Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft
File:                     253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json)
Hash identifier:          VYRtZxXL3Ddadyb5FLkAjY3XwLbsyiVPZAAMEI731IY=
Subject key identifier:   BB:8D:C4:5C:56:1D:20:87:88:18:5B:EF:A4:14:E1:F5:84:E9:94:04
Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01
Certificate issuer:       /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
Certificate serial:       4316291705B20B2AE3E7770DB183DA6CB87BBAF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft
Manifest number:          04A5
Signing time:             Thu 30 Jan 2025 00:21:28 +0000
Manifest this update:     Thu 30 Jan 2025 00:16:28 +0000
Manifest next update:     Sun 02 Feb 2025 03:11:28 +0000
Files and hashes:         1: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: aWbYXoX9asbKX8LtSjMx/jUwcU2UCkmj/h5lE8zqnhk=)
                          2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: Qw+QQXeY4ygHVGUJMQ05GH+K/HnAhSZIrw89V5Vsm4Q=)
                          3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: 1Wq5k3BEBWqr/5/ZH0Bc0U17cE1ljqlPsnVeoNvBUfs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:29:17:05:b2:0b:2a:e3:e7:77:0d:b1:83:da:6c:b8:7b:ba:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
        Validity
            Not Before: Jan 30 00:16:28 2025 GMT
            Not After : Feb  2 03:11:28 2025 GMT
        Subject: CN=BB8DC45C561D208788185BEFA414E1F584E99404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:7a:a1:dd:bb:8c:71:15:47:2a:be:4d:45:
                    0d:58:09:0d:b9:4d:74:38:27:48:d4:19:6d:9d:1c:
                    2e:26:0a:0c:7e:db:26:de:69:ed:77:84:06:9f:52:
                    8f:04:dd:e9:62:2b:5a:ee:22:8f:ec:fa:ca:d8:d4:
                    f3:c2:d6:bb:89:5d:e3:14:02:bf:9e:e8:64:f1:c6:
                    b2:34:e6:85:7b:dc:98:f5:4a:65:d0:38:e6:21:81:
                    17:ff:76:c9:39:f0:c4:a0:fc:8f:02:64:a8:62:f6:
                    ff:49:67:56:ce:96:05:86:13:a4:63:76:87:62:07:
                    db:b4:5b:6b:bd:c2:4a:aa:49:cb:c9:20:e0:a2:7e:
                    4a:85:f5:9d:e0:a4:28:c9:0d:d5:e1:58:3f:78:3f:
                    29:07:c2:60:d7:39:c9:a6:ef:ba:d6:fa:4b:83:c8:
                    ac:98:af:af:bc:49:c0:01:08:0f:32:e1:f9:68:52:
                    66:3a:14:11:87:1f:be:aa:e3:49:74:dd:36:b6:72:
                    4c:39:79:70:e8:dd:78:24:ff:22:63:5a:e8:49:24:
                    f9:83:01:f6:45:c2:00:fb:bf:f3:a5:38:35:7b:f5:
                    ea:09:b4:43:69:22:23:45:e0:5d:8c:89:6f:52:fd:
                    ca:3e:78:e5:64:2f:36:89:86:7a:8f:ba:31:ca:93:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8D:C4:5C:56:1D:20:87:88:18:5B:EF:A4:14:E1:F5:84:E9:94:04
            X509v3 Authority Key Identifier:
                keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:18:56:3b:72:e0:49:81:f9:89:fe:c5:ad:b0:d6:2e:e5:e8:
         d9:d1:a6:af:77:20:69:03:49:a3:ac:0a:34:09:30:a5:d6:80:
         01:f1:74:44:8e:4c:d5:ac:13:f8:5b:c3:63:96:82:f2:02:78:
         c3:ed:72:f5:47:00:05:6c:9f:e0:f4:82:14:5b:52:80:af:3a:
         60:15:b0:9b:b1:bb:fd:35:d0:3c:a0:52:88:57:5c:c2:2f:35:
         33:d6:bd:82:05:08:d6:7a:04:c5:c6:6b:93:bf:3f:1f:1b:b8:
         77:49:49:61:bc:9a:c3:25:1a:57:3d:77:91:d0:0e:9e:aa:3b:
         9b:b5:21:d7:d1:93:ce:3a:f7:a1:d8:00:98:ed:89:da:98:a7:
         32:c9:3b:29:61:bb:aa:01:0a:b1:dc:ab:b1:58:4f:c4:fe:b4:
         d2:de:f6:f9:34:70:6a:be:41:a0:80:a8:d5:2a:04:f9:55:36:
         b5:2d:a1:0b:53:a4:29:c7:49:d9:cd:6a:a0:00:fa:4d:77:c5:
         e4:c0:9e:53:1f:f5:9e:2e:f7:23:a3:e9:1b:e7:21:64:42:66:
         d6:ec:c2:63:9d:8a:94:d2:3d:fd:a1:3e:62:43:76:11:a7:e5:
         d6:0b:bc:fe:75:ac:4c:98:a4:77:b1:39:5a:c2:2e:84:fc:40:
         ce:c0:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----