Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
File:                     B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json)
Hash identifier:          BiDPCqueE9t1K3X5g/cewG3ML2YoJCSRnQxVXWauefI=
Subject key identifier:   C0:F3:FE:E1:15:0F:D5:29:95:DF:6C:DA:F9:E3:6A:D5:CE:9A:B9:90
Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Certificate issuer:       /CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Certificate serial:       609C8A934607DCAA7E128A9CF5C714AE30837DE6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
Manifest number:          0147
Signing time:             Fri 31 Jan 2025 04:52:07 +0000
Manifest this update:     Fri 31 Jan 2025 04:47:07 +0000
Manifest next update:     Mon 03 Feb 2025 14:32:07 +0000
Files and hashes:         1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=)
                          2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=)
                          3: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: arPFvzmwbbc4At2GEfIPqDMiFFCFPzMUMqHBLZbfNAg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9c:8a:93:46:07:dc:aa:7e:12:8a:9c:f5:c7:14:ae:30:83:7d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
        Validity
            Not Before: Jan 31 04:47:07 2025 GMT
            Not After : Feb  3 14:32:07 2025 GMT
        Subject: CN=C0F3FEE1150FD52995DF6CDAF9E36AD5CE9AB990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:b8:48:56:cc:fa:70:d9:6b:41:35:d0:19:
                    16:4a:51:f8:12:5e:04:e3:c8:54:2e:90:b2:28:e5:
                    76:47:09:c1:e6:5d:19:f0:a5:01:73:ac:d8:27:25:
                    15:17:51:aa:9b:59:bd:2f:3a:8b:fe:df:79:4a:7e:
                    25:c2:9e:1a:0d:60:d9:a0:c6:1c:26:86:88:48:7e:
                    97:49:5b:63:06:b8:34:73:9c:ed:35:91:ad:fd:3e:
                    17:50:8b:b6:00:65:5e:a0:99:08:60:e4:10:52:41:
                    d1:76:32:8c:92:0c:e5:e4:10:5d:d1:36:63:e7:a7:
                    c9:29:1b:96:46:9f:3a:a3:74:15:5a:1b:cb:40:b0:
                    c0:d7:ad:05:8d:16:80:88:f7:a6:df:94:bf:12:f8:
                    57:a4:eb:ee:66:8f:fd:21:b4:94:ee:2c:c1:4c:58:
                    d0:82:b8:18:c0:b0:f3:1e:b9:83:3c:16:90:89:30:
                    ad:dc:bb:44:07:33:9c:35:e8:ca:24:5f:31:4f:0b:
                    28:8f:9f:e9:ef:bd:ed:2e:e8:e1:c4:de:82:32:cf:
                    cd:9b:53:4c:89:2d:3a:5d:37:ed:f4:fc:6a:3a:78:
                    43:a0:f0:76:4c:f4:7e:75:9b:cb:36:a2:a4:1d:ae:
                    7a:c0:3f:42:27:7f:55:ea:dd:c5:57:ad:62:5e:3c:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F3:FE:E1:15:0F:D5:29:95:DF:6C:DA:F9:E3:6A:D5:CE:9A:B9:90
            X509v3 Authority Key Identifier:
                keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:04:f1:ed:8a:e8:d9:8f:3b:b7:9e:35:fa:12:86:84:20:32:
         3d:2e:83:d6:c5:e8:21:e0:f9:88:d8:86:03:44:4a:4d:2d:ad:
         4b:3c:69:9c:8a:0f:4b:f5:96:77:2c:be:e9:9c:a6:77:cf:ec:
         59:fa:8c:09:2c:57:09:d0:01:b3:3b:a8:16:ac:f2:ea:ba:55:
         19:e9:c4:5c:0f:14:b7:8f:bc:fc:a7:90:b5:a1:4c:3f:9b:31:
         64:cb:ef:ff:75:7f:4e:a4:77:51:af:26:99:e9:70:53:b2:6a:
         e4:7d:37:bb:fc:c6:2f:ae:09:7d:43:1b:5c:44:62:89:96:73:
         4e:bf:9e:41:f6:49:b6:dd:f6:04:76:63:76:59:1a:5e:52:38:
         3f:c1:9b:5b:a0:16:c4:1b:b6:1b:cd:1e:82:0a:ed:50:38:1a:
         65:91:2f:ea:a4:34:70:8a:79:c2:1d:af:0c:88:01:74:63:a0:
         71:8a:68:0f:9f:ec:b0:82:f9:0b:55:26:7a:7e:ff:f7:39:ff:
         b5:31:83:03:f4:85:0a:64:c5:c8:d0:d4:69:3d:e6:b1:70:9e:
         34:95:1e:d4:d9:d2:ed:fb:27:3c:4b:2f:35:26:d5:89:1d:32:
         b5:7f:13:1a:c6:8b:09:3d:a3:47:2f:1c:f3:2f:6f:21:72:5b:
         6b:c9:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----