Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
File:                     490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json)
Hash identifier:          NIQq1fELfDPOBdyPfpR3718hhJ9qq0FzabAhnCpcsJA=
Subject key identifier:   C9:1F:F2:0A:22:07:69:EE:5D:2D:E6:24:48:22:8E:F0:76:AE:14:A5
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       6714D91B2BC03CDADA4C690382E20C24B015C812
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
Manifest number:          04C0
Signing time:             Thu 27 Mar 2025 06:11:00 +0000
Manifest this update:     Thu 27 Mar 2025 06:06:00 +0000
Manifest next update:     Sun 30 Mar 2025 14:49:00 +0000
Files and hashes:         1: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: jpkrUDG+x1G1jBEtnpvnZPknDhJgzanLvICeoOVYe0Q=)
                          2: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: EwNPctz3GEA8b4HEhWJU+9J961tRLY7I9c2qIR6c9pU=)
                          3: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 4bch934Vv2mVexj5yORxeulNe94hD9yd+8wpN2L0zkw=)
                          4: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: d+qfmJX6WG8MNu+fGfy0UM9kQ8qVSJz1W4rWMZJ2HL0=)
                          5: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: i0k8diaTpdGEA+1RnifMXA8toR7ceP46n+4PEFdgPCI=)
                          6: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=)
                          7: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=)
                          8: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: W5YLdWhnOdLeAXEY1MixBlpWbhGhQrghXBcYMuYDx9E=)
                          9: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: pXz40XnCPDHjX6ETU549n8DZU0gFVrvM11PQ2EVGj3Q=)
                          10: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: 2xjLAoUthqLolTYw8fUKOsWqs/c7S8uY9JLSigkrYUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:14:d9:1b:2b:c0:3c:da:da:4c:69:03:82:e2:0c:24:b0:15:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Mar 27 06:06:00 2025 GMT
            Not After : Mar 30 14:49:00 2025 GMT
        Subject: CN=C91FF20A220769EE5D2DE62448228EF076AE14A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:9c:2e:03:b0:99:f0:f8:7e:fb:10:2d:b7:
                    46:c4:71:78:4f:b0:d4:f1:1e:f5:81:f6:d9:bd:dc:
                    fc:c6:04:2f:d1:0c:ba:b7:ee:9a:5b:0c:91:fc:7b:
                    ff:b6:48:c6:ca:66:3b:6f:47:1d:09:38:58:e4:30:
                    7b:3e:cd:76:11:b6:a4:9e:00:38:3b:26:89:51:cd:
                    ad:2b:78:4a:71:be:85:85:a5:0c:12:fd:7f:e5:60:
                    d1:22:05:66:58:3f:eb:45:f9:10:ad:4f:72:a8:9d:
                    2e:91:c9:90:20:a2:09:0f:78:c5:78:da:46:44:c7:
                    98:4b:b4:64:9b:41:38:6a:c5:60:83:95:ec:97:da:
                    11:1a:d1:70:95:e8:bc:fc:70:3f:88:fd:52:b8:7a:
