Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          bSLu9O4eA6MkKldpLjnEcaKekTyvptqKCgN20lT498g=
Subject key identifier:   BB:D2:FC:64:1A:AE:AD:5C:FA:DE:BA:B1:7E:80:B1:93:4B:78:02:52
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       6CB38B3A34204424A141B373403218E63E759CE1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          04AF
Signing time:             Wed 29 Jan 2025 18:11:02 +0000
Manifest this update:     Wed 29 Jan 2025 18:06:02 +0000
Manifest next update:     Sat 01 Feb 2025 23:52:02 +0000
Files and hashes:         1: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=)
                          2: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=)
                          3: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk=)
                          4: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: 7qHsw3w27NVdqWTWhdv7nrW74KPBDCmwGCBiiRBioWQ=)
                          5: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=)
                          6: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=)
                          7: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: qPhFyLO5p2XLEIOO0toGgTiGmQ5k4sJq0J9ZvFILUNg=)
                          8: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=)
                          9: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: Sy6BflqYLR0sZsbRWtHtSQOlWDRu7he2nETil7/zL5w=)
                          10: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=)
                          11: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: H5UbeEY/iKVWeyVEanGtaf2L0y0JUm9EF64WOl/HBQQ=)
                          12: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=)
                          13: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=)
                          14: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=)
                          15: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: CTD8Xvgjr9YDqDwDOqgLumiXOGwu1HyyyOVZc6JRmTw=)
                          16: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: Gi64IPFMEuYmfO1bTAn9MNOcuJNLdC2U9QSs7CYvxqk=)
                          17: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: 3p/hk5MLyUzRcTjxx6VZclvMzV7vaFx0cjt9/zXwI+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b3:8b:3a:34:20:44:24:a1:41:b3:73:40:32:18:e6:3e:75:9c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jan 29 18:06:02 2025 GMT
            Not After : Feb  1 23:52:02 2025 GMT
        Subject: CN=BBD2FC641AAEAD5CFADEBAB17E80B1934B780252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:38:1e:ef:69:15:22:29:d8:e2:45:24:f4:
                    b8:b5:c4:e1:89:12:02:b9:fa:1b:f4:7b:24:40:14:
                    34:af:ff:21:6e:87:a3:27:59:bc:02:92:e0:5b:22:
                    e3:b0:a4:9b:f4:4e:5f:4d:2d:be:cf:b6:d6:e6:90:
                    00:e2:ef:4b:68:c7:5c:ae:1c:c9:b7:12:61:89:8f:
                    53:cc:6a:9b:37:4d:89:29:da:f2:98:9f:3b:70:c9:
                    6b:24:96:cf:74:fc:39:e9:ab:6f:19:f9:d0:b9:2b:
                    86:75:56:03:6e:78:2e:92:43:97:a0:a0:d0:6b:36:
                    8c:e0:38:bd:e5:be:ea:64:0f:1c:53:2b:d1:f2:b5:
                    68:61:a6:5d:40:dd:49:3a:d7:b3:88:d2:96:e9:34:
                    2a:56:d0:6c:3d:ee:26:bb:df:31:6b:71:16:52:d9:
                    e2:48:86:70:52:bc:84:5e:5d:64:5c:7b:ca:c9:42:
                    7b:c0:cf:41:b5:f6:b0:6d:6d:40:24:bd:d7:cf:90:
                    4b:b2:cd:11:53:8c:7c:da:21:dc:53:4e:4f:30:01:
                    d2:02:6f:0f:2a:71:48:45:4b:9a:30:77:44:fc:fb:
                    1f:dd:d5:5f:84:99:16:c4:54:87:43:40:95:7a:78:
                    e3:ed:30:01:f7:9d:1e:8e:b4:01:c1:62:1f:7e:7b:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D2:FC:64:1A:AE:AD:5C:FA:DE:BA:B1:7E:80:B1:93:4B:78:02:52
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:7a:bf:1a:c6:a7:a1:02:47:e0:8d:e7:43:32:00:e1:3d:06:
         53:ad:f7:b4:9f:52:09:e1:f6:50:7b:e7:b3:4d:68:c9:15:67:
         2a:93:5b:68:a2:b5:87:c0:b7:98:b4:49:87:1b:5c:e5:59:db:
         46:08:b2:99:4a:84:0e:27:cd:56:e9:56:b0:73:7c:e1:9e:76:
         1f:1b:cc:28:e1:78:9e:f0:a5:03:8d:5e:c1:ed:6e:0d:5c:59:
         2b:ae:60:48:9d:8e:43:d7:d8:a1:d3:a0:61:d8:ad:ca:ae:d6:
         a6:2b:31:c5:e1:4d:94:8c:94:a7:39:15:2f:46:83:52:0f:e5:
         cc:a7:b1:db:3b:89:e3:30:b2:f4:23:09:18:38:ae:1f:fa:71:
         3e:94:24:d0:e8:b6:17:18:ed:f9:75:d5:a1:51:52:27:8c:15:
         78:43:67:70:29:aa:c1:91:f5:87:71:1a:d2:98:f0:49:67:d2:
         3d:9a:3c:d8:86:1c:63:17:41:1c:19:28:3c:f5:ce:45:c3:5e:
         01:3e:ab:e8:b1:b4:78:1b:c9:60:c1:15:b0:ea:61:c2:d8:8f:
         95:1b:26:4f:e6:cb:09:f1:1e:8a:54:31:d8:6c:6d:69:e0:41:
         d2:22:21:e1:71:d6:8e:a3:97:62:55:39:1c:04:e1:f0:40:70:
         85:2b:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:59 2025 by rpki-client