Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft
File:                     0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json)
Hash identifier:          nVp4F7us84FNcSx76kQTZw/mvZ4GK9VRXmlP87bCqTo=
Subject key identifier:   57:9B:7B:47:12:A0:AD:B4:B4:FD:AC:23:FA:70:34:C9:1F:DF:9E:07
Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF
Certificate issuer:       /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
Certificate serial:       5CC8C56B4E2D8D28C4C01DC55B874605A4323375
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft
Manifest number:          0205
Signing time:             Fri 31 Jan 2025 00:11:52 +0000
Manifest this update:     Fri 31 Jan 2025 00:06:52 +0000
Manifest next update:     Mon 03 Feb 2025 02:03:52 +0000
Files and hashes:         1: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: t19S9PQfVzWHZc7PL9Ucb7apMMw/h9xU9QuPzuFz/Mk=)
                          2: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: RTEuTJ18sBkFUsCJDNg+D+ytla+ZWfIpIcBU4isSAAY=)
                          3: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: mAFJTZEnZNfr7PARi8AMi8BJVScVXavpsJWltGWztr8=)
                          4: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: R3N3/32j1HA8MrNIZSao7bewuBwwVHmgTfIW6Qbgz1c=)
                          5: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: 2PxEI59kNreJnYBeFqozYQ5subadmwmaBV8ky/IxUfI=)
                          6: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: 1qZsE00rwmGlzOMKTEF7EolFAH+CLupX31RHggUVtOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:c5:6b:4e:2d:8d:28:c4:c0:1d:c5:5b:87:46:05:a4:32:33:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
        Validity
            Not Before: Jan 31 00:06:52 2025 GMT
            Not After : Feb  3 02:03:52 2025 GMT
        Subject: CN=579B7B4712A0ADB4B4FDAC23FA7034C91FDF9E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:88:57:59:de:47:e5:a7:23:68:b9:d9:64:
                    71:92:a3:f2:0e:1e:37:31:19:e0:9b:94:c8:ec:8e:
                    05:f3:c5:c8:c2:0e:8e:fd:15:63:c3:5f:b2:46:ca:
                    4b:21:e1:31:85:9b:48:45:64:fe:03:16:01:ce:6e:
                    04:13:ed:53:0d:e1:6c:86:a4:a5:33:d5:04:8b:83:
                    16:06:11:33:e5:ac:fe:76:fc:a5:51:49:45:bc:dc:
                    5b:c1:32:42:03:45:f5:08:9a:66:59:d1:1f:6c:01:
                    f3:bf:e4:15:2e:72:3b:8e:59:f4:c7:78:c3:59:c5:
                    44:fe:ab:cf:02:e0:d7:52:63:8d:3c:ac:f3:3b:d0:
                    0c:57:88:81:5a:62:f7:29:2f:03:38:ae:9d:98:5c:
                    0d:7a:7f:d8:89:33:18:e1:0b:a7:cb:0e:ed:33:09:
                    17:94:2d:6c:77:04:5b:55:42:62:4b:9c:37:8e:e8:
                    15:85:29:50:3b:47:d9:49:55:2e:eb:c0:75:7c:b5:
                    32:45:5c:75:a2:40:92:34:39:65:38:30:90:dd:11:
                    d2:29:c7:39:f2:1f:27:2f:24:57:01:ae:2c:a7:3f:
                    0e:87:d5:df:29:4a:ec:60:d9:ba:ad:e9:e8:dc:27:
                    49:b1:ea:20:f3:d2:c7:de:2a:34:3d:91:ab:79:3c:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:7B:47:12:A0:AD:B4:B4:FD:AC:23:FA:70:34:C9:1F:DF:9E:07
            X509v3 Authority Key Identifier:
                keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:5c:60:2c:b3:25:c3:0f:09:e6:fa:9b:cf:49:4c:f3:41:
         8d:24:5b:58:18:7d:fe:04:fa:25:48:b6:cd:dc:47:d1:87:99:
         d0:bb:08:be:be:67:0b:92:96:a1:e3:c8:be:73:a9:61:29:02:
         1d:9a:85:35:6a:e1:bf:f6:26:27:af:e7:6a:d0:aa:e7:c2:a6:
         7d:22:3e:a5:f6:5e:8d:22:4f:17:84:44:29:30:f3:54:eb:35:
         5f:66:f6:18:00:69:3d:f9:1b:0a:1c:56:32:e9:8f:84:2f:73:
         08:fe:14:09:8b:fb:ce:0c:22:20:f5:ad:7f:bc:be:ea:61:1e:
         93:bf:62:37:c9:e0:4f:42:4a:38:d7:f3:d3:2f:a7:42:b3:a7:
         48:89:44:3d:59:c1:13:29:dd:e5:bc:2c:9b:f6:c8:26:5c:bc:
         31:31:dd:97:d3:8f:f8:a0:b9:7f:a3:81:54:7e:a1:e8:02:66:
         f0:db:9b:9e:ce:86:03:25:34:38:0d:d3:15:e9:7d:b8:e1:bb:
         55:5c:41:67:40:71:fd:e4:1e:61:33:92:00:f2:d7:f0:eb:3d:
         0d:25:cf:6c:70:3f:87:48:08:d0:a8:27:2a:78:74:0c:49:cf:
         fa:be:ab:0c:97:0e:ef:23:a1:43:b1:35:bb:9a:de:8b:ec:71:
         a8:b4:ad:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXMjFa04tjSjEwB3FW4dGBaQyM3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB
NDAxRUNDRjAeFw0yNTAxMzEwMDA2NTJaFw0yNTAyMDMwMjAzNTJaMDMxMTAvBgNV
BAMTKDU3OUI3QjQ3MTJBMEFEQjRCNEZEQUMyM0ZBNzAzNEM5MUZERjlFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdYhXWd5H5acjaLnZZHGSo/IO
HjcxGeCblMjsjgXzxcjCDo79FWPDX7JGyksh4TGFm0hFZP4DFgHObgQT7VMN4WyG
pKUz1QSLgxYGETPlrP52/KVRSUW83FvBMkIDRfUImmZZ0R9sAfO/5BUucjuOWfTH
eMNZxUT+q88C4NdSY408rPM70AxXiIFaYvcpLwM4rp2YXA16f9iJMxjhC6fLDu0z
CReULWx3BFtVQmJLnDeO6BWFKVA7R9lJVS7rwHV8tTJFXHWiQJI0OWU4MJDdEdIp
xznyHycvJFcBriynPw6H1d8pSuxg2bqt6ejcJ0mx6iDz0sfeKjQ9kat5PB8BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUV5t7RxKgrbS0/awj+nA0yR/fngcwHwYDVR0j
BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2
NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx
RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky
NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF
NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABItXGAssyXDDwnm+pvPSUzzQY0kW1gYff4E
+iVIts3cR9GHmdC7CL6+ZwuSlqHjyL5zqWEpAh2ahTVq4b/2Jiev52rQqufCpn0i
PqX2Xo0iTxeERCkw81TrNV9m9hgAaT35GwocVjLpj4Qvcwj+FAmL+84MIiD1rX+8
vuphHpO/YjfJ4E9CSjjX89Mvp0Kzp0iJRD1ZwRMp3eW8LJv2yCZcvDEx3ZfTj/ig
uX+jgVR+oegCZvDbm57OhgMlNDgN0xXpfbjhu1VcQWdAcf3kHmEzkgDy1/DrPQ0l
z2xwP4dICNCoJyp4dAxJz/q+qwyXDu8joUOxNbua3ovscai0rco=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:45 2025 by rpki-client