Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft
File:                     BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json)
Hash identifier:          6xKvfiK9SXouh9548+XxjdGo6EzJVYb2PdLmh6m1Uk4=
Subject key identifier:   1F:CD:F1:96:03:14:4B:D7:A5:AE:05:46:1B:9E:F6:5A:BC:3A:BA:98
Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07
Certificate issuer:       /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307
Certificate serial:       212CE7E95272E044CCED8DB6A27A046859004566
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft
Manifest number:          01A4
Signing time:             Wed 29 Jan 2025 23:01:21 +0000
Manifest this update:     Wed 29 Jan 2025 22:56:21 +0000
Manifest next update:     Sat 01 Feb 2025 23:09:21 +0000
Files and hashes:         1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: NUPlEw08Zx7YoeB4OqO+Ox+lwPcpmhcKsBziz0RYTAM=)
                          2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: 569MHEdrShtjTGQfyfUsUMlm1dSYNUFa6oBs4Fc7744=)
                          3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 5QmpoA9m0mmWsLSv00ogy7OAuITKadv3G3HLB3Oky3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:e7:e9:52:72:e0:44:cc:ed:8d:b6:a2:7a:04:68:59:00:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307
        Validity
            Not Before: Jan 29 22:56:21 2025 GMT
            Not After : Feb  1 23:09:21 2025 GMT
        Subject: CN=1FCDF19603144BD7A5AE05461B9EF65ABC3ABA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:e0:dd:71:40:c5:32:74:3e:31:64:7b:e5:
                    ed:0b:8a:0e:1d:10:11:f5:ad:4a:f8:ee:c5:6c:46:
                    6e:22:f7:89:db:d5:26:2e:f4:a8:91:28:ec:61:4b:
                    16:02:71:b0:a7:7a:15:fb:a9:12:50:47:af:94:fc:
                    a3:b8:16:28:94:11:1a:10:0e:60:b7:12:bb:d2:79:
                    b5:6c:27:ee:96:48:91:b6:d7:a6:ab:61:72:60:8a:
                    b8:c9:1f:8a:e0:a7:7f:4f:1a:6a:9b:53:63:41:c5:
                    79:09:2d:f4:6a:9f:b8:5c:b5:d5:59:37:7d:3a:f1:
                    73:71:db:04:17:77:2e:2c:6d:d9:76:54:01:22:d0:
                    82:d3:0d:0a:27:7a:9f:c7:05:5a:72:01:12:ab:58:
                    de:ac:de:5a:50:d3:b9:55:c6:cc:a1:86:69:aa:a3:
                    8f:05:34:c4:50:36:5f:74:d9:48:74:9b:83:88:8f:
                    63:22:fc:d6:d8:f6:c4:70:eb:2c:8b:f6:0d:78:2f:
                    2c:14:3c:04:a0:bd:75:38:ac:85:b9:04:4d:ad:a3:
                    5a:67:a9:c5:f8:85:40:fc:77:93:5f:7f:71:08:07:
                    9b:a5:04:ff:b1:21:da:7f:11:a7:8c:08:01:c9:e3:
                    11:f7:50:85:8e:91:f9:44:c7:cb:db:28:f5:8b:7f:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:F1:96:03:14:4B:D7:A5:AE:05:46:1B:9E:F6:5A:BC:3A:BA:98
            X509v3 Authority Key Identifier:
                keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:86:8a:b0:e1:d3:f0:f2:2a:a2:8f:2e:3d:c7:74:9a:36:
         d1:48:68:68:ce:25:6e:62:c0:e7:5b:c2:2a:e4:d6:16:91:f3:
         aa:05:d9:3d:5b:21:a2:93:5d:b1:51:ed:03:29:2b:ed:5c:5e:
         b0:25:c3:b1:47:c2:6e:f2:9e:dd:76:fb:b3:25:5d:83:a0:e3:
         1d:f1:3b:c1:a1:15:16:65:10:81:bc:cd:31:7b:50:9c:59:5c:
         f7:b8:df:28:c3:ae:cc:63:d5:40:d5:e0:e5:bd:07:c2:34:0b:
         a1:15:69:b2:7b:a7:b0:37:56:74:7b:e4:3d:2d:8f:d6:8b:26:
         85:36:54:5b:c0:5c:74:13:a8:b7:ec:da:dc:59:0f:85:eb:84:
         95:f3:1e:a4:70:6e:15:d3:d1:19:ec:ef:f9:cc:51:e4:30:4d:
         36:63:45:9a:64:4f:4b:34:b8:ba:91:a0:1d:f2:d1:40:c8:3d:
         c1:d5:3a:5a:86:1e:aa:07:49:62:ea:0a:94:f6:fa:e8:fa:c0:
         55:73:c1:2f:f3:9f:74:15:2f:3e:b2:81:f6:d3:0e:fe:52:0e:
         e2:87:38:f4:08:33:1c:c6:61:2e:4b:d8:20:98:05:d1:f0:86:
         bc:8e:d6:d8:51:7c:db:85:08:63:65:d9:5c:9f:b7:51:19:38:
         32:d3:fd:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUISzn6VJy4ETM7Y22onoEaFkARWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF
RTczRjMwNzAeFw0yNTAxMjkyMjU2MjFaFw0yNTAyMDEyMzA5MjFaMDMxMTAvBgNV
BAMTKDFGQ0RGMTk2MDMxNDRCRDdBNUFFMDU0NjFCOUVGNjVBQkMzQUJBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2eDdcUDFMnQ+MWR75e0Lig4d
EBH1rUr47sVsRm4i94nb1SYu9KiRKOxhSxYCcbCnehX7qRJQR6+U/KO4FiiUERoQ
DmC3ErvSebVsJ+6WSJG216arYXJgirjJH4rgp39PGmqbU2NBxXkJLfRqn7hctdVZ
N3068XNx2wQXdy4sbdl2VAEi0ILTDQonep/HBVpyARKrWN6s3lpQ07lVxsyhhmmq
o48FNMRQNl902Uh0m4OIj2Mi/NbY9sRw6yyL9g14LywUPASgvXU4rIW5BE2to1pn
qcX4hUD8d5Nff3EIB5ulBP+xIdp/EaeMCAHJ4xH3UIWOkflEx8vbKPWLf1kfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUH83xlgMUS9elrgVGG572Wrw6upgwHwYDVR0j
BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB
MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz
RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi
YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG
MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA2Jhoqw4dPw8iqijy49x3SaNtFIaGjOJW5i
wOdbwirk1haR86oF2T1bIaKTXbFR7QMpK+1cXrAlw7FHwm7ynt12+7MlXYOg4x3x
O8GhFRZlEIG8zTF7UJxZXPe43yjDrsxj1UDV4OW9B8I0C6EVabJ7p7A3VnR75D0t
j9aLJoU2VFvAXHQTqLfs2txZD4XrhJXzHqRwbhXT0Rns7/nMUeQwTTZjRZpkT0s0
uLqRoB3y0UDIPcHVOlqGHqoHSWLqCpT2+uj6wFVzwS/zn3QVLz6ygfbTDv5SDuKH
OPQIMxzGYS5L2CCYBdHwhryO1thRfNuFCGNl2Vyft1EZODLT/Y4=
-----END CERTIFICATE-----