Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
File:                     B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json)
Hash identifier:          8HO75mC5Z6yfs6gCX20ZFO6YfDFqPYODS2bRjpO8Vog=
Subject key identifier:   50:47:25:A0:F0:4D:60:93:9B:EC:D2:F5:11:24:93:9F:62:27:79:3F
Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
Certificate issuer:       /CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Certificate serial:       04608A0DD4768A541F7F89CC3B57F5784572AF11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
Manifest number:          043E
Signing time:             Fri 28 Mar 2025 00:11:04 +0000
Manifest this update:     Fri 28 Mar 2025 00:06:04 +0000
Manifest next update:     Mon 31 Mar 2025 03:23:04 +0000
Files and hashes:         1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=)
                          2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=)
                          3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=)
                          4: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=)
                          5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=)
                          6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: xIPPOu1eUHRYOkfy9bpvRJgk8pytRdv5dROiGs75lko=)
                          7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:60:8a:0d:d4:76:8a:54:1f:7f:89:cc:3b:57:f5:78:45:72:af:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471
        Validity
            Not Before: Mar 28 00:06:04 2025 GMT
            Not After : Mar 31 03:23:04 2025 GMT
        Subject: CN=504725A0F04D60939BECD2F51124939F6227793F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:67:54:68:45:b7:1a:32:34:31:3c:ae:0f:
                    f2:89:fb:f8:81:17:6f:f5:d6:48:d5:fa:bf:bb:e6:
                    b1:06:72:ce:ce:59:5c:e1:19:ab:ad:55:2f:88:9b:
                    f7:1d:5b:3a:1b:05:f0:df:5d:60:1e:bb:e4:d7:9f:
                    52:b4:4b:e2:a2:c4:f8:3a:50:94:a5:df:e9:d2:f4:
                    b6:40:52:cd:cd:e4:24:77:83:10:53:df:37:f7:2a:
                    81:c4:2e:33:b2:8c:f3:d7:69:37:eb:4c:b7:ab:d7:
                    8f:6b:74:af:fc:c5:c1:11:70:b9:83:65:0e:10:36:
                    05:fa:f7:1b:2d:43:6b:c3:ec:d6:39:4c:6b:ad:0f:
                    22:c7:c2:69:4a:31:3d:ad:8c:3f:ca:89:11:ec:5b:
                    aa:07:27:73:cf:37:bb:1e:d9:cf:80:f4:04:ff:0e:
                    77:76:f5:ff:c5:ad:e5:8b:bd:13:8f:6d:e3:3f:8e:
                    32:77:51:9b:11:fd:29:6d:af:1d:06:8b:f9:86:0f:
                    69:23:8f:ad:81:b9:8e:a2:c7:aa:db:f9:36:4e:71:
                    d3:dd:49:e4:d1:1d:27:d3:fd:85:cc:c1:26:42:9c:
                    12:80:1e:99:5d:ae:b5:80:14:98:f4:ba:78:37:aa:
                    eb:9c:96:e1:60:0a:de:4f:2c:e6:b4:9a:2e:e4:31:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:25:A0:F0:4D:60:93:9B:EC:D2:F5:11:24:93:9F:62:27:79:3F
            X509v3 Authority Key Identifier:
                keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:81:bc:8c:de:8a:f0:9c:c7:05:34:e9:78:eb:3f:4a:e5:33:
         0c:fb:8f:65:6f:82:38:00:b7:d5:d4:cf:d0:ca:65:ab:d8:12:
         95:e8:4f:18:2d:13:c3:7c:75:23:6f:16:27:3d:8b:7f:3a:91:
         cb:51:80:28:72:7b:cf:85:c6:0f:1f:c0:b4:b9:cf:1b:9f:dd:
         dc:3c:46:96:18:fe:c2:19:ec:b8:1c:dd:a5:c6:4f:3d:02:7c:
         09:85:22:fa:e5:38:de:5e:7f:71:6f:31:0f:d7:ca:13:97:34:
         4a:f9:27:e4:7d:61:04:0e:cb:24:80:58:e1:98:8c:4f:74:02:
         44:58:44:3c:fb:18:bc:79:7c:5e:60:e6:aa:a2:5b:c8:6e:0a:
         c1:f9:a4:d6:82:de:0d:6a:a9:77:d7:27:33:68:c0:96:b8:1b:
         10:0d:94:8b:46:d8:fa:9f:ee:ef:7e:29:03:8f:c8:80:4b:56:
         3f:fe:00:7f:87:9d:2d:8b:61:eb:a0:0b:b0:cf:38:d5:e3:ec:
         0d:bb:b6:8e:3b:31:d4:7f:e1:91:4c:00:a5:3c:97:c9:01:e7:
         76:70:cf:e4:7f:bc:7c:24:b6:6b:71:6d:f1:44:d3:bb:91:ff:
         a2:43:ba:2c:c0:33:9c:ad:ad:0b:38:da:d6:5c:49:22:a5:9c:
         57:d1:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:37 2025 by rpki-client