Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
File:                     F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json)
Hash identifier:          NxOgcyF7Rt/DO/qmPIbpdLLYFZeFZO0I2OoQ+wyotWU=
Subject key identifier:   14:01:0A:54:53:B4:CE:B4:2F:F1:31:44:8D:08:A0:DB:6C:5F:6B:95
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Certificate issuer:       /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial:       536696C2D866F5042C4BA68F0DB4DD88F548CB60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
Manifest number:          034C
Signing time:             Fri 28 Mar 2025 08:22:00 +0000
Manifest this update:     Fri 28 Mar 2025 08:17:00 +0000
Manifest next update:     Mon 31 Mar 2025 12:23:00 +0000
Files and hashes:         1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=)
                          2: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: /Fby1Yu5EXPDyDKW9FDYMN2ICQEKhDNRNGWfXLVdm0E=)
                          3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:66:96:c2:d8:66:f5:04:2c:4b:a6:8f:0d:b4:dd:88:f5:48:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
        Validity
            Not Before: Mar 28 08:17:00 2025 GMT
            Not After : Mar 31 12:23:00 2025 GMT
        Subject: CN=14010A5453B4CEB42FF131448D08A0DB6C5F6B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:6d:16:b0:09:0e:ae:bc:5e:2b:31:1a:56:
                    22:a7:e4:89:8e:7e:ef:ec:02:43:d6:83:0b:fd:31:
                    8d:f6:2a:52:0b:ce:22:7f:55:e2:42:b2:4a:10:2a:
                    2a:1b:7e:dd:02:c1:32:c7:0e:c9:50:40:6c:16:98:
                    ca:90:fd:92:db:cc:60:96:51:5f:03:de:7e:be:29:
                    7b:dc:48:24:87:66:c9:e2:13:0f:36:f2:99:47:74:
                    7f:3a:76:cc:f8:30:52:11:4a:b4:3a:93:0b:4a:45:
                    0e:8b:18:af:b6:68:d2:65:60:ed:3b:90:dc:a4:67:
                    fe:4a:8b:36:2c:28:03:fd:e0:4b:98:a2:c4:3b:6a:
                    c9:21:44:01:73:64:09:ab:c1:92:aa:6d:2b:d6:5b:
                    34:f2:67:ba:af:33:13:76:8d:81:af:1a:ba:3d:9a:
                    e8:d2:d5:28:23:66:d2:ff:1c:0e:dc:a7:91:00:a4:
                    9a:5f:7e:c9:8e:8b:11:a2:46:83:be:a2:e4:b9:a5:
                    9d:5f:4d:ba:0f:56:fa:3e:c1:22:0f:65:fc:21:5f:
                    64:54:ad:2e:49:28:d7:08:c7:e1:be:d7:53:8e:0e:
                    a0:8b:ae:3b:54:85:b6:eb:1e:87:04:6f:8c:87:9c:
                    b7:af:7f:05:7e:1d:6b:0a:54:ad:fa:d3:2a:55:cc:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:0A:54:53:B4:CE:B4:2F:F1:31:44:8D:08:A0:DB:6C:5F:6B:95
            X509v3 Authority Key Identifier:
                keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:be:1e:09:22:5b:cd:ee:e8:64:ea:66:f1:c4:cc:71:8d:c8:
         f5:73:66:1b:9c:bc:8e:cf:bc:04:fe:4d:1b:44:77:42:30:14:
         a0:b9:fe:61:29:34:1a:01:35:e7:2e:8a:f9:39:35:40:54:a1:
         78:7d:6a:cb:94:e3:72:12:80:0b:de:76:3b:4c:3d:7f:ff:85:
         47:32:b7:bd:14:4a:54:39:93:6f:e6:cc:c2:db:01:4e:cb:39:
         71:78:d1:8d:4b:ba:ff:a2:c7:05:f6:12:b5:cf:1d:54:b3:b2:
         85:89:32:e4:61:12:d4:72:7f:e3:0b:4d:8c:9b:24:44:31:9e:
         40:08:ec:c7:21:24:c0:b1:e0:5e:aa:2b:17:66:c9:b1:35:19:
         6c:43:6c:0e:6b:45:99:55:31:58:6e:6e:25:aa:06:3e:34:6d:
         be:b1:67:41:30:7d:64:80:d1:c5:67:4e:29:ae:21:fd:67:fb:
         7e:f5:cf:66:7c:2c:cd:25:ec:ab:fa:4a:d7:84:0d:68:48:f5:
         f2:23:c7:f3:2a:8b:48:2d:4e:19:60:5d:60:03:55:6e:0b:35:
         17:c3:90:26:c9:17:8b:4e:ea:1c:a6:33:ec:b8:00:3e:ce:3b:
         44:ba:b5:77:22:08:5e:8f:2d:cc:e0:df:30:b7:55:29:43:1c:
         cf:ae:23:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU2aWwthm9QQsS6aPDbTdiPVIy2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE
QTYzNkU3MDAeFw0yNTAzMjgwODE3MDBaFw0yNTAzMzExMjIzMDBaMDMxMTAvBgNV
BAMTKDE0MDEwQTU0NTNCNENFQjQyRkYxMzE0NDhEMDhBMERCNkM1RjZCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfW0WsAkOrrxeKzEaViKn5ImO
fu/sAkPWgwv9MY32KlILziJ/VeJCskoQKiobft0CwTLHDslQQGwWmMqQ/ZLbzGCW
UV8D3n6+KXvcSCSHZsniEw828plHdH86dsz4MFIRSrQ6kwtKRQ6LGK+2aNJlYO07
kNykZ/5KizYsKAP94EuYosQ7askhRAFzZAmrwZKqbSvWWzTyZ7qvMxN2jYGvGro9
mujS1SgjZtL/HA7cp5EApJpffsmOixGiRoO+ouS5pZ1fTboPVvo+wSIPZfwhX2RU
rS5JKNcIx+G+11OODqCLrjtUhbbrHocEb4yHnLevfwV+HWsKVK360ypVzAmXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFAEKVFO0zrQv8TFEjQig22xfa5UwHwYDVR0j
BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5
NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz
NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw
OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC
NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEa+HgkiW83u6GTqZvHEzHGNyPVzZhucvI7P
vAT+TRtEd0IwFKC5/mEpNBoBNecuivk5NUBUoXh9asuU43ISgAvedjtMPX//hUcy
t70USlQ5k2/mzMLbAU7LOXF40Y1Luv+ixwX2ErXPHVSzsoWJMuRhEtRyf+MLTYyb
JEQxnkAI7MchJMCx4F6qKxdmybE1GWxDbA5rRZlVMVhubiWqBj40bb6xZ0EwfWSA
0cVnTimuIf1n+371z2Z8LM0l7Kv6SteEDWhI9fIjx/Mqi0gtThlgXWADVW4LNRfD
kCbJF4tO6hymM+y4AD7OO0S6tXciCF6PLczg3zC3VSlDHM+uI7s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:00:08 2025 by rpki-client