Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
File:                     A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json)
Hash identifier:          t97bJn/LxN7vYjdMAVsugcaglgOoiJFloWLR7tqJX68=
Subject key identifier:   5E:6D:B0:B0:EA:D5:79:C6:0A:B8:71:C7:58:8A:5D:02:64:C6:54:6D
Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14
Certificate issuer:       /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
Certificate serial:       7B425D1337AD0CA248B952F12A22BB8F0EF9E64E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
Manifest number:          DC
Signing time:             Fri 28 Mar 2025 00:22:07 +0000
Manifest this update:     Fri 28 Mar 2025 00:17:07 +0000
Manifest next update:     Mon 31 Mar 2025 10:34:07 +0000
Files and hashes:         1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: NLwd7pr96PhXLo54UDcWMICiHzAszbXzSsizlQPb/34=)
                          2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:42:5d:13:37:ad:0c:a2:48:b9:52:f1:2a:22:bb:8f:0e:f9:e6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
        Validity
            Not Before: Mar 28 00:17:07 2025 GMT
            Not After : Mar 31 10:34:07 2025 GMT
        Subject: CN=5E6DB0B0EAD579C60AB871C7588A5D0264C6546D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:85:d1:73:fb:1f:88:63:42:cf:6f:1b:59:
                    4b:18:7a:ad:6f:53:ee:a3:e8:25:85:e8:cb:89:a4:
                    4f:4c:77:2d:40:d0:b0:66:ce:4c:33:9e:73:00:32:
                    3b:84:29:d0:24:a7:ec:00:6b:41:eb:34:49:ac:70:
                    55:50:a6:40:ac:0c:4e:27:a8:5d:5e:1b:73:bc:47:
                    d1:a0:cd:c3:11:6b:f1:62:a8:db:9d:81:df:d0:3c:
                    34:82:ab:e8:e4:55:73:9b:23:2b:b0:57:38:eb:c4:
                    e4:ee:cd:15:5c:98:f9:80:a7:12:54:08:62:ce:b1:
                    20:be:90:b8:79:b6:d5:a8:fd:4a:13:f5:0e:6a:f1:
                    cf:c3:0e:63:13:7b:33:a5:e7:eb:6c:f3:dc:20:50:
                    91:b6:80:99:1c:5a:39:83:fc:a0:61:3b:93:55:14:
                    69:16:43:86:6c:c1:4e:d1:e0:1e:c6:a3:34:70:03:
                    b9:a3:46:16:13:e9:f2:14:8e:86:2e:ec:af:ee:55:
                    54:5f:38:da:d0:8a:15:f1:50:a0:36:69:4b:5b:10:
                    1b:63:76:ac:c8:e2:48:9e:b8:82:c1:cc:2f:39:96:
                    0f:27:28:d0:2d:67:d0:2b:30:63:b0:e1:68:4b:b6:
                    8c:b6:c5:1e:86:8b:9f:f4:eb:e3:2e:7c:6e:c0:c6:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6D:B0:B0:EA:D5:79:C6:0A:B8:71:C7:58:8A:5D:02:64:C6:54:6D
            X509v3 Authority Key Identifier:
                keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:12:5a:dc:db:94:36:d5:a1:97:74:fd:de:6b:86:db:1e:e0:
         10:16:02:3f:d5:62:bf:e5:77:65:b1:0a:7b:b8:79:c2:3a:13:
         b5:ea:48:fc:88:a2:e9:f4:b1:dc:92:2e:44:27:af:8f:0f:fc:
         be:54:ca:ce:f0:a5:e5:1d:89:3b:b3:bc:3d:ef:b9:52:ab:da:
         2a:31:cb:e3:e3:f4:f0:8d:b4:f9:05:33:03:a9:c5:33:8c:53:
         db:49:d3:90:f5:17:d8:38:76:34:8b:ff:25:65:59:4d:74:58:
         ed:f8:ae:99:25:45:7b:31:eb:fa:2b:74:c8:95:82:bc:f1:34:
         b3:75:98:3a:91:01:63:1a:cb:83:0c:03:63:88:ee:2b:b0:2f:
         c0:ba:ff:8a:fe:f3:b6:e0:99:a1:0f:53:21:12:bd:60:42:e3:
         ff:8c:8f:1f:e6:73:1d:29:c6:19:73:ac:5b:f7:50:f4:19:99:
         f5:f9:70:03:f1:38:3b:b5:ff:09:50:d6:da:ad:88:e9:9f:4b:
         b1:8a:1c:09:65:12:eb:87:03:c8:30:00:48:f3:c4:d5:e9:a1:
         89:23:05:ac:e9:4d:fa:3f:30:86:4c:b1:80:a3:1a:b2:a1:dc:
         d3:22:df:7b:88:4b:71:c0:3f:16:54:27:0a:9e:93:71:f4:3e:
         ce:a6:33:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe0JdEzetDKJIuVLxKiK7jw755k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD
QjRBNUYxNDAeFw0yNTAzMjgwMDE3MDdaFw0yNTAzMzExMDM0MDdaMDMxMTAvBgNV
BAMTKDVFNkRCMEIwRUFENTc5QzYwQUI4NzFDNzU4OEE1RDAyNjRDNjU0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUIXRc/sfiGNCz28bWUsYeq1v
U+6j6CWF6MuJpE9Mdy1A0LBmzkwznnMAMjuEKdAkp+wAa0HrNEmscFVQpkCsDE4n
qF1eG3O8R9GgzcMRa/FiqNudgd/QPDSCq+jkVXObIyuwVzjrxOTuzRVcmPmApxJU
CGLOsSC+kLh5ttWo/UoT9Q5q8c/DDmMTezOl5+ts89wgUJG2gJkcWjmD/KBhO5NV
FGkWQ4ZswU7R4B7GozRwA7mjRhYT6fIUjoYu7K/uVVRfONrQihXxUKA2aUtbEBtj
dqzI4kieuILBzC85lg8nKNAtZ9ArMGOw4WhLtoy2xR6Gi5/06+MufG7Axl2bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXm2wsOrVecYKuHHHWIpdAmTGVG0wHwYDVR0j
BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3
MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB
NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1
YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw
OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANUSWtzblDbVoZd0/d5rhtse4BAWAj/VYr/l
d2WxCnu4ecI6E7XqSPyIoun0sdySLkQnr48P/L5Uys7wpeUdiTuzvD3vuVKr2iox
y+Pj9PCNtPkFMwOpxTOMU9tJ05D1F9g4djSL/yVlWU10WO34rpklRXsx6/ordMiV
grzxNLN1mDqRAWMay4MMA2OI7iuwL8C6/4r+87bgmaEPUyESvWBC4/+Mjx/mcx0p
xhlzrFv3UPQZmfX5cAPxODu1/wlQ1tqtiOmfS7GKHAllEuuHA8gwAEjzxNXpoYkj
BazpTfo/MIZMsYCjGrKh3NMi33uIS3HAPxZUJwqek3H0Ps6mM0s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:33 2025 by rpki-client