Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
File:                     BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json)
Hash identifier:          Bx49QY4gyLa/CeQB/66HHBNDoFfGkQQopNA6kyjGl8U=
Subject key identifier:   E4:CE:C3:4A:2E:16:5A:EA:0D:74:A3:0E:FF:33:3C:47:42:D7:F4:51
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       58A37EF87BE4951431DAF1CA84F7DE0F1206EEAB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
Manifest number:          0489
Signing time:             Thu 30 Jan 2025 05:22:04 +0000
Manifest this update:     Thu 30 Jan 2025 05:17:04 +0000
Manifest next update:     Sun 02 Feb 2025 12:58:04 +0000
Files and hashes:         1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: XecTj5rW5vjVGioZGbTrF2RL8Bz7nq18kBIEMdfx7K8=)
                          2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: eREZriexkxQvNqdscwOzAEbr7/OejUmoh6WVZG0PEow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a3:7e:f8:7b:e4:95:14:31:da:f1:ca:84:f7:de:0f:12:06:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Jan 30 05:17:04 2025 GMT
            Not After : Feb  2 12:58:04 2025 GMT
        Subject: CN=E4CEC34A2E165AEA0D74A30EFF333C4742D7F451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:ce:eb:59:d3:58:50:b5:1c:1d:33:26:e7:
                    8c:a7:1d:07:b2:76:28:c8:98:37:20:88:c2:0f:ec:
                    57:9f:2b:44:82:6c:35:72:03:93:ce:97:65:ba:ea:
                    25:4d:04:90:78:24:ce:5a:15:70:fe:92:e6:5d:9a:
                    73:20:e4:0c:19:cc:49:e7:3c:6a:0e:f0:43:f8:6a:
                    dd:f7:98:30:ed:55:1c:e0:be:ad:a9:ba:9a:95:ba:
                    89:73:ce:d2:4b:3c:80:e0:9b:5e:43:ce:75:3d:b6:
                    73:93:88:20:bb:50:fe:5b:91:d7:8e:51:e5:d1:e7:
                    76:4f:63:c5:b9:fd:94:3b:b3:2d:a4:92:1f:79:67:
                    13:9b:cd:22:e7:b8:80:35:f5:48:5a:23:b0:4e:0c:
                    db:12:92:07:72:7a:56:b6:86:dc:69:cd:f9:88:da:
                    94:05:20:a3:c0:60:a7:30:e7:9b:b3:2e:56:8e:9c:
                    e8:dd:7d:f6:33:9f:82:d8:31:f5:c2:b1:e8:75:37:
                    3e:b5:db:60:8c:55:65:8a:34:42:d9:d5:4f:98:74:
                    dd:8b:43:0c:0b:cc:3a:68:1c:09:29:f9:93:75:2c:
                    38:dc:92:e7:77:17:5e:b3:cb:1b:f5:a1:0c:f0:e5:
                    ed:df:8d:c2:da:3f:ae:35:c7:ec:93:4d:00:42:e1:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CE:C3:4A:2E:16:5A:EA:0D:74:A3:0E:FF:33:3C:47:42:D7:F4:51
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:46:59:dd:46:69:09:6c:6b:23:51:29:05:62:a0:89:6f:50:
         70:af:f1:58:11:9f:ab:8c:62:93:3a:88:1b:c3:e9:b2:07:25:
         d8:ac:f2:61:75:03:f4:95:9d:3e:80:c2:43:3a:93:ea:ff:c2:
         53:5f:91:e7:ce:0f:1e:a0:e6:f2:fc:cd:99:c9:25:68:9a:99:
         8c:a3:cb:c9:3a:cc:5e:87:66:0b:85:09:71:0f:20:21:ca:cf:
         99:d4:71:09:3e:19:ba:f8:4c:1c:1b:c0:d4:ef:59:ce:19:d9:
         97:07:68:ea:7b:68:3f:b1:bf:dc:2a:d0:ed:c0:48:9c:0d:91:
         73:de:db:91:68:93:72:ab:2d:39:e0:11:99:c9:ce:bd:2b:13:
         60:bb:93:8d:5b:10:65:0b:df:aa:70:1c:06:b0:81:67:ba:19:
         7f:6d:f2:d9:0b:ce:b9:fe:78:f5:4d:bf:ec:b3:a3:ab:86:b1:
         db:99:af:c0:21:db:b6:ce:45:87:84:69:ca:8a:de:38:17:36:
         64:12:a7:51:cb:98:12:74:f0:6d:2a:23:21:8b:31:5d:25:27:
         a7:bd:10:87:41:da:a4:2a:9c:bd:1f:b4:38:09:ca:f0:a9:72:
         42:42:0b:0c:36:68:65:4f:07:1c:c4:92:c0:4e:70:f0:7c:47:
         00:da:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----