                    45:20:0a:cd:b2:f2:4f:77:2d:c3:e5:11:df:0d:87:
                    b2:d7:9f:56:96:19:c3:7e:85:49:df:4b:cc:fe:5c:
                    eb:8a:9e:66:82:dc:59:f5:11:6a:57:7e:ec:a3:8b:
                    94:37:20:35:4d:8f:94:5e:59:9d:d7:98:59:84:4d:
                    23:db:af:83:4f:67:77:eb:7d:be:8b:8c:fb:13:4f:
                    83:d1:5e:b7:99:0b:1c:83:32:87:d1:c1:b9:e9:17:
                    33:57:e0:fa:23:ad:ef:96:06:a9:91:21:58:1d:fc:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1F:F2:0A:22:07:69:EE:5D:2D:E6:24:48:22:8E:F0:76:AE:14:A5
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:fb:67:82:6d:3e:8d:03:7d:5b:20:57:d7:3a:77:59:28:
         6a:df:92:20:83:4b:ef:50:b6:9a:72:46:14:8a:e5:f8:6d:d2:
         e7:1b:96:94:3a:1e:5f:5c:ad:e2:f0:44:47:c4:96:4a:fc:d3:
         64:68:7d:92:b3:f8:88:91:4f:78:5c:19:ed:0a:87:78:58:10:
         44:21:31:f6:f4:40:3b:5f:f5:84:8b:10:0d:a0:e3:89:d1:99:
         35:d5:8d:4e:ba:ce:6a:f5:be:19:8e:0d:3c:c9:68:2e:55:5f:
         fb:ab:ce:7b:b5:cf:cf:37:23:b8:e9:08:fc:37:5f:1d:ca:2f:
         ba:8d:82:c3:50:8c:7b:b1:f5:ae:2b:fd:d4:0f:de:0d:89:c6:
         54:6a:52:0f:e5:9f:a2:8e:80:ea:22:e5:2d:69:cb:a5:d6:bf:
         b5:7b:43:5f:fd:90:a3:5d:a0:30:1f:c6:4f:0d:a9:67:88:53:
         9a:b4:3a:b9:3b:2a:cd:8f:34:8a:7e:11:8a:fb:99:17:5f:0a:
         68:08:0f:d1:a4:2f:6f:a9:eb:98:fb:5a:1c:91:74:e3:75:35:
         0c:06:39:88:7b:d4:8c:63:26:71:68:d9:29:9f:c9:ea:85:92:
         44:72:d5:39:ef:2c:32:94:45:d1:d1:0e:30:1b:04:51:77:31:
         22:8d:2c:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZxTZGyvAPNraTGkDguIMJLAVyBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNTAzMjcwNjA2MDBaFw0yNTAzMzAxNDQ5MDBaMDMxMTAvBgNV
BAMTKEM5MUZGMjBBMjIwNzY5RUU1RDJERTYyNDQ4MjI4RUYwNzZBRTE0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8ZwuA7CZ8Ph++xAtt0bEcXhP
sNTxHvWB9tm93PzGBC/RDLq37ppbDJH8e/+2SMbKZjtvRx0JOFjkMHs+zXYRtqSe
ADg7JolRza0reEpxvoWFpQwS/X/lYNEiBWZYP+tF+RCtT3KonS6RyZAgogkPeMV4
2kZEx5hLtGSbQThqxWCDleyX2hEa0XCV6Lz8cD+I/VK4ekUgCs2y8k93LcPlEd8N
h7LXn1aWGcN+hUnfS8z+XOuKnmaC3Fn1EWpXfuyji5Q3IDVNj5ReWZ3XmFmETSPb
r4NPZ3frfb6LjPsTT4PRXreZCxyDMofRwbnpFzNX4Pojre+WBqmRIVgd/HbJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyR/yCiIHae5dLeYkSCKO8HauFKUwHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl
ZTQtM2VmNGI4ZDMwMmRkLzAvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3
QkM1MDU3QUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIGp+2eCbT6NA31bIFfXOndZKGrfkiCDS+9Q
tppyRhSK5fht0ucblpQ6Hl9creLwREfElkr802RofZKz+IiRT3hcGe0Kh3hYEEQh
Mfb0QDtf9YSLEA2g44nRmTXVjU66zmr1vhmODTzJaC5VX/urznu1z883I7jpCPw3
Xx3KL7qNgsNQjHux9a4r/dQP3g2JxlRqUg/ln6KOgOoi5S1py6XWv7V7Q1/9kKNd
oDAfxk8NqWeIU5q0Ork7Ks2PNIp+EYr7mRdfCmgID9GkL2+p65j7WhyRdON1NQwG
OYh71IxjJnFo2SmfyeqFkkRy1TnvLDKURdHRDjAbBFF3MSKNLFw=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:26:13 2025 by rpki-client