Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft
File:                     B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json)
Hash identifier:          b9s2b6jzzIcdO9FK/bfW0xpvxXBRffPAxNqjBadohLI=
Subject key identifier:   F4:A5:71:DC:67:2E:CA:33:49:0E:25:A5:E5:F9:9D:37:00:E7:51:4B
Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0
Certificate issuer:       /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0
Certificate serial:       613D579E5060E6F78CD5A974ABEBF3261B2545A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft
Manifest number:          0140
Signing time:             Thu 30 Jan 2025 09:31:25 +0000
Manifest this update:     Thu 30 Jan 2025 09:26:25 +0000
Manifest next update:     Sun 02 Feb 2025 20:43:25 +0000
Files and hashes:         1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=)
                          2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: zG+XhWcOXp0uVW3k143QylEGRhESk5cm3adPFP8ta70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3d:57:9e:50:60:e6:f7:8c:d5:a9:74:ab:eb:f3:26:1b:25:45:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0
        Validity
            Not Before: Jan 30 09:26:25 2025 GMT
            Not After : Feb  2 20:43:25 2025 GMT
        Subject: CN=F4A571DC672ECA33490E25A5E5F99D3700E7514B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:42:89:ad:0b:87:41:c1:28:51:3b:19:ce:
                    f3:39:8e:12:3c:b2:34:23:51:37:c9:44:c3:5f:ff:
                    5f:16:62:58:f6:31:f8:d8:65:2f:82:84:41:6f:4a:
                    72:ed:1f:51:14:5d:db:9e:72:f0:5e:76:93:dc:93:
                    0d:b7:61:4d:e9:66:29:d2:6d:e4:96:c3:9b:28:b4:
                    cd:4c:98:bc:75:04:51:aa:44:fa:e9:29:d7:a6:49:
                    b4:c1:db:a8:ee:87:0b:fe:eb:de:48:56:d1:c1:2d:
                    d8:82:b7:f9:b0:7f:04:19:fc:52:19:51:5e:9b:ed:
                    cc:c6:95:b4:ad:39:7c:70:12:6a:b3:2f:0e:fe:11:
                    d5:34:9a:85:68:0e:8e:a2:0b:bf:46:71:b6:fd:47:
                    5e:f6:08:67:58:06:cd:1b:69:50:c4:4a:1b:a8:65:
                    25:c5:1d:7b:54:3b:65:a7:8e:60:36:d1:7d:20:08:
                    e6:5a:96:bb:9c:b8:32:98:b1:37:97:8e:9d:09:c2:
                    28:ac:da:ad:4f:6c:8c:ae:db:67:0b:8c:62:84:32:
                    a3:26:70:4d:23:4b:0a:cb:11:00:72:4d:11:9c:6e:
                    5f:5b:31:b2:64:50:62:37:bd:4c:c4:63:eb:c7:22:
                    94:c4:58:33:d0:9e:9d:97:d8:2f:de:f0:5e:1e:3c:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:71:DC:67:2E:CA:33:49:0E:25:A5:E5:F9:9D:37:00:E7:51:4B
            X509v3 Authority Key Identifier:
                keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:51:cd:7e:5c:c5:69:64:2b:c1:5a:a7:18:f0:86:31:27:
         94:23:64:f3:0a:8c:4d:86:9e:2d:34:5b:1b:9b:d4:9a:62:51:
         a7:4c:28:cd:46:05:ec:98:c4:55:60:7a:1f:a9:87:dc:4f:7f:
         db:6e:c1:7c:c6:53:e4:37:80:fc:78:d8:77:c2:46:1c:96:19:
         36:ca:73:ae:2e:fe:4b:c1:c3:49:82:b8:c5:84:c4:fb:55:1b:
         f8:cf:b9:0f:96:b3:66:c7:de:c7:00:a4:54:1d:9a:b4:c7:a6:
         27:ac:62:9a:7a:c2:66:25:dd:e4:69:15:93:dc:04:3d:c0:c5:
         d6:9a:3e:44:3a:a4:ed:9c:e5:28:a3:2a:68:0c:ae:ca:e4:38:
         90:bb:3a:5d:51:f9:ce:61:13:d2:ae:0c:aa:50:e3:43:b8:7f:
         49:40:70:93:90:83:f7:1e:6f:62:56:dc:2f:73:0d:54:d1:ce:
         5b:33:b6:40:bb:a5:de:79:6c:8b:a5:76:75:d4:56:81:65:fb:
         05:19:43:f8:4d:c8:60:91:1d:2f:1b:2b:5b:62:ea:1e:8b:3d:
         50:02:67:73:b0:0d:72:5b:41:5d:bb:b5:b5:7c:85:94:72:56:
         7c:f5:5c:8c:c6:87:bc:ed:7f:12:ed:93:88:7f:97:41:20:5b:
         6e:46:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----