Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          D7n2XY1oUkX/jPf+BiYn8n2jqYDBLLtFSSKLBcehAxY=
Subject key identifier:   20:AC:B5:80:16:FE:3F:47:E0:EB:B6:58:81:10:BE:58:4A:E0:BF:72
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       74EE0EC16301E0EB383611FAEF2BCAA89395CF3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          04BD
Signing time:             Fri 28 Mar 2025 01:32:10 +0000
Manifest this update:     Fri 28 Mar 2025 01:27:10 +0000
Manifest next update:     Mon 31 Mar 2025 09:37:10 +0000
Files and hashes:         1: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: Cse8b/k5b4bW7XpFnYV12Fa/2xvR+RXr3znpP3+Kb5w=)
                          2: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: RAbCLxobZi0sT1mrrSFIFMMt66YKWEiZkYMYeXBiifg=)
                          3: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: zzu9Pa4aUrYBrkU/dzzrAVQ+KTnyVkmxoRDur+r4jp0=)
                          4: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: i+PocK8SEp44TFX6dfSGcfLf+KIkgk/b4aqmIJNUvI4=)
                          5: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=)
                          6: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: NPccw/uPbjU6Ng0Kv+MnSicLOTD8CXxnBeD+TitCSK4=)
                          7: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: TM3GYewxHHLLEzakQI/e4lcxtVAjFWl7n3OxdIcy9do=)
                          8: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: Sjz+Mw4h9hDynPTU4wmbIFS9wojilMuVRHQLpoKIQ3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ee:0e:c1:63:01:e0:eb:38:36:11:fa:ef:2b:ca:a8:93:95:cf:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Mar 28 01:27:10 2025 GMT
            Not After : Mar 31 09:37:10 2025 GMT
        Subject: CN=20ACB58016FE3F47E0EBB6588110BE584AE0BF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:75:72:75:b1:5b:16:05:53:71:f5:75:cc:
                    2e:5e:10:ad:af:2e:2e:57:f0:04:a1:68:48:4b:e5:
                    81:0d:a8:5a:d5:0f:a8:04:bf:ba:29:14:58:a0:86:
                    0e:20:ba:01:aa:8e:03:7e:ad:9e:f2:86:a6:3a:b5:
                    f4:c1:7e:34:57:20:df:2d:fd:e8:75:24:14:34:dd:
                    8f:33:a7:a9:8c:85:f7:7b:23:2d:1f:49:a1:e0:92:
                    bc:eb:06:c5:10:20:62:6f:c9:e8:05:75:f8:fc:b6:
                    ad:b0:51:21:07:3f:84:4f:7c:27:04:7e:11:82:09:
                    55:10:c0:07:8d:73:1f:60:b6:a1:13:9d:ff:30:8c:
                    58:c4:6a:46:4b:63:b2:5a:a6:f0:a0:21:7c:6e:30:
                    75:e4:56:20:95:5d:82:e8:df:07:36:2a:97:b3:c9:
                    e6:c8:f7:09:f1:81:3b:28:79:aa:16:27:e7:07:ae:
                    6c:40:b5:fa:a1:49:ac:da:52:5b:15:3e:85:bc:c3:
                    c1:3b:01:5c:e8:4e:12:e2:e7:65:b6:e9:ec:f5:f8:
                    dd:21:fb:e3:b7:65:e8:f9:18:93:5e:d6:3b:21:42:
                    d3:b6:53:8c:38:31:a5:e6:ea:95:20:1f:8c:24:a3:
                    83:d8:d7:25:4f:b6:8b:76:da:3a:06:c6:e8:b0:4b:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:B5:80:16:FE:3F:47:E0:EB:B6:58:81:10:BE:58:4A:E0:BF:72
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:05:70:2f:9f:e1:63:7b:3c:4b:b8:1c:8d:24:07:96:80:15:
         70:cf:26:3d:e9:98:d3:79:18:6e:8f:e8:a6:6f:15:18:e4:95:
         d2:20:0f:1c:4d:41:97:5c:f5:7a:0e:5e:da:cf:e8:93:29:83:
         24:f9:82:af:cd:a7:db:05:53:cc:f1:4d:5d:eb:69:62:90:b6:
         08:1c:d2:c0:cd:c5:04:5a:ac:b9:80:38:35:6c:06:3f:42:71:
         9e:85:58:c9:bf:44:87:c2:42:34:06:b0:f2:00:b8:64:3b:2e:
         fb:74:c5:7e:dd:d4:59:d2:71:9a:cf:20:9a:94:48:cf:c9:2a:
         58:f9:5f:9b:20:32:7c:72:bd:44:55:39:a4:68:12:d2:33:da:
         d9:06:73:65:97:9f:88:40:5d:03:05:bb:1f:46:5c:bb:39:67:
         5e:ad:f4:da:18:e2:1a:94:f0:04:53:c1:70:b0:89:13:a5:90:
         d6:43:8e:c0:50:ec:08:75:49:46:8e:48:7b:d0:5c:64:a3:04:
         89:dd:ba:bf:d1:fc:d5:3c:e9:49:b7:c4:3a:42:64:5d:2c:40:
         3a:15:f2:47:36:5f:6c:66:52:c1:dc:8d:9d:29:ee:ab:18:e7:
         bf:dd:e9:e0:a1:e7:00:49:c1:91:ac:a3:f1:18:06:39:7d:88:
         aa:09:4f:bf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdO4OwWMB4Os4NhH67yvKqJOVzz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yNTAzMjgwMTI3MTBaFw0yNTAzMzEwOTM3MTBaMDMxMTAvBgNV
BAMTKDIwQUNCNTgwMTZGRTNGNDdFMEVCQjY1ODgxMTBCRTU4NEFFMEJGNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQnVydbFbFgVTcfV1zC5eEK2v
Li5X8AShaEhL5YENqFrVD6gEv7opFFighg4gugGqjgN+rZ7yhqY6tfTBfjRXIN8t
/eh1JBQ03Y8zp6mMhfd7Iy0fSaHgkrzrBsUQIGJvyegFdfj8tq2wUSEHP4RPfCcE
fhGCCVUQwAeNcx9gtqETnf8wjFjEakZLY7JapvCgIXxuMHXkViCVXYLo3wc2Kpez
yebI9wnxgTsoeaoWJ+cHrmxAtfqhSazaUlsVPoW8w8E7AVzoThLi52W26ez1+N0h
++O3Zej5GJNe1jshQtO2U4w4MaXm6pUgH4wko4PY1yVPtot22joGxuiwS5RLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIKy1gBb+P0fg67ZYgRC+WErgv3IwHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl
MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0
Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABgFcC+f4WN7PEu4HI0kB5aAFXDPJj3pmNN5
GG6P6KZvFRjkldIgDxxNQZdc9XoOXtrP6JMpgyT5gq/Np9sFU8zxTV3raWKQtggc
0sDNxQRarLmAODVsBj9CcZ6FWMm/RIfCQjQGsPIAuGQ7Lvt0xX7d1FnScZrPIJqU
SM/JKlj5X5sgMnxyvURVOaRoEtIz2tkGc2WXn4hAXQMFux9GXLs5Z16t9NoY4hqU
8ARTwXCwiROlkNZDjsBQ7Ah1SUaOSHvQXGSjBIndur/R/NU86Um3xDpCZF0sQDoV
8kc2X2xmUsHcjZ0p7qsY57/d6eCh5wBJwZGso/EYBjl9iKoJT78=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:01 2025 by rpki-client