Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
File:                     1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json)
Hash identifier:          /iqTMr6v3Ry45CbhrPXFMsx94DNygFUiiCz/KQp/qUU=
Subject key identifier:   B3:10:71:A4:CD:72:A2:B9:D1:2D:89:37:63:5B:73:27:2D:5E:7F:61
Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
Certificate issuer:       /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
Certificate serial:       1559CE049428294190F429D844594ED771FEEBE8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
Manifest number:          024F
Signing time:             Thu 30 Jan 2025 16:42:18 +0000
Manifest this update:     Thu 30 Jan 2025 16:37:18 +0000
Manifest next update:     Sun 02 Feb 2025 18:00:18 +0000
Files and hashes:         1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: a+nFfMQJN7Gj+Q8rXEpxSUc5c1GiBeiHz2uLxltEamI=)
                          2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:59:ce:04:94:28:29:41:90:f4:29:d8:44:59:4e:d7:71:fe:eb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
        Validity
            Not Before: Jan 30 16:37:18 2025 GMT
            Not After : Feb  2 18:00:18 2025 GMT
        Subject: CN=B31071A4CD72A2B9D12D8937635B73272D5E7F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:65:35:46:9c:bf:3c:67:33:f1:46:0c:3c:
                    54:4d:11:10:f7:49:3e:c3:e1:15:4e:d3:02:ee:2d:
                    6a:5c:3e:fa:64:94:74:04:8b:85:02:4a:85:6e:ea:
                    4d:68:51:b1:b2:fb:18:fa:c0:61:40:a1:18:d2:6e:
                    e7:9a:37:e0:e6:f5:7e:d9:82:0d:68:64:06:60:d9:
                    fd:3a:08:44:b7:67:11:16:36:90:5a:07:9c:73:4e:
                    2d:5c:eb:f8:bb:22:cc:04:3b:ad:c0:ff:15:63:65:
                    67:14:08:e5:d0:ee:60:9f:ed:cf:eb:40:4e:4c:2f:
                    20:7a:77:dc:58:22:43:54:73:dd:b8:41:17:60:a3:
                    86:7e:57:1b:ad:93:4f:94:0b:df:af:46:31:50:5b:
                    7c:aa:89:75:7f:12:54:67:d9:1c:e6:80:fd:50:fa:
                    2a:45:12:6d:3e:6f:30:36:41:ac:bc:bc:9d:77:93:
                    a8:7a:e8:41:01:10:ea:b7:d4:aa:99:d2:49:a7:a8:
                    ea:ef:9b:07:e4:f2:0a:0a:dc:0a:25:36:39:b5:9c:
                    0c:20:cc:1c:61:a3:c3:81:67:55:b3:f4:17:46:f7:
                    3a:ac:bd:72:d0:ec:30:d6:5b:37:d4:43:c4:f1:1d:
                    72:90:dd:0b:ba:0a:7a:ad:62:01:90:0d:40:45:82:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:71:A4:CD:72:A2:B9:D1:2D:89:37:63:5B:73:27:2D:5E:7F:61
            X509v3 Authority Key Identifier:
                keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:90:86:1c:cb:de:10:46:d7:de:3f:9a:39:35:f9:a1:c5:e3:
         98:37:02:e7:54:5a:d0:9f:99:e1:c2:05:62:13:51:44:aa:26:
         be:2b:56:55:f0:3d:47:e7:7c:e1:d2:30:8c:99:f6:ef:83:79:
         8a:c5:d0:93:10:58:63:e6:9e:85:9a:3b:f5:97:52:8b:7b:70:
         94:8f:27:db:ef:f7:fd:c9:af:f4:62:00:d0:f7:be:54:b5:fe:
         01:69:57:d1:da:f9:6a:9d:d8:b5:43:37:a8:82:91:23:d6:9c:
         3f:f3:99:be:a1:14:b2:ca:82:a5:c3:83:7d:70:c0:fc:61:cb:
         8f:b9:18:29:7c:c4:14:78:ca:9b:19:50:d1:ab:e0:a3:5a:74:
         d0:d9:3b:e7:65:1b:1e:98:b4:04:36:8d:fd:17:a4:7b:2f:2e:
         69:52:cc:de:9b:74:db:f2:00:56:4e:70:6c:31:7b:29:27:47:
         e3:43:4a:4f:9a:cc:0a:8f:e7:e7:c5:2a:88:86:27:96:cc:d5:
         3e:d6:84:01:c6:ab:b8:16:26:17:95:d0:01:7f:cf:0e:4d:a3:
         11:b6:6e:55:d7:e0:36:3a:a7:f7:c6:38:98:08:88:dd:f8:fd:
         f9:cf:57:bf:a5:0c:96:b1:a8:bf:1d:4a:2e:2b:3d:0b:07:4a:
         86:fb:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----