Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File:                     1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier:          6voM/G1VdxommFjnPSBJdS5TnIW4x8PxXxPKhtiNWQ4=
Subject key identifier:   A6:C7:76:AA:97:05:10:87:88:57:43:F1:CD:B7:3B:0B:D7:2F:C3:9C
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       0BFBE3BBC249427B67DA0D64FAB0E937B484C4A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number:          0148
Signing time:             Wed 29 Jan 2025 23:20:04 +0000
Manifest this update:     Wed 29 Jan 2025 23:15:04 +0000
Manifest next update:     Sun 02 Feb 2025 00:38:04 +0000
Files and hashes:         1: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: ltH5xnCskoS1Or603mmRx68ZM/Y4nFtvCENpOq1SJoM=)
                          2: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 1sCdYqliqmouQr9aO3moY0v3zqzk2NgBsVyNMs0i8Xo=)
                          3: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=)
                          4: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: VhPkgJgRuRIvFBfp5KrcbqFqQDCxgmuJXLYmVyfVrlY=)
                          5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=)
                          6: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: M1XX69YA4h/dY2a6lbkkrJT2oZb1KyNMzJp9mQ1WMso=)
                          7: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4=)
                          8: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: RuZd2473NStGeUJxa+xbfaXN8l42fKOUTgJPrAZJYMc=)
                          9: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: ICHLru3ttqJrvtUB0G3jXEoAZOgThf6FI+tEOSoxM28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fb:e3:bb:c2:49:42:7b:67:da:0d:64:fa:b0:e9:37:b4:84:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Jan 29 23:15:04 2025 GMT
            Not After : Feb  2 00:38:04 2025 GMT
        Subject: CN=A6C776AA97051087885743F1CDB73B0BD72FC39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:e1:34:a6:4e:ce:02:a6:b8:b6:b1:f0:c1:
                    9a:5f:a4:7d:bf:af:40:a1:65:8e:3a:52:15:17:c6:
                    fc:bf:1a:bf:d8:74:8c:ca:97:df:e4:b9:6f:8a:b0:
                    95:e9:8b:9e:44:71:fa:60:5f:f1:d9:68:1f:3a:84:
                    8a:20:48:20:fc:96:02:27:a7:a6:0a:17:c9:2b:34:
                    f7:9d:eb:4f:9b:be:f5:3a:89:45:0e:15:7e:4f:a4:
                    e5:3e:c9:82:19:c6:5e:f7:82:d2:13:45:e0:78:b9:
                    74:e9:54:65:6c:bd:d3:0d:6b:f9:40:e3:85:97:2b:
                    81:8e:e6:e3:ff:f5:8a:2a:eb:04:1c:50:3d:00:a2:
                    fd:3a:23:a1:b5:bd:39:c1:42:e2:44:fb:8f:51:86:
                    43:11:d6:c1:8d:35:a0:c3:65:70:66:b6:8c:05:17:
                    f9:b5:08:41:1c:a8:a5:13:73:0d:f2:f0:bc:50:8a:
                    c4:31:0e:06:ff:77:1e:4d:6b:f2:d3:0f:be:ef:67:
                    ff:64:99:67:2a:8c:a2:96:a6:a1:48:e4:c6:c6:00:
                    1d:55:4a:52:5c:e5:a8:17:31:f1:f7:55:ba:22:71:
                    6f:21:58:3c:13:c5:aa:d0:85:f2:83:f7:3d:c8:90:
                    18:55:75:56:de:24:23:28:e9:bb:1b:12:26:15:3a:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:76:AA:97:05:10:87:88:57:43:F1:CD:B7:3B:0B:D7:2F:C3:9C
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:48:40:14:b1:49:d8:19:c1:0b:8c:d4:bb:81:83:1d:91:
         0d:ce:3d:be:da:13:b0:4d:37:60:cb:b1:c4:21:09:5b:1e:bb:
         57:a0:06:54:81:32:b0:d4:5f:b4:6e:c2:56:ce:03:48:98:15:
         d9:72:d9:95:09:42:27:e4:41:ca:f9:03:8d:0e:f8:6c:91:ce:
         df:67:d7:ca:6a:2b:ef:a5:fd:aa:b2:c1:2c:9c:49:b3:91:4c:
         3e:66:a3:89:28:0d:98:af:a1:5a:fe:36:17:2d:2b:db:8a:ec:
         36:66:8e:72:e0:b6:c7:3d:a1:cf:5a:6b:b9:99:c1:d1:98:9b:
         5f:42:0b:3a:7a:f9:ab:4d:04:3a:56:2e:f3:42:59:7f:6a:32:
         e8:37:2b:80:c5:07:4f:71:5a:a6:2e:eb:9c:2c:63:23:a8:4e:
         e1:b2:c2:bf:0c:c2:3f:79:f7:b1:22:59:1e:89:a0:6a:6c:a3:
         b3:54:c6:45:e3:2a:a1:33:c6:86:78:5b:a3:d2:a9:b1:11:03:
         ed:b8:08:4e:c8:25:81:b3:76:5c:a8:ea:c6:b8:1e:44:54:fa:
         1d:96:24:34:0e:d7:e6:56:c0:6c:b3:85:a8:8f:c4:2d:4d:4d:
         e6:c9:07:3b:85:e1:2f:95:93:61:ca:64:2a:7f:71:41:77:7c:
         ef:86:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:28 2025 by rpki-client