Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft
File:                     BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json)
Hash identifier:          63r95wiU9/AVeluXttw+0WXieDvDjCScDfCqhXNDBkA=
Subject key identifier:   A8:A7:5A:66:BD:73:76:9B:E6:F0:4F:BA:A8:93:DA:A9:E1:2E:19:67
Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4
Certificate issuer:       /CN=BB64FDB64281947C3567104C08735A011C6210F4
Certificate serial:       0790FF88EA998E99265BFBC741051784E3A26C78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft
Manifest number:          0329
Signing time:             Thu 30 Jan 2025 23:11:40 +0000
Manifest this update:     Thu 30 Jan 2025 23:06:40 +0000
Manifest next update:     Mon 03 Feb 2025 07:11:40 +0000
Files and hashes:         1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: s4mAV2IbyQDfNFtiNr0n3GNIPLKlB2rui4QyM1jaKTA=)
                          2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: zzH64W01k51UtMKo9K1XtqIEAU0v0y4EltQRbWU1t7M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:90:ff:88:ea:99:8e:99:26:5b:fb:c7:41:05:17:84:e3:a2:6c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4
        Validity
            Not Before: Jan 30 23:06:40 2025 GMT
            Not After : Feb  3 07:11:40 2025 GMT
        Subject: CN=A8A75A66BD73769BE6F04FBAA893DAA9E12E1967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:6b:4b:8d:76:64:27:d0:17:c6:57:65:88:
                    6a:c1:db:96:6e:a4:d4:90:4c:ac:84:26:9e:75:3d:
                    8e:70:45:6b:6a:07:65:df:4c:aa:bd:a0:45:8b:3a:
                    f6:a9:80:4a:7a:7c:84:c8:2a:7c:a2:e8:c2:71:78:
                    4d:01:20:a7:23:4f:d8:19:f1:aa:f6:ed:44:da:aa:
                    7e:17:2f:87:78:69:a3:ef:47:b6:03:c5:2a:83:f0:
                    89:8b:99:3f:2f:f2:96:ce:27:54:0c:41:0d:13:e4:
                    9c:26:0d:95:e4:81:f3:b6:92:4b:88:ab:aa:37:64:
                    3b:c1:ba:9d:f1:f3:f5:72:b3:1d:6b:91:91:67:62:
                    e7:df:75:63:8c:e2:ce:57:f3:83:23:c1:73:83:c7:
                    23:73:fc:eb:f3:41:e8:e5:12:07:1f:c7:dc:7a:c0:
                    ca:31:f7:7f:6c:ad:7f:78:07:5a:2a:fa:e6:5c:10:
                    6d:dd:ed:88:63:bd:b0:0e:d7:d8:31:f4:62:04:bd:
                    8f:9d:35:30:29:7d:02:74:06:ce:4b:4a:94:c9:8c:
                    44:f3:cf:11:94:be:55:ce:50:76:34:f1:f6:ea:5e:
                    a4:a4:ae:62:f0:95:60:07:f6:ee:43:3c:14:44:c0:
                    16:1e:92:99:c1:9b:0e:7d:fa:40:70:68:e9:00:02:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:5A:66:BD:73:76:9B:E6:F0:4F:BA:A8:93:DA:A9:E1:2E:19:67
            X509v3 Authority Key Identifier:
                keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:69:ba:8c:a4:7c:cb:54:6e:0f:8b:fd:f1:57:26:68:48:
         ab:cc:22:67:91:e0:30:7f:cc:68:fb:d8:04:eb:66:17:da:c0:
         db:88:b9:58:ae:ef:da:86:21:3e:72:e8:d2:60:46:49:85:dc:
         cc:6f:18:44:c5:86:a8:7d:32:6f:f4:84:97:7e:2d:7a:66:7c:
         1b:a2:23:d6:60:a9:65:9b:90:4e:2b:b7:22:a6:42:c0:0d:1e:
         f7:2f:0c:80:cc:d9:2b:5f:9e:57:84:61:f7:19:fc:7e:fb:4c:
         6a:b8:30:42:cc:3c:73:dc:0f:7a:07:bd:08:08:53:c7:2e:c6:
         4b:3b:f1:98:7d:aa:b4:7a:99:a8:2b:d7:af:1e:54:43:85:fa:
         a1:d5:d0:f2:b5:0a:84:03:3c:94:80:7a:81:5d:12:cb:69:a1:
         ee:93:46:7f:c2:56:85:f3:12:39:3c:c2:06:61:24:12:c4:b5:
         8d:a2:5d:e2:8f:3f:34:cd:0b:d4:60:7c:15:96:fd:1a:fe:91:
         e6:3d:0a:66:b5:2a:29:5b:ca:ea:5e:49:e9:0b:d5:93:d4:41:
         d5:7b:94:b6:8e:13:2c:3f:10:19:d2:7f:89:31:25:89:3f:67:
         ed:3a:41:e9:5d:04:52:67:a2:c2:36:c7:e2:f9:d3:2f:aa:39:
         a2:03:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:33 2025 by rpki-client