Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft
File:                     D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json)
Hash identifier:          +7TgkRWyaXqGfpQQGea+zKCROsBneo+jKK1KCKsF8GQ=
Subject key identifier:   53:12:86:6D:17:C0:C5:A8:48:2E:52:1D:E8:75:15:17:7E:DA:84:42
Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5
Certificate issuer:       /CN=D5265466AE0186702AF52D11170A29AC32F54EF5
Certificate serial:       790751E9CF2B8A858A1FD1D7D822BEC31AB5DB6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft
Manifest number:          85
Signing time:             Sat 29 Mar 2025 01:40:39 +0000
Manifest this update:     Sat 29 Mar 2025 01:35:39 +0000
Manifest next update:     Tue 01 Apr 2025 11:17:39 +0000
Files and hashes:         1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: +Pczkm6KLxX++gSEZxCGUe0kLgElvH0xm6QKXFfR7KU=)
                          2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: 07PJ0373gHmsJSP7bdaxkwGkQpeo8f9BJOxD0YWQ4qQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:07:51:e9:cf:2b:8a:85:8a:1f:d1:d7:d8:22:be:c3:1a:b5:db:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5
        Validity
            Not Before: Mar 29 01:35:39 2025 GMT
            Not After : Apr  1 11:17:39 2025 GMT
        Subject: CN=5312866D17C0C5A8482E521DE87515177EDA8442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:d6:31:1c:15:b4:c7:7a:f8:dd:bd:78:bb:
                    d3:ee:eb:59:1f:57:19:71:b6:68:32:f4:b2:30:f3:
                    4a:ba:93:43:9e:4c:58:8f:aa:f4:4f:a3:58:07:cb:
                    4b:46:bd:b8:a7:d5:c0:3d:a9:86:bc:cc:ee:b1:63:
                    b6:17:ff:77:9f:49:e9:bc:04:70:fa:8c:d8:b7:17:
                    da:8d:f3:9a:13:3c:0c:26:03:ad:0f:92:56:71:5e:
                    77:0b:04:07:c3:ea:26:96:44:54:b1:00:cf:75:97:
                    ca:96:8c:af:d4:6c:c2:cb:c2:f7:6c:93:5f:2b:fa:
                    d5:96:e7:83:ac:6b:2b:fa:f2:90:fb:a8:f1:e1:00:
                    1c:35:79:bb:cd:3d:68:e7:1f:bf:80:ed:d9:dc:e0:
                    31:1b:48:23:6c:54:a7:9c:4c:fd:9e:ef:d4:81:ba:
                    a4:64:b4:91:67:6f:6a:3d:1c:2b:26:b8:f3:81:13:
                    33:23:bd:0b:65:29:08:16:11:e1:5e:2b:88:91:ee:
                    e2:68:57:dd:26:d5:aa:54:3f:3f:b8:95:5f:30:72:
                    7d:98:de:d7:53:32:93:e7:9c:a8:6e:b7:dd:4c:40:
                    cc:f4:3c:f3:c0:df:80:83:f2:00:96:6a:99:1e:94:
                    a0:4f:b2:fd:e6:fd:36:f0:cc:71:40:e3:f0:ce:2f:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:12:86:6D:17:C0:C5:A8:48:2E:52:1D:E8:75:15:17:7E:DA:84:42
            X509v3 Authority Key Identifier:
                keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:44:00:0e:01:a9:e4:11:15:67:42:0c:25:a8:d2:a9:48:ec:
         4e:ca:b1:c4:52:72:8e:c1:87:10:56:93:20:5e:9a:59:7d:ef:
         0c:e1:40:79:56:90:04:b7:8d:d4:79:27:a5:65:75:30:b1:b4:
         1f:56:20:d8:62:bd:e9:2d:c6:d4:55:77:d4:09:a2:43:18:b5:
         1a:92:31:75:3a:8c:4b:1c:a7:f6:2a:eb:a7:c1:e5:3f:0d:78:
         a0:ce:3e:11:fd:b2:28:5c:32:2b:5e:10:c6:23:61:af:26:ae:
         6b:52:b1:64:11:56:48:2d:ef:35:59:e5:87:af:34:44:99:59:
         51:98:6b:f2:aa:04:00:e6:82:31:98:34:7d:8d:b2:56:c8:95:
         74:45:67:e2:65:b6:fa:0d:81:eb:b5:cc:b8:73:c6:ff:75:16:
         f2:16:cf:18:61:e7:14:ff:9e:0e:a3:e2:34:55:de:c3:08:42:
         fc:fc:56:1c:21:d8:67:68:c7:fb:c6:67:14:8e:8a:86:84:17:
         e8:e3:01:f9:10:c7:b1:9c:a0:5b:27:da:39:c9:db:89:0a:0e:
         d3:5a:a7:30:b7:07:46:d8:bf:99:b6:94:f5:27:40:46:7a:f9:
         50:12:86:9f:5b:6e:2b:b5:ea:4f:78:1d:78:e5:6f:79:1f:d6:
         f1:d6:8e:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeQdR6c8rioWKH9HX2CK+wxq1220wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz
MkY1NEVGNTAeFw0yNTAzMjkwMTM1MzlaFw0yNTA0MDExMTE3MzlaMDMxMTAvBgNV
BAMTKDUzMTI4NjZEMTdDMEM1QTg0ODJFNTIxREU4NzUxNTE3N0VEQTg0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8b9YxHBW0x3r43b14u9Pu61kf
Vxlxtmgy9LIw80q6k0OeTFiPqvRPo1gHy0tGvbin1cA9qYa8zO6xY7YX/3efSem8
BHD6jNi3F9qN85oTPAwmA60PklZxXncLBAfD6iaWRFSxAM91l8qWjK/UbMLLwvds
k18r+tWW54Osayv68pD7qPHhABw1ebvNPWjnH7+A7dnc4DEbSCNsVKecTP2e79SB
uqRktJFnb2o9HCsmuPOBEzMjvQtlKQgWEeFeK4iR7uJoV90m1apUPz+4lV8wcn2Y
3tdTMpPnnKhut91MQMz0PPPA34CD8gCWapkelKBPsv3m/TbwzHFA4/DOL3gbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUxKGbRfAxahILlId6HUVF37ahEIwHwYDVR0j
BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF
MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1
NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk
YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5
QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIZEAA4BqeQRFWdCDCWo0qlI7E7KscRSco7B
hxBWkyBemll97wzhQHlWkAS3jdR5J6VldTCxtB9WINhivektxtRVd9QJokMYtRqS
MXU6jEscp/Yq66fB5T8NeKDOPhH9sihcMiteEMYjYa8mrmtSsWQRVkgt7zVZ5Yev
NESZWVGYa/KqBADmgjGYNH2NslbIlXRFZ+JltvoNgeu1zLhzxv91FvIWzxhh5xT/
ng6j4jRV3sMIQvz8Vhwh2Gdox/vGZxSOioaEF+jjAfkQx7GcoFsn2jnJ24kKDtNa
pzC3B0bYv5m2lPUnQEZ6+VAShp9bbiu16k94HXjlb3kf1vHWjsg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:43:39 2025 by rpki-client