Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft
File:                     0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json)
Hash identifier:          Lv3W6pu9sASaVgWiedILu7oJ45v3pdz52ilnRVXSDpQ=
Subject key identifier:   3D:02:67:1B:60:92:C7:1F:9B:28:DE:3A:A2:F6:DC:E5:47:55:CF:77
Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD
Certificate issuer:       /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD
Certificate serial:       546406B107D4990DFD91E15CD36FEFC56D7291E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft
Manifest number:          017D
Signing time:             Fri 28 Mar 2025 16:31:26 +0000
Manifest this update:     Fri 28 Mar 2025 16:26:26 +0000
Manifest next update:     Mon 31 Mar 2025 22:50:26 +0000
Files and hashes:         1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=)
                          2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: 3n9kZO/+0/OkuXv34gL63CZwsChgIznZSmGhTWddkI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:64:06:b1:07:d4:99:0d:fd:91:e1:5c:d3:6f:ef:c5:6d:72:91:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD
        Validity
            Not Before: Mar 28 16:26:26 2025 GMT
            Not After : Mar 31 22:50:26 2025 GMT
        Subject: CN=3D02671B6092C71F9B28DE3AA2F6DCE54755CF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:75:f2:65:b2:68:c2:e3:30:00:a2:76:81:
                    d0:f9:3a:b7:74:96:f0:7e:a0:ba:de:7e:0d:27:e7:
                    22:11:3c:f1:90:80:be:36:21:a2:e2:1a:68:52:e4:
                    cd:8b:0b:22:71:9d:a9:ed:a7:04:8e:26:da:a6:d0:
                    30:64:7b:68:78:39:8b:88:1a:93:2b:37:a8:d7:b9:
                    34:31:b5:c1:0b:8c:36:a4:05:bf:6d:1f:2e:b1:b6:
                    21:72:15:d9:ff:59:fe:5d:c0:68:25:82:99:d7:27:
                    9c:e8:da:17:34:8c:ac:cb:3d:14:d4:2b:e9:2e:61:
                    68:7b:5a:b1:4a:f4:e1:f5:f0:51:f8:33:2e:c8:73:
                    eb:14:73:8c:72:b0:96:6a:e9:a9:ee:8e:fa:df:e8:
                    a5:ed:cf:2a:eb:57:3c:9c:21:ab:77:8f:ca:d8:26:
                    2b:ad:48:fa:68:5b:69:39:fe:82:0d:5a:5c:45:2c:
                    03:99:c0:92:a7:b3:0d:a5:69:a2:d3:43:28:f1:95:
                    61:63:44:e7:bb:8b:ba:3f:be:b9:16:ed:1d:0e:b8:
                    bf:a5:af:44:b3:69:5c:8d:ed:d4:ce:ca:ae:d4:d1:
                    45:d8:ae:cb:53:7b:7b:6c:f5:f4:3c:1c:47:60:3a:
                    de:11:34:67:07:29:31:97:5d:3b:84:e2:53:b9:a2:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:02:67:1B:60:92:C7:1F:9B:28:DE:3A:A2:F6:DC:E5:47:55:CF:77
            X509v3 Authority Key Identifier:
                keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:10:8c:86:db:65:b0:e3:17:39:5a:0c:8a:79:21:75:7c:
         7b:28:5f:96:ac:d8:51:d0:83:eb:db:14:02:f3:57:3c:53:57:
         96:9a:b0:53:f8:36:49:29:c8:b9:2d:d2:1d:02:a1:bf:72:36:
         84:ab:c1:98:39:38:a3:c7:eb:05:0c:55:67:12:6e:84:95:08:
         08:90:31:1b:c4:8a:dd:8d:52:84:aa:b9:6a:89:9a:5a:66:2e:
         e0:32:d6:75:56:ab:69:31:fc:1d:bd:40:a3:6b:88:37:52:68:
         e8:62:eb:e9:dd:9a:b4:88:5d:fe:5d:ff:e4:14:b4:fb:16:af:
         a7:df:30:0f:c4:68:20:42:b9:63:7e:02:05:42:a8:a3:24:1e:
         fc:6f:86:bc:df:76:fe:d2:22:e3:db:54:71:b4:5e:af:b8:bc:
         03:74:c3:3f:ef:f3:ff:67:38:d3:09:13:49:60:0e:26:6b:99:
         40:d1:da:5d:15:33:26:dd:ca:2d:da:ab:2e:e6:01:44:d2:01:
         01:3b:e4:ce:6f:bf:a7:52:c7:ba:fe:ff:41:4b:d3:e2:33:f7:
         c4:ec:15:78:06:7d:db:52:e8:91:de:1b:80:0b:e5:66:c1:4c:
         38:64:85:12:a0:e7:74:ab:c5:a6:90:2b:90:84:3f:38:ae:23:
         b9:44:df:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVGQGsQfUmQ39keFc02/vxW1ykeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4
NUJGQURGRDAeFw0yNTAzMjgxNjI2MjZaFw0yNTAzMzEyMjUwMjZaMDMxMTAvBgNV
BAMTKDNEMDI2NzFCNjA5MkM3MUY5QjI4REUzQUEyRjZEQ0U1NDc1NUNGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC783XyZbJowuMwAKJ2gdD5Ord0
lvB+oLrefg0n5yIRPPGQgL42IaLiGmhS5M2LCyJxnantpwSOJtqm0DBke2h4OYuI
GpMrN6jXuTQxtcELjDakBb9tHy6xtiFyFdn/Wf5dwGglgpnXJ5zo2hc0jKzLPRTU
K+kuYWh7WrFK9OH18FH4My7Ic+sUc4xysJZq6anujvrf6KXtzyrrVzycIat3j8rY
JiutSPpoW2k5/oINWlxFLAOZwJKnsw2laaLTQyjxlWFjROe7i7o/vrkW7R0OuL+l
r0SzaVyN7dTOyq7U0UXYrstTe3ts9fQ8HEdgOt4RNGcHKTGXXTuE4lO5opxPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPQJnG2CSxx+bKN46ovbc5UdVz3cwHwYDVR0j
BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0
Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG
QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi
ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw
NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALQvEIyG22Ww4xc5WgyKeSF1fHsoX5as2FHQ
g+vbFALzVzxTV5aasFP4NkkpyLkt0h0Cob9yNoSrwZg5OKPH6wUMVWcSboSVCAiQ
MRvEit2NUoSquWqJmlpmLuAy1nVWq2kx/B29QKNriDdSaOhi6+ndmrSIXf5d/+QU
tPsWr6ffMA/EaCBCuWN+AgVCqKMkHvxvhrzfdv7SIuPbVHG0Xq+4vAN0wz/v8/9n
ONMJE0lgDiZrmUDR2l0VMybdyi3aqy7mAUTSAQE75M5vv6dSx7r+/0FL0+Iz98Ts
FXgGfdtS6JHeG4AL5WbBTDhkhRKg53SrxaaQK5CEPziuI7lE32k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:07 2025 by rpki-client