Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft
File:                     BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json)
Hash identifier:          wr06a4eIzXcDrRievWEfpsdK9GE+OMrFyJKTG1/9K1Q=
Subject key identifier:   36:3F:16:4A:CA:AD:D5:F8:5D:7E:BE:EF:72:9B:48:FD:26:4D:BA:C6
Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D
Certificate issuer:       /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
Certificate serial:       773BBA3A7A52824FFD1D6BDDD483A89004CADE00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft
Manifest number:          04A1
Signing time:             Wed 29 Jan 2025 09:21:17 +0000
Manifest this update:     Wed 29 Jan 2025 09:16:17 +0000
Manifest next update:     Sat 01 Feb 2025 19:48:17 +0000
Files and hashes:         1: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: clOOS2UHgiK1XdM7aZazMvJvGgOo73bVQrDZ1oe6k8c=)
                          2: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: Zx4W8zUbHnzOexTWAJx1gnE3UuUS1lvOSFYzvlyuz8A=)
                          3: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: tetctb3x0jo2tKS9PhsP2mOyqUJEiXGEiR7qL9F7+V4=)
                          4: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: SE91KCthotRrX/AsP1qesUPqNUCPFEcuGMcgZjQqeBU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3b:ba:3a:7a:52:82:4f:fd:1d:6b:dd:d4:83:a8:90:04:ca:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
        Validity
            Not Before: Jan 29 09:16:17 2025 GMT
            Not After : Feb  1 19:48:17 2025 GMT
        Subject: CN=363F164ACAADD5F85D7EBEEF729B48FD264DBAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:1c:6c:cd:ad:31:d5:8b:59:8f:db:15:ba:
                    24:a8:69:57:90:aa:97:4e:ee:d4:b2:2d:07:0f:a5:
                    3f:8a:08:dc:2a:c0:0d:6e:47:57:f5:73:d3:d1:ab:
                    ee:fc:77:91:82:4a:00:67:c1:a7:51:f5:e2:14:73:
                    32:b9:05:0c:fa:3c:fb:66:3e:db:af:2f:d5:97:04:
                    03:dd:22:fe:d2:8a:14:70:7a:ab:52:be:eb:e3:47:
                    6c:a8:c2:a8:70:f1:a2:46:8c:f6:54:1c:74:ec:db:
                    34:2a:ad:66:da:3b:57:4c:b8:cf:82:7e:e9:ae:05:
                    1b:ab:f0:51:b3:1d:39:22:62:83:bc:ca:98:f4:56:
                    7c:84:bf:da:a6:e8:31:60:26:33:06:03:64:7d:ba:
                    c0:c8:82:56:3d:6c:89:75:d5:02:db:c3:47:cf:fd:
                    69:f6:09:87:85:89:ef:58:77:3f:1f:46:8c:af:18:
                    f4:87:cc:c5:01:3a:e5:be:b2:9e:de:97:b5:0b:05:
                    45:5c:f3:13:8c:77:d7:86:1c:79:32:d6:31:6b:4e:
                    32:d3:f0:76:c1:12:0d:72:13:87:31:ad:ab:be:a4:
                    8e:57:bd:44:35:71:ca:83:a3:8f:42:b1:ee:fb:4a:
                    0c:a0:29:6b:e1:b3:63:54:db:46:45:3d:6c:d6:24:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3F:16:4A:CA:AD:D5:F8:5D:7E:BE:EF:72:9B:48:FD:26:4D:BA:C6
            X509v3 Authority Key Identifier:
                keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:3f:c6:79:f9:ca:95:4d:1d:2b:bd:79:ab:54:27:61:a5:
         98:f9:b7:8a:6d:8f:59:6f:dd:c8:04:f0:0b:95:31:e1:67:3e:
         85:f7:65:8e:46:2e:4c:8f:c2:27:84:28:47:89:83:22:9c:82:
         ac:0a:b3:bb:07:23:2a:b5:ad:a9:eb:f6:3a:83:8b:00:dd:20:
         b7:80:d0:58:97:ed:39:e0:8a:d3:2c:1c:95:a9:3c:34:b5:b5:
         6e:ce:1d:39:92:23:60:e7:35:22:1e:93:71:7f:bf:44:4d:d9:
         dc:55:2d:52:3e:fd:9f:81:1c:18:d0:78:6e:36:17:ba:da:0e:
         e8:ad:56:96:14:33:7d:ad:05:f1:85:1b:d7:05:82:c0:db:2b:
         65:0c:e5:27:7c:b7:3d:50:e1:aa:d0:10:de:66:f8:8e:fa:ee:
         89:74:57:17:2c:75:11:5c:3e:72:43:f2:d1:92:d5:10:d5:ff:
         0f:a0:dd:4e:fc:ee:3b:b9:ff:b1:d3:40:d7:a2:15:5c:b9:ac:
         40:e7:1f:4d:f5:d0:8d:a5:61:ca:6d:40:e9:37:de:5d:b3:3e:
         ff:c1:11:24:c9:4e:a4:4e:be:ee:0a:19:56:ae:1c:fa:22:89:
         ef:92:f6:6c:a1:00:22:89:86:11:7a:e8:3e:cc:c1:6b:b7:fc:
         c3:5b:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:21 2025 by rpki-client