Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
File:                     B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json)
Hash identifier:          sLT5kaqxTjIRAt5IX0LsH14o+icpK4uKjQQPNZKQ0UM=
Subject key identifier:   8E:04:18:95:8C:22:CF:20:93:49:C6:A3:FE:DD:AD:4B:CD:28:F5:63
Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84
Certificate issuer:       /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84
Certificate serial:       16EB6D282F9361A1B0D1E2CCD74C0A4B243CF686
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft
Manifest number:          0443
Signing time:             Thu 30 Jan 2025 08:41:45 +0000
Manifest this update:     Thu 30 Jan 2025 08:36:45 +0000
Manifest next update:     Sun 02 Feb 2025 11:27:45 +0000
Files and hashes:         1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: qOliyAbecAgnwnEl2JxoivYUoLSuHIHif/ES8Zdhg8I=)
                          2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: EsoXURA/BMNvSmBDBr4jKeSubU7pNf3EKRYj9okUpLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:eb:6d:28:2f:93:61:a1:b0:d1:e2:cc:d7:4c:0a:4b:24:3c:f6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84
        Validity
            Not Before: Jan 30 08:36:45 2025 GMT
            Not After : Feb  2 11:27:45 2025 GMT
        Subject: CN=8E0418958C22CF209349C6A3FEDDAD4BCD28F563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1b:fd:c0:00:e0:56:87:41:78:4a:03:7f:26:
                    de:b0:40:23:ea:24:8b:1e:59:19:48:aa:f4:5e:f9:
                    f3:96:9c:49:7d:38:26:4e:a2:ba:85:89:b9:90:ac:
                    6e:68:fa:1d:69:95:28:6d:14:3f:39:76:24:37:74:
                    6c:87:54:fe:53:d9:73:43:19:35:af:27:73:a8:e5:
                    c3:58:90:ff:d1:bf:64:9b:2c:d6:46:9d:e5:d7:89:
                    79:aa:d8:98:42:8a:b6:9c:d1:e5:35:64:e4:b1:46:
                    5d:5f:a4:75:78:ea:7c:b3:aa:8a:20:1a:6c:56:fc:
                    d6:e4:92:ce:88:1d:81:10:9f:b5:05:84:0a:ca:d5:
                    8f:6f:94:8b:9e:8f:49:c6:ff:30:42:4e:56:67:f6:
                    d1:88:6e:59:6b:f8:96:6b:b1:75:0b:36:30:8e:9f:
                    a6:54:3d:74:14:20:77:b6:30:60:fa:75:50:19:bc:
                    39:d5:24:af:d3:d7:ad:fd:73:ff:32:5e:f5:25:fc:
                    9b:e2:b2:0b:ee:83:c6:b9:65:40:dd:fa:07:48:a3:
                    12:da:a3:6c:34:1d:55:23:8d:23:1b:d9:50:c8:a8:
                    4a:7a:df:49:37:40:79:6c:5f:17:ce:59:e7:d5:a2:
                    1f:0d:12:cc:3b:74:23:81:9b:fa:12:85:22:7f:d9:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:04:18:95:8C:22:CF:20:93:49:C6:A3:FE:DD:AD:4B:CD:28:F5:63
            X509v3 Authority Key Identifier:
                keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:a8:e4:e9:a1:22:69:20:1c:fa:3c:90:51:d8:61:90:d7:
         1c:e6:27:fa:81:a9:cb:c9:21:fa:97:97:0d:7a:ec:80:c4:d5:
         86:20:39:e5:a6:15:fe:ce:c4:fd:5a:6d:b3:7d:c4:0a:34:3d:
         7a:12:9e:6e:26:d1:f0:76:27:a5:8b:11:e0:be:91:72:6e:2e:
         ab:b1:0d:24:e9:07:a0:2b:83:97:64:f3:26:9c:18:1f:3a:7c:
         7a:83:47:f2:37:2a:4a:74:f4:7f:1c:e2:76:8f:bf:4a:86:71:
         af:c6:d1:47:2b:c3:66:f3:fb:3d:40:3d:b9:b5:a0:8c:fa:b2:
         07:a2:44:bc:b7:c5:ee:c1:19:1a:09:5b:55:76:19:53:37:b0:
         5b:02:8c:34:27:f2:27:8e:4c:ed:e2:16:ea:0c:54:5d:11:de:
         45:9c:b5:cf:97:98:1c:cb:06:d1:8d:6e:5a:42:30:28:e0:4e:
         72:d8:b6:1b:08:e3:3d:9b:72:ea:eb:63:1b:c1:51:de:49:af:
         a6:82:2a:0a:37:4e:a4:78:65:e4:27:3e:c2:70:71:e5:45:68:
         98:20:d5:f8:22:55:79:19:a7:f5:55:f0:c2:99:8b:12:a2:90:
         fb:d3:29:eb:15:43:43:e5:de:1f:42:1e:52:fb:eb:03:5d:ed:
         a0:6b:da:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFuttKC+TYaGw0eLM10wKSyQ89oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0
QzQyQkY4NDAeFw0yNTAxMzAwODM2NDVaFw0yNTAyMDIxMTI3NDVaMDMxMTAvBgNV
BAMTKDhFMDQxODk1OEMyMkNGMjA5MzQ5QzZBM0ZFRERBRDRCQ0QyOEY1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5G/3AAOBWh0F4SgN/Jt6wQCPq
JIseWRlIqvRe+fOWnEl9OCZOorqFibmQrG5o+h1plShtFD85diQ3dGyHVP5T2XND
GTWvJ3Oo5cNYkP/Rv2SbLNZGneXXiXmq2JhCirac0eU1ZOSxRl1fpHV46nyzqoog
GmxW/Nbkks6IHYEQn7UFhArK1Y9vlIuej0nG/zBCTlZn9tGIbllr+JZrsXULNjCO
n6ZUPXQUIHe2MGD6dVAZvDnVJK/T1639c/8yXvUl/Jvisgvug8a5ZUDd+gdIoxLa
o2w0HVUjjSMb2VDIqEp630k3QHlsXxfOWefVoh8NEsw7dCOBm/oShSJ/2VCpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjgQYlYwizyCTScaj/t2tS80o9WMwHwYDVR0j
BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz
Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy
QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm
YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0
OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD/ZqOTpoSJpIBz6PJBR2GGQ1xzmJ/qBqcvJ
IfqXlw167IDE1YYgOeWmFf7OxP1abbN9xAo0PXoSnm4m0fB2J6WLEeC+kXJuLqux
DSTpB6Arg5dk8yacGB86fHqDR/I3Kkp09H8c4naPv0qGca/G0Ucrw2bz+z1APbm1
oIz6sgeiRLy3xe7BGRoJW1V2GVM3sFsCjDQn8ieOTO3iFuoMVF0R3kWctc+XmBzL
BtGNblpCMCjgTnLYthsI4z2bcurrYxvBUd5Jr6aCKgo3TqR4ZeQnPsJwceVFaJgg
1fgiVXkZp/VV8MKZixKikPvTKesVQ0Pl3h9CHlL76wNd7aBr2hs=
-----END CERTIFICATE-----
Generated at Thu May 1 18:01:16 2025 by rpki-client