Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
File:                     BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json)
Hash identifier:          dlhi4RHv2yi0tV3avO2j2bbtrQLi+BNbR61HxDZv5nI=
Subject key identifier:   F7:F8:00:3C:1A:F1:03:63:5D:06:03:92:B9:B1:23:12:17:F9:A9:79
Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
Certificate issuer:       /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Certificate serial:       78D638A5CFA67D41A31BCF5497A7174C1DA0DFB9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
Manifest number:          029E
Signing time:             Fri 31 Jan 2025 02:21:45 +0000
Manifest this update:     Fri 31 Jan 2025 02:16:45 +0000
Manifest next update:     Mon 03 Feb 2025 04:18:45 +0000
Files and hashes:         1: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=)
                          2: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=)
                          3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: yvB7tdvMCNez8fuWDiusCi+W+5hzxu0N5aorjGcdEQ4=)
                          4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=)
                          5: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d6:38:a5:cf:a6:7d:41:a3:1b:cf:54:97:a7:17:4c:1d:a0:df:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
        Validity
            Not Before: Jan 31 02:16:45 2025 GMT
            Not After : Feb  3 04:18:45 2025 GMT
        Subject: CN=F7F8003C1AF103635D060392B9B1231217F9A979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:66:12:a8:a7:97:0b:e8:8e:10:ea:32:4a:
                    7a:85:e9:8c:5a:f7:16:ed:26:97:74:9a:b4:40:8d:
                    ef:9c:63:38:53:a9:6f:ec:45:11:e1:84:3e:74:7f:
                    3e:32:ac:05:15:ff:82:4a:db:ce:99:15:75:b4:e1:
                    96:8d:6a:1d:7f:51:8f:5d:cf:6b:20:65:11:38:b7:
                    9b:1c:e0:ac:31:7b:0e:d9:d7:dc:83:d0:e1:b0:0b:
                    c1:ff:2d:4c:d9:e3:ce:b9:23:35:64:0c:9c:b1:17:
                    a1:21:8e:ea:36:20:4a:c1:af:df:73:d1:27:09:1e:
                    33:d4:0f:38:be:c0:c3:bb:71:ff:43:83:f5:5a:fe:
                    fe:f3:c9:22:96:fc:c3:59:4e:06:5d:ad:0e:4d:3e:
                    85:bd:58:58:a7:8a:cd:55:7d:27:c1:65:63:45:7d:
                    54:76:2f:28:5b:eb:42:d8:e8:d1:24:ba:5a:4a:13:
                    9c:71:31:e3:4b:17:97:42:9c:18:a7:c8:e1:19:27:
                    5e:e0:ae:a0:db:94:a5:0c:ae:d1:fc:27:bc:bf:90:
                    e4:da:4a:02:3f:b2:15:33:c0:75:de:e0:55:3c:fe:
                    ee:23:89:a4:6f:98:29:ff:26:5e:b3:c7:0a:a4:47:
                    fc:ef:f1:6f:8d:48:6a:41:61:84:cf:3a:3d:76:bb:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:00:3C:1A:F1:03:63:5D:06:03:92:B9:B1:23:12:17:F9:A9:79
            X509v3 Authority Key Identifier:
                keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ab:cc:cb:5f:84:fe:fb:26:88:8a:4b:4b:cc:b5:00:f6:88:
         f3:2b:54:27:e1:9f:af:30:59:40:22:06:ff:5f:3b:f9:9d:39:
         11:9f:63:df:08:12:2b:4a:34:02:a4:c5:7a:cb:d0:d1:96:f0:
         cf:6c:87:4d:f4:95:91:59:5d:5e:63:8c:68:d0:fa:01:a9:9c:
         21:1b:6b:84:ad:2f:5a:da:60:4f:40:1f:cf:1b:b2:28:7c:19:
         61:75:ed:28:f4:34:02:da:cf:86:fa:0a:07:7e:b8:9f:31:3f:
         53:3e:41:a5:44:79:b2:24:4d:34:9c:71:13:43:44:7e:97:3c:
         dd:2d:26:3e:26:78:ce:b0:15:15:fd:da:db:1d:d7:d7:1e:f2:
         4b:6f:2a:5e:82:fa:38:07:d0:12:b7:42:a5:d2:00:7c:ad:53:
         2a:4b:3d:38:2b:20:e9:e9:09:37:5c:94:05:69:8e:9c:45:93:
         c7:93:25:2a:69:88:4f:da:dd:d8:8f:52:ce:7f:cd:0a:b7:36:
         41:9b:3f:4f:3b:70:82:35:11:d7:87:20:f8:bf:14:48:9b:9f:
         64:e9:a8:f3:e6:d4:f0:fb:15:54:37:d8:cb:e5:cb:57:cd:02:
         5b:13:02:8a:f1:72:32:c9:21:15:b6:db:2d:ed:bd:4b:47:86:
         fa:85:1b:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeNY4pc+mfUGjG89Ul6cXTB2g37kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0
Q0JDNUVFOTAeFw0yNTAxMzEwMjE2NDVaFw0yNTAyMDMwNDE4NDVaMDMxMTAvBgNV
BAMTKEY3RjgwMDNDMUFGMTAzNjM1RDA2MDM5MkI5QjEyMzEyMTdGOUE5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC362YSqKeXC+iOEOoySnqF6Yxa
9xbtJpd0mrRAje+cYzhTqW/sRRHhhD50fz4yrAUV/4JK286ZFXW04ZaNah1/UY9d
z2sgZRE4t5sc4Kwxew7Z19yD0OGwC8H/LUzZ4865IzVkDJyxF6Ehjuo2IErBr99z
0ScJHjPUDzi+wMO7cf9Dg/Va/v7zySKW/MNZTgZdrQ5NPoW9WFinis1VfSfBZWNF
fVR2Lyhb60LY6NEkulpKE5xxMeNLF5dCnBinyOEZJ17grqDblKUMrtH8J7y/kOTa
SgI/shUzwHXe4FU8/u4jiaRvmCn/Jl6zxwqkR/zv8W+NSGpBYYTPOj12u8H3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9/gAPBrxA2NdBgOSubEjEhf5qXkwHwYDVR0j
BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0
NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD
NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx
MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE
RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEyrzMtfhP77JoiKS0vMtQD2iPMrVCfhn68w
WUAiBv9fO/mdORGfY98IEitKNAKkxXrL0NGW8M9sh030lZFZXV5jjGjQ+gGpnCEb
a4StL1raYE9AH88bsih8GWF17Sj0NALaz4b6Cgd+uJ8xP1M+QaVEebIkTTSccRND
RH6XPN0tJj4meM6wFRX92tsd19ce8ktvKl6C+jgH0BK3QqXSAHytUypLPTgrIOnp
CTdclAVpjpxFk8eTJSppiE/a3diPUs5/zQq3NkGbP087cII1EdeHIPi/FEibn2Tp
qPPm1PD7FVQ32Mvly1fNAlsTAorxcjLJIRW22y3tvUtHhvqFGwE=
-----END CERTIFICATE-----