Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
File:                     BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json)
Hash identifier:          gptawb+kC+Upf26VBUmJcdCrngibhV3tv4PU0JEQUWE=
Subject key identifier:   A5:95:F7:6B:7E:20:22:C3:DF:32:69:74:F1:BC:25:53:F1:7D:CD:D1
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       0AE1B996E8CE886E3688586727F4D6AB353A4406
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
Manifest number:          01F2
Signing time:             Thu 30 Jan 2025 06:21:19 +0000
Manifest this update:     Thu 30 Jan 2025 06:16:19 +0000
Manifest next update:     Sun 02 Feb 2025 11:31:19 +0000
Files and hashes:         1: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=)
                          2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=)
                          3: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: OJOE/7q58wvHc3CR/aklsOVCRBylBzz1DBZTUwMunAw=)
                          4: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=)
                          5: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: u72bVCCKSWhr7nLZEVjbdVZ8L/XRICdCJHN1H70kinI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:b9:96:e8:ce:88:6e:36:88:58:67:27:f4:d6:ab:35:3a:44:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Jan 30 06:16:19 2025 GMT
            Not After : Feb  2 11:31:19 2025 GMT
        Subject: CN=A595F76B7E2022C3DF326974F1BC2553F17DCDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:11:87:92:db:47:df:54:74:06:dc:28:a7:
                    fb:73:4f:86:ae:70:41:f8:b6:6c:9c:f3:4b:2e:64:
                    08:aa:e1:f1:41:59:f1:67:5b:19:08:f0:a9:4a:9f:
                    cc:5e:45:5b:0f:8a:74:0d:bd:ba:d3:98:a0:bf:dd:
                    8c:16:41:1e:96:35:43:cd:f7:76:c5:10:d7:6a:c7:
                    b7:89:57:75:3f:19:8d:3e:3a:54:b9:1c:9f:6d:c7:
                    85:c2:16:5b:4a:3d:70:94:60:40:a3:f3:0c:7d:b3:
                    33:4f:b6:3e:f2:4e:2a:25:28:9d:f1:d3:47:77:b4:
                    1e:24:ad:07:6e:fe:40:4b:c3:2f:76:e6:2c:66:a9:
                    9f:57:68:3e:2d:b3:e4:2f:cf:7e:f2:c6:d3:fd:32:
                    13:c5:59:28:b5:01:1f:7c:78:81:8f:a1:4d:d2:c5:
                    4a:d6:ae:71:d2:a5:b9:e9:1f:87:eb:a2:b5:d6:7f:
                    5c:53:4c:68:db:03:86:04:9e:50:3f:64:52:ce:15:
                    e4:c0:5d:5b:65:c6:54:a8:8d:8f:0a:3c:76:61:7f:
                    d4:e0:ef:92:54:31:04:fc:91:80:a9:8c:d4:49:5c:
                    aa:d7:9e:24:b6:e4:5a:bf:c2:f2:3c:6b:19:b3:61:
                    7b:8a:a2:c0:1c:8c:92:aa:35:e8:8c:c1:67:1a:00:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:F7:6B:7E:20:22:C3:DF:32:69:74:F1:BC:25:53:F1:7D:CD:D1
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ca:f2:9b:0d:13:37:74:a5:0b:b5:fe:64:0a:23:28:62:c8:
         a8:21:27:f8:c8:33:8b:bd:0c:f3:ab:d4:a3:7f:59:e4:8f:e7:
         af:9b:6b:13:fb:b5:5e:fb:ed:87:6d:13:ae:02:52:e3:0e:9a:
         1b:ed:31:21:66:38:81:cc:c0:cf:a8:43:00:10:45:f6:b2:c4:
         6c:10:d1:36:71:e5:c7:1f:3d:ee:bf:b2:30:7e:41:39:7c:3a:
         15:da:2f:39:5a:a4:1e:7a:e9:c2:11:86:45:01:6f:cc:4a:53:
         66:5e:1a:6f:74:fb:c7:6e:80:53:7c:a1:33:f7:7c:b0:e7:9d:
         14:49:36:4f:cf:3f:1e:63:be:32:46:27:e6:3d:3b:ae:83:e7:
         0f:15:d1:60:d9:e0:8e:88:a9:96:5e:28:6a:e1:13:db:85:a4:
         20:fa:ee:7c:e3:44:e5:57:51:d0:55:e7:18:0d:f1:73:0e:7a:
         fd:12:1e:67:c0:89:e1:d4:51:39:7f:6c:d2:a8:10:32:ea:db:
         7a:1f:50:a4:66:b7:e9:e2:3e:31:6a:18:9c:b3:b7:d5:b3:6e:
         36:7e:c0:8a:87:e7:dc:9c:fb:a1:88:66:66:b4:a7:fd:53:38:
         77:0d:cc:9b:63:a3:89:61:1f:37:68:71:a5:3e:d0:8f:1d:4b:
         19:68:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:55 2025 by rpki-client