Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File:                     BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier:          P0EP1QA7XUovKJOWee8MllqUchqk+mgAjlpLa9Du3tc=
Subject key identifier:   86:3D:8B:E6:DC:C5:62:51:D2:44:3D:D6:27:68:D5:85:3C:62:69:C8
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       763C45848115622D25DD6BD5E3691B3858EAA7DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number:          04A5
Signing time:             Thu 30 Jan 2025 15:10:46 +0000
Manifest this update:     Thu 30 Jan 2025 15:05:46 +0000
Manifest next update:     Mon 03 Feb 2025 01:18:46 +0000
Files and hashes:         1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: Nk5ck1AseyuNcjCEwHjdfNpidrWP95VM7DoxprfK5Rc=)
                          2: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: LrjOipA7XUKqMLrdnSSirCwj9idRRnzkNFyMQLbNrPk=)
                          3: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: 2eHMbsun56NqfmKlpFAG+zy53c2fesECLK8xZvpMLw8=)
                          4: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: dpevOQgZHyqXgxGUdknje4d41saVMMPwRYp6Ku70tRI=)
                          5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: WEOUyrjdm5MHLBlul4TfoQsPYZiEC6VkTMRCL8M+beg=)
                          6: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=)
                          7: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=)
                          8: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: A23I7fqnPXhBPRczLk5QNBh0X32BPlyjicsamPzFLkk=)
                          9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: v/nBtfCY9D5aSZNWsWdccc/TtDC4JCIjqRl1Ud4KShs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3c:45:84:81:15:62:2d:25:dd:6b:d5:e3:69:1b:38:58:ea:a7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jan 30 15:05:46 2025 GMT
            Not After : Feb  3 01:18:46 2025 GMT
        Subject: CN=863D8BE6DCC56251D2443DD62768D5853C6269C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:a5:3f:23:02:5e:55:e4:a9:42:50:b1:93:
                    26:f3:8e:e4:59:7a:a4:07:bc:22:4a:0e:7a:57:cb:
                    a5:59:cb:52:e6:1b:92:6c:d5:a2:ae:25:82:f7:ec:
                    8f:f1:af:0e:01:f1:a3:cf:b5:6e:22:6d:a8:f7:22:
                    0e:43:d8:ac:27:75:1b:61:20:0a:d6:00:9c:50:2c:
                    4c:c3:c0:c9:95:32:69:7f:ee:24:f9:9d:44:f2:6f:
                    e5:46:64:d7:b1:27:6a:1f:97:17:13:71:45:38:d5:
                    e7:7d:b4:02:9a:d6:39:4e:55:50:ef:73:7e:49:96:
                    d8:5d:cb:14:ac:b9:9c:61:3a:33:e6:bb:83:43:69:
                    82:eb:15:47:d0:9b:2d:a5:5a:3d:7b:a7:a3:ea:d7:
                    83:85:46:da:da:36:88:29:2c:64:01:1e:be:85:dc:
                    97:9e:0c:cc:d3:dc:1d:68:db:7c:24:29:9c:c2:dd:
                    b3:e5:45:b7:d8:5f:59:20:7e:9e:87:74:5b:a7:c8:
                    a0:39:bd:32:e5:f7:81:06:83:b0:d7:9a:5b:54:ad:
                    d1:4a:b0:ed:fa:bd:b0:4d:3c:f8:12:84:70:0d:4d:
                    31:2f:ca:9d:6b:42:e9:f5:45:74:18:a2:14:b0:82:
                    a1:1b:a2:53:bc:7d:5e:98:d0:f7:1d:35:fa:55:cb:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3D:8B:E6:DC:C5:62:51:D2:44:3D:D6:27:68:D5:85:3C:62:69:C8
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:14:62:74:d1:14:1b:04:2d:e4:27:0a:7a:2b:a7:83:5c:ba:
         9a:b0:74:8b:c7:e2:6c:9b:67:c9:07:83:b8:05:45:ba:57:53:
         bf:06:a9:1f:1b:52:57:ab:b7:7f:7e:c9:07:b9:6e:f8:ac:78:
         28:55:57:6d:c1:10:5d:45:e4:4d:9f:e2:b1:14:02:58:13:1e:
         5a:97:2f:ec:22:5b:59:c3:f9:f4:58:f0:fc:74:79:83:a0:6d:
         a9:94:ea:4d:89:33:b3:fa:de:76:40:21:34:fc:0e:c4:11:ae:
         cb:33:f6:9a:2d:9e:a1:95:3f:48:b6:aa:14:3c:78:0f:e4:99:
         f0:08:e5:a3:70:e5:1c:c1:c5:93:aa:61:02:2d:03:47:c1:33:
         64:f3:12:88:6a:09:f8:e9:f1:3b:4c:cf:e0:0f:1e:79:47:50:
         79:ae:3a:9d:f7:1f:47:05:20:ec:bc:06:74:a8:19:d7:74:c6:
         e1:f1:27:53:8d:62:77:4f:ea:ae:1a:f5:43:34:70:8c:97:3a:
         62:a3:d6:97:25:59:6e:92:c3:e9:f7:3e:49:f2:b8:b0:86:6d:
         ee:b7:e3:9c:59:0b:72:52:ac:a1:47:a1:cd:23:63:36:a1:58:
         32:5f:e5:91:5d:d7:0b:dd:25:74:0b:7e:79:c4:47:0a:35:60:
         30:29:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:24 2025 by rpki-client