTgwOTRFQTIwMzE2QUEyOEZFNTFGM0JDRDMyQzUxRkE2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb83bTY/cW+H3FXaFRkH5GVbUM
3ebcyR60A/Hztmpoixz7hKoW2n1phwh0yQNmAA54n0g/ZHPQtqw4wnfn2sOapqFs
zD/enwqGoWkRso5QlN9mWAoAqTGkeNCXgEzqirSvZDF8fVQBWZQFELxz7+xpgMzy
YOM7gtEeFvUui0T3lICyZxuPN174A33iuJEHEeVAzEYM2ye7j2crFCI5Q96NAWFx
65txEkMUSOe/Q7GQ11it3v3yTgV6vizqWlKNZ4z1tlwHUHcenpgqTbtcuMjuYLkD
CQBgXmnCtwZ3k8silAlQAYmNTlmwJpdOmhc1pummsMyCrN1JS4CKQReqjQRPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURqRFgJTqIDFqoo/lHzvNMsUfpjwwHwYDVR0j
BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx
RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy
MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm
ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx
RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEXqe9PZPmogwzaGF4e5yQPIdoc1TVEdwyOL
Se1epgi8TtlU030jiMR2E6VOf/Y9NYGz8lqw6vCeEDFF+1YNjMvss3Ua1P20806c
ZrXnXU/AslayYkkPNtKwGaSq+AFR4nR491MbKBvv33UVM0cCYxd0D3H7OWD/a/5y
CM/aQSnf2jBPJ5UBaIGBhNuv5lQnZkcN1msZsK81jLlnk/Y1k7C5FXsnwlWYbyQ5
6g7p0OsZsokhIBuqtEsy/HWWFexaWfO/9Yb7jkRw2EaJiqv9Uet/O2zE6fvrZQ5z
jDweN0w5TLecpvmpQnIwor2YKDcoKp7JME3MeW/P14Skl2g2Ays=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:48:29 2025 by rpki-client