Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
File:                     4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json)
Hash identifier:          tUUqHsWQEvqxfQIKsZdxCjFSlbgmJkw80mQbfJyDzSo=
Subject key identifier:   46:3B:65:84:7A:43:00:40:F8:B5:BE:43:44:7C:6C:EF:51:E0:41:2D
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Certificate issuer:       /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial:       4A87A50E867A5D7DC6DF4DF1975B8907E2A6D106
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
Manifest number:          70
Signing time:             Thu 27 Mar 2025 17:12:14 +0000
Manifest this update:     Thu 27 Mar 2025 17:07:14 +0000
Manifest next update:     Mon 31 Mar 2025 00:17:14 +0000
Files and hashes:         1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: IxIlkMYFAl9O4zSgf4mx19P3AWk2UQRP1AHyNpHpTIo=)
                          2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 7x/SmyPHQFfblL4JZHqrDEN7k/DubxIWEEwK3IKjhss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:87:a5:0e:86:7a:5d:7d:c6:df:4d:f1:97:5b:89:07:e2:a6:d1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
        Validity
            Not Before: Mar 27 17:07:14 2025 GMT
            Not After : Mar 31 00:17:14 2025 GMT
        Subject: CN=463B65847A430040F8B5BE43447C6CEF51E0412D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:e5:9b:a7:1a:90:a1:0d:0b:85:48:b3:7d:
                    74:04:ab:ad:06:39:e3:67:e9:88:ce:08:e2:3a:3b:
                    f5:c4:ff:b8:ad:e7:4f:d3:43:27:a8:dd:5c:37:30:
                    c0:6a:33:e2:a7:84:53:a1:fb:9c:37:8d:19:29:b9:
                    50:66:06:e2:21:8a:26:2a:84:2a:0d:e8:50:fa:11:
                    24:44:07:1a:b5:3e:9e:f0:7e:f8:ef:42:6a:9a:b7:
                    ad:0c:7d:89:ca:e8:df:e0:a5:c3:2b:ea:e8:51:8e:
                    eb:2f:8c:5f:c1:c0:94:a8:43:f7:7f:16:1a:f3:79:
                    ce:4c:ce:1b:ce:56:e9:73:de:d2:a1:a2:7a:00:98:
                    e7:9e:35:8d:80:54:ec:76:ce:82:e2:e8:e1:fc:25:
                    b0:4e:13:5c:12:b0:f4:ff:b9:1a:fd:e0:51:a9:6e:
                    d5:f3:8d:24:54:50:29:d5:4a:39:38:25:e5:5d:1b:
                    57:35:d5:39:cc:2e:ff:fe:5f:2e:ca:0a:b9:40:e5:
                    85:6c:a5:7e:12:11:94:7e:0a:98:92:a7:30:7b:99:
                    3d:a9:62:4e:e7:b7:bd:25:5c:e9:20:68:8e:ae:6d:
                    22:8a:b9:86:a7:05:7d:81:ad:06:5e:66:53:f8:56:
                    04:81:ab:c8:05:93:67:4d:1d:aa:80:71:20:eb:14:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:65:84:7A:43:00:40:F8:B5:BE:43:44:7C:6C:EF:51:E0:41:2D
            X509v3 Authority Key Identifier:
                keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:50:9b:5a:da:9a:39:32:bd:03:ab:86:77:5e:e0:55:11:
         b7:96:b2:87:10:e5:c6:c7:50:09:d2:c2:3d:51:40:d6:6c:c0:
         a9:71:40:fe:e4:96:12:04:36:4a:f2:51:96:14:29:19:b6:8f:
         03:44:7a:9b:da:8f:24:45:62:09:05:f8:0b:20:e6:d4:6b:52:
         01:49:48:d4:0f:5e:ff:29:fa:51:b2:d9:67:fc:7f:61:ba:75:
         69:9c:d8:e8:57:8f:6d:5b:fc:a1:a0:ab:fb:0f:c8:69:ef:36:
         fc:cb:ea:83:56:8f:89:72:00:3e:75:0e:18:9e:20:37:bd:1f:
         24:73:33:8a:92:4e:40:c4:f1:38:d4:69:62:a0:be:33:21:fc:
         5a:56:2f:e9:ad:71:95:51:bb:22:5f:8a:1e:05:71:9b:36:d3:
         2f:c1:ec:d1:33:5a:bf:bc:1a:f1:cb:b4:10:25:5e:1d:33:de:
         19:a3:f0:16:4c:ae:f2:a9:81:73:6e:8c:f2:ff:55:f2:7c:26:
         29:e9:36:30:68:47:c5:f1:b2:4e:47:97:05:e3:32:dd:3a:f5:
         81:45:51:f5:47:7c:76:89:58:1a:49:fb:72:0c:ba:1a:cd:fd:
         6f:2c:05:55:ea:dd:5f:ea:bc:50:44:d6:c7:57:4c:0d:83:d1:
         f3:e5:19:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSoelDoZ6XX3G303xl1uJB+Km0QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB
RDZDRDA4MjAeFw0yNTAzMjcxNzA3MTRaFw0yNTAzMzEwMDE3MTRaMDMxMTAvBgNV
BAMTKDQ2M0I2NTg0N0E0MzAwNDBGOEI1QkU0MzQ0N0M2Q0VGNTFFMDQxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3eWbpxqQoQ0LhUizfXQEq60G
OeNn6YjOCOI6O/XE/7it50/TQyeo3Vw3MMBqM+KnhFOh+5w3jRkpuVBmBuIhiiYq
hCoN6FD6ESREBxq1Pp7wfvjvQmqat60MfYnK6N/gpcMr6uhRjusvjF/BwJSoQ/d/
Fhrzec5MzhvOVulz3tKhonoAmOeeNY2AVOx2zoLi6OH8JbBOE1wSsPT/uRr94FGp
btXzjSRUUCnVSjk4JeVdG1c11TnMLv/+Xy7KCrlA5YVspX4SEZR+CpiSpzB7mT2p
Yk7nt70lXOkgaI6ubSKKuYanBX2BrQZeZlP4VgSBq8gFk2dNHaqAcSDrFOo9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURjtlhHpDAED4tb5DRHxs71HgQS0wHwYDVR0j
BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw
MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD
RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj
ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD
MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG13UJta2po5Mr0Dq4Z3XuBVEbeWsocQ5cbH
UAnSwj1RQNZswKlxQP7klhIENkryUZYUKRm2jwNEepvajyRFYgkF+Asg5tRrUgFJ
SNQPXv8p+lGy2Wf8f2G6dWmc2OhXj21b/KGgq/sPyGnvNvzL6oNWj4lyAD51Dhie
IDe9HyRzM4qSTkDE8TjUaWKgvjMh/FpWL+mtcZVRuyJfih4FcZs20y/B7NEzWr+8
GvHLtBAlXh0z3hmj8BZMrvKpgXNujPL/VfJ8JinpNjBoR8Xxsk5HlwXjMt069YFF
UfVHfHaJWBpJ+3IMuhrN/W8sBVXq3V/qvFBE1sdXTA2D0fPlGdM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:50:31 2025 by rpki-client