Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft
File:                     0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft (raw, json)
Hash identifier:          SVid1+O870EchUWjmwpLM8k8PjVU2aOCaQOciilVcOA=
Subject key identifier:   A8:81:0B:03:BF:FB:57:EF:3F:83:63:DE:97:B4:33:5E:24:80:00:40
Authority key identifier: 0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3
Certificate issuer:       /CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3
Certificate serial:       6AFDF0FBFE8D89FF8E5848E8280C77E79D2767C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft
Manifest number:          54
Signing time:             Thu 30 Jan 2025 15:41:56 +0000
Manifest this update:     Thu 30 Jan 2025 15:36:56 +0000
Manifest next update:     Mon 03 Feb 2025 03:14:56 +0000
Files and hashes:         1: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: 9LNgGVv86zEnKjQNsGSTYEvVvGQkNogYzW1V+EdhwJM=)
                          2: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: i5RZxjcZhVQvmnAc/gMhyUIUY8n5jdbL7g9L8hbgD/Y=)
                          3: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: W7WMatvzYXuALvuTzGQVbHotqWD0nd56JaqQ7uT/XBU=)
                          4: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl (hash: cBIgUyye/8bWAAN3Lwyc5i/9McvAuoe4EuIJmoN0zz0=)
                          5: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: 68fT/6O+GQIrkXJcp+Dg6OpaZLLbbrSI6G1YMP9fXt0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:f0:fb:fe:8d:89:ff:8e:58:48:e8:28:0c:77:e7:9d:27:67:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3
        Validity
            Not Before: Jan 30 15:36:56 2025 GMT
            Not After : Feb  3 03:14:56 2025 GMT
        Subject: CN=A8810B03BFFB57EF3F8363DE97B4335E24800040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:15:00:d4:64:fd:ab:e3:d1:6c:55:a8:e9:
                    23:9a:1c:bf:25:f4:a0:6d:46:10:33:36:85:9f:a6:
                    90:7b:61:40:b5:e2:2b:99:11:5d:ab:85:d3:fd:44:
                    e4:ce:11:b6:b9:bc:14:c6:28:96:fd:7a:73:9d:c7:
                    da:e0:25:77:7d:4d:f6:00:2f:a2:c4:08:1c:8e:99:
                    04:10:de:96:a1:76:6a:6c:00:23:16:e9:3d:53:09:
                    bf:86:5b:ed:c5:e9:f0:a8:35:61:35:3b:d3:9e:5b:
                    6e:a0:36:5f:fc:6e:61:3b:34:ea:e0:ff:be:e5:c0:
                    cf:90:98:7c:e9:b5:0b:74:f5:c1:a9:05:ed:d4:40:
                    51:f7:8c:30:ad:fa:89:d0:63:f9:66:d8:89:76:99:
                    58:c4:30:81:b1:7f:dd:ab:b2:b2:73:bd:c0:40:f5:
                    ab:4a:e4:22:2e:13:e1:02:f4:c0:b5:55:8c:a0:02:
                    b5:9b:40:d9:50:07:8d:ae:70:2f:fc:df:e9:7f:7d:
                    75:bb:4c:3b:c4:a5:2e:b0:97:28:e9:9a:f5:aa:be:
                    8e:25:91:7d:cb:1b:3a:48:e4:64:2d:c2:30:f8:53:
                    39:2d:f8:5a:6d:ec:0b:39:80:71:de:6c:fb:55:9b:
                    b8:70:1a:f6:dd:21:1b:5a:47:5f:46:93:59:b3:35:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:81:0B:03:BF:FB:57:EF:3F:83:63:DE:97:B4:33:5E:24:80:00:40
            X509v3 Authority Key Identifier:
                keyid:0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:ec:dd:ad:9a:c4:e5:98:83:d7:a3:e3:68:22:10:fd:f9:
         85:32:7c:3e:4b:19:6a:6a:43:21:9e:fb:7c:17:18:b3:69:27:
         47:99:f0:a7:1b:4f:df:12:3f:df:a2:79:7f:17:38:db:69:5a:
         8a:39:67:b2:eb:f5:82:b7:91:d3:46:d6:3e:b5:11:cd:0c:c1:
         c8:f9:0a:d9:71:64:fd:ab:96:8f:ef:f8:35:27:af:19:8e:1e:
         fe:f3:55:f9:44:39:33:20:0c:58:d4:6c:0e:3a:7c:e0:b1:7f:
         4a:29:98:c2:c3:a9:75:f4:1c:ca:57:0b:2b:a1:52:48:50:48:
         16:34:ff:ca:00:3e:14:a3:dd:e7:1d:19:76:e8:5e:5e:86:a7:
         1f:f8:e0:56:4b:cf:69:ae:5e:0e:5a:ed:c9:49:56:2e:95:eb:
         75:df:64:17:9c:bb:65:25:6d:df:60:21:24:18:1b:92:6c:81:
         51:a8:03:d6:d7:71:59:a4:40:36:ee:e7:b7:e6:7a:ec:30:ae:
         53:46:a3:11:8d:f4:b5:0e:29:e4:25:c3:df:53:9d:ba:5e:15:
         45:76:09:c4:38:c6:2e:18:61:77:4c:47:5b:14:78:02:ff:6e:
         46:15:40:b7:95:d7:3b:8a:7d:c5:c9:35:66:9f:1c:02:b3:dc:
         e2:10:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----