Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
File:                     2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json)
Hash identifier:          L/saWDVtdQl4SmH9LTPZxByw/mt+N6ArHDXRSp+zxzs=
Subject key identifier:   4C:A8:FB:0F:B2:4C:0C:39:B0:89:CB:EF:A6:65:F8:6B:81:28:14:B2
Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
Certificate issuer:       /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Certificate serial:       6E7518BAA379546ADE96A42BD1E9C98BC26120FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
Manifest number:          01C1
Signing time:             Fri 28 Mar 2025 06:20:51 +0000
Manifest this update:     Fri 28 Mar 2025 06:15:51 +0000
Manifest next update:     Mon 31 Mar 2025 08:03:51 +0000
Files and hashes:         1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: hpmksd9eMNwc5kNsNmYaL/Pd8BPAaDkCFnInyCLaFn8=)
                          2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: eiRbNyy+2Cfq6J3LhynMxy6A7hN5h3MYyc0wfj6gskU=)
                          3: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: 0marAHs1dlM2ZOMTWcXByBeQng+Q2OpTgTPV3SbrYKc=)
                          4: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:75:18:ba:a3:79:54:6a:de:96:a4:2b:d1:e9:c9:8b:c2:61:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
        Validity
            Not Before: Mar 28 06:15:51 2025 GMT
            Not After : Mar 31 08:03:51 2025 GMT
        Subject: CN=4CA8FB0FB24C0C39B089CBEFA665F86B812814B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:5c:5a:a3:04:60:87:0a:41:69:e1:d2:40:
                    94:12:7f:df:51:55:af:c8:28:55:8e:f8:e3:f1:ec:
                    3e:a1:87:29:9a:13:9b:ef:03:b7:46:fd:ab:8f:cc:
                    81:0a:f8:7a:61:43:52:70:ba:21:bd:3d:48:79:24:
                    ef:79:00:02:14:d4:0b:19:f2:93:20:ea:69:8a:bc:
                    8c:fa:a8:1d:e1:87:3a:82:82:56:7f:2b:a3:03:f8:
                    cd:66:bb:0c:50:2e:21:a9:68:57:dd:df:83:1d:4c:
                    38:1b:6a:7a:11:03:c4:83:7d:f3:52:4a:b2:b6:70:
                    10:96:f4:1b:8e:03:11:d8:96:9e:5e:44:74:8f:e9:
                    ef:1f:c3:52:6b:b9:67:44:51:06:ed:be:83:44:55:
                    81:4a:8e:36:3c:cf:c9:22:4e:1d:1f:05:70:fa:4a:
                    7b:b4:2e:9d:85:a1:32:5d:94:c5:bf:c3:4a:7a:c0:
                    1c:76:fa:15:fc:e5:67:61:c3:34:2b:c9:4a:02:0a:
                    31:c1:7a:08:2f:b0:89:f9:1b:53:e6:ed:cd:5e:9c:
                    6d:65:09:f1:a8:0a:b2:25:a2:c6:23:91:7e:5c:78:
                    68:eb:34:65:6a:61:c6:d9:77:f1:73:5d:8c:41:c6:
                    77:f7:a2:54:df:3b:ca:4e:b6:87:32:67:c1:bf:c0:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:FB:0F:B2:4C:0C:39:B0:89:CB:EF:A6:65:F8:6B:81:28:14:B2
            X509v3 Authority Key Identifier:
                keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:dc:dc:8f:f1:f2:e4:30:a3:9f:ef:9c:10:2b:d2:ab:42:
         12:b4:e8:85:f7:f1:33:c8:10:8e:ac:b5:e2:2b:50:cf:5d:61:
         39:b3:1f:92:25:fb:f4:ff:25:00:5a:26:50:7c:bb:3a:68:16:
         3c:ef:49:e5:a2:48:3b:5b:14:59:20:1c:35:0d:7d:45:fa:15:
         84:58:66:b4:a9:08:fd:6c:2a:e9:20:c5:45:44:51:2c:67:fd:
         19:d3:db:ff:44:0a:6d:c5:c1:d8:00:0f:52:e1:3a:cd:12:7e:
         10:3f:6b:dc:e5:7f:0b:d9:1f:13:db:87:89:e0:99:45:19:dc:
         5c:dc:d3:79:55:12:15:32:cd:94:dc:05:4d:17:fd:33:15:08:
         f8:b5:0d:40:ab:73:dc:98:dd:16:57:b1:f5:11:d5:9f:b4:fe:
         c6:92:3f:db:9d:5b:cc:ca:c2:8b:38:c9:46:1f:6e:b0:96:15:
         7b:dd:e2:01:33:a4:4d:5d:09:e8:10:1a:78:56:3b:42:2a:af:
         3a:73:29:f6:07:c9:0d:06:d7:0f:e5:c3:39:99:53:7e:09:e7:
         24:6a:67:bc:e2:64:7b:58:86:e6:ef:97:31:b4:51:d4:32:f7:
         04:15:37:8a:c1:cd:49:12:48:4f:14:3e:c0:e6:c0:eb:39:a7:
         f9:7e:bb:d1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbnUYuqN5VGrelqQr0enJi8JhIPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1
RjMyQ0VCNTAeFw0yNTAzMjgwNjE1NTFaFw0yNTAzMzEwODAzNTFaMDMxMTAvBgNV
BAMTKDRDQThGQjBGQjI0QzBDMzlCMDg5Q0JFRkE2NjVGODZCODEyODE0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPFxaowRghwpBaeHSQJQSf99R
Va/IKFWO+OPx7D6hhymaE5vvA7dG/auPzIEK+HphQ1JwuiG9PUh5JO95AAIU1AsZ
8pMg6mmKvIz6qB3hhzqCglZ/K6MD+M1muwxQLiGpaFfd34MdTDgbanoRA8SDffNS
SrK2cBCW9BuOAxHYlp5eRHSP6e8fw1JruWdEUQbtvoNEVYFKjjY8z8kiTh0fBXD6
Snu0Lp2FoTJdlMW/w0p6wBx2+hX85WdhwzQryUoCCjHBeggvsIn5G1Pm7c1enG1l
CfGoCrIlosYjkX5ceGjrNGVqYcbZd/FzXYxBxnf3olTfO8pOtocyZ8G/wIZrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTKj7D7JMDDmwicvvpmX4a4EoFLIwHwYDVR0j
BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz
MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy
Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh
ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND
NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIa93NyP8fLkMKOf75wQK9KrQhK06IX38TPI
EI6steIrUM9dYTmzH5Il+/T/JQBaJlB8uzpoFjzvSeWiSDtbFFkgHDUNfUX6FYRY
ZrSpCP1sKukgxUVEUSxn/RnT2/9ECm3FwdgAD1LhOs0SfhA/a9zlfwvZHxPbh4ng
mUUZ3Fzc03lVEhUyzZTcBU0X/TMVCPi1DUCrc9yY3RZXsfUR1Z+0/saSP9udW8zK
wos4yUYfbrCWFXvd4gEzpE1dCegQGnhWO0IqrzpzKfYHyQ0G1w/lwzmZU34J5yRq
Z7ziZHtYhubvlzG0UdQy9wQVN4rBzUkSSE8UPsDmwOs5p/l+u9E=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:28 2025 by rpki-client