Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
File:                     CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json)
Hash identifier:          6NGJuERniVkSznouDBzEEKGHdvGhKFp1r4s47JqYDTw=
Subject key identifier:   5E:CA:DA:A5:95:B2:67:95:C2:EF:EC:59:D7:00:E5:C9:35:05:D7:32
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       65442576C6FB9282BA7C00B4F72473AEFFC57E2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
Manifest number:          0301
Signing time:             Sat 29 Mar 2025 02:22:15 +0000
Manifest this update:     Sat 29 Mar 2025 02:17:15 +0000
Manifest next update:     Tue 01 Apr 2025 13:30:15 +0000
Files and hashes:         1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: lVVEQRaIbonJY374bXa4Eau4fPAIIr1m4g0jH3SuIpk=)
                          2: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: TfhzPklOW6iI7qQ/lKPqIlEVzKQk4zS5gtWyrXhypDk=)
                          3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=)
                          4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:44:25:76:c6:fb:92:82:ba:7c:00:b4:f7:24:73:ae:ff:c5:7e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Mar 29 02:17:15 2025 GMT
            Not After : Apr  1 13:30:15 2025 GMT
        Subject: CN=5ECADAA595B26795C2EFEC59D700E5C93505D732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:2b:62:8f:3d:98:19:c4:30:16:8b:ba:7c:
                    12:f5:84:00:e2:4f:71:40:07:08:98:9a:57:46:86:
                    44:52:f2:db:8d:6b:41:e5:1b:23:df:ec:04:a7:10:
                    d8:12:9e:19:75:55:08:70:1b:a6:9e:2f:5d:1c:2c:
                    42:1f:c5:70:d3:b6:d9:ba:53:57:70:a3:e7:d7:a1:
                    39:30:35:d4:7a:eb:c1:32:fd:90:97:39:62:7d:fa:
                    0c:22:3d:82:c3:33:c5:ff:52:9c:24:0c:fb:5a:05:
                    c9:b0:ae:5b:85:10:ae:06:c1:c0:d3:79:2c:67:c3:
                    44:a0:07:b3:22:64:fd:96:11:6f:a6:e1:0b:ea:bd:
                    08:0b:7f:45:a8:07:3f:e5:79:79:32:e8:a0:63:c3:
                    b0:45:29:6a:9e:03:28:79:fc:1d:8a:06:21:96:ad:
                    42:c3:92:c6:9e:0a:61:03:d2:12:52:88:51:bf:38:
                    7b:d6:fd:e7:10:58:3c:22:29:a3:8f:27:77:09:d4:
                    be:19:4e:cd:cf:c7:36:69:d1:7f:78:c3:22:e2:d2:
                    8e:db:05:d5:80:ff:73:4a:75:a3:bd:3a:b4:f5:cc:
                    89:f5:a5:32:38:32:79:fd:69:48:2e:c2:84:93:ab:
                    59:b8:09:4b:1a:c6:de:0f:4e:57:3e:68:ab:e5:4f:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:DA:A5:95:B2:67:95:C2:EF:EC:59:D7:00:E5:C9:35:05:D7:32
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:aa:b8:c6:df:65:84:70:a9:1a:1b:46:08:6e:3b:f0:5f:ff:
         34:51:0c:ed:b4:86:14:c6:71:53:2c:a7:03:62:87:34:49:12:
         f9:87:3e:01:7b:7e:56:1a:a1:aa:7b:9e:e1:96:67:71:26:79:
         e2:61:ce:b5:4a:2f:41:be:bc:88:a7:cb:49:80:56:6b:d1:03:
         5f:ee:8f:e9:cb:70:6b:f5:5d:1c:c4:68:10:ba:0a:a7:28:f5:
         69:1a:d9:a7:75:18:8b:27:a9:7e:7e:63:6b:90:75:1a:cb:6b:
         a2:41:7a:d7:2d:b7:5c:76:25:85:ed:f7:05:7a:4c:e5:f0:7e:
         ab:ed:05:0a:3e:9e:3e:57:a1:a1:b5:bf:ad:ca:6a:aa:22:86:
         04:42:94:bd:21:73:25:1a:ac:40:ef:84:8e:55:08:d9:07:9e:
         d4:8a:61:ed:80:74:96:82:91:fd:d1:f4:28:f2:1c:1e:59:e1:
         3a:d6:54:d4:f4:e1:26:9f:75:71:29:b8:50:5e:29:ba:f6:cd:
         5b:7d:f4:c4:7e:42:2e:4c:d2:17:cf:95:93:9f:fe:da:7b:1e:
         f2:86:01:99:24:e3:f9:d3:8e:2d:ae:57:01:4a:e3:94:a6:4b:
         42:2d:46:46:99:d7:4d:7c:67:2c:a4:9b:4e:e5:e2:f0:f4:15:
         a2:3c:00:b8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZUQldsb7koK6fAC09yRzrv/FfiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0
RkNGOUZDRTAeFw0yNTAzMjkwMjE3MTVaFw0yNTA0MDExMzMwMTVaMDMxMTAvBgNV
BAMTKDVFQ0FEQUE1OTVCMjY3OTVDMkVGRUM1OUQ3MDBFNUM5MzUwNUQ3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhCtijz2YGcQwFou6fBL1hADi
T3FABwiYmldGhkRS8tuNa0HlGyPf7ASnENgSnhl1VQhwG6aeL10cLEIfxXDTttm6
U1dwo+fXoTkwNdR668Ey/ZCXOWJ9+gwiPYLDM8X/UpwkDPtaBcmwrluFEK4GwcDT
eSxnw0SgB7MiZP2WEW+m4QvqvQgLf0WoBz/leXky6KBjw7BFKWqeAyh5/B2KBiGW
rULDksaeCmED0hJSiFG/OHvW/ecQWDwiKaOPJ3cJ1L4ZTs3PxzZp0X94wyLi0o7b
BdWA/3NKdaO9OrT1zIn1pTI4Mnn9aUguwoSTq1m4CUsaxt4PTlc+aKvlTyRhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXsrapZWyZ5XC7+xZ1wDlyTUF1zIwHwYDVR0j
BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD
NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG
OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4
MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2
MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANqquMbfZYRwqRobRghuO/Bf/zRRDO20hhTG
cVMspwNihzRJEvmHPgF7flYaoap7nuGWZ3EmeeJhzrVKL0G+vIiny0mAVmvRA1/u
j+nLcGv1XRzEaBC6Cqco9Wka2ad1GIsnqX5+Y2uQdRrLa6JBetctt1x2JYXt9wV6
TOXwfqvtBQo+nj5XoaG1v63KaqoihgRClL0hcyUarEDvhI5VCNkHntSKYe2AdJaC
kf3R9CjyHB5Z4TrWVNT04SafdXEpuFBeKbr2zVt99MR+Qi5M0hfPlZOf/tp7HvKG
AZkk4/nTji2uVwFK45SmS0ItRkaZ1018Zyykm07l4vD0FaI8ALg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:11:42 2025 by rpki-client