Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
File:                     BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json)
Hash identifier:          SwaANw5m+D0t6rwzVLmtREusWn+YcQsLh/GtZK+tTz8=
Subject key identifier:   02:4A:74:C8:BD:AF:B1:ED:B1:1A:0D:E5:5F:08:44:1E:18:88:71:33
Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
Certificate issuer:       /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Certificate serial:       0C440692140D34ED03E9BBF7225EC4DE6427E35C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
Manifest number:          016C
Signing time:             Fri 31 Jan 2025 10:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 09:55:50 +0000
Manifest next update:     Mon 03 Feb 2025 15:31:50 +0000
Files and hashes:         1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: hHfrXQkOzxx77aMoSnU2m804arvqHMS5kjjwWp+EUxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:44:06:92:14:0d:34:ed:03:e9:bb:f7:22:5e:c4:de:64:27:e3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
        Validity
            Not Before: Jan 31 09:55:50 2025 GMT
            Not After : Feb  3 15:31:50 2025 GMT
        Subject: CN=024A74C8BDAFB1EDB11A0DE55F08441E18887133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:ef:5a:e9:62:60:80:ae:18:fc:21:c5:ba:
                    88:94:95:b3:09:c8:04:83:01:03:7a:fd:eb:ac:80:
                    1b:1b:af:84:d1:47:20:7d:8c:c5:cb:4b:a5:95:a0:
                    69:0c:fd:e6:d6:ad:1b:5a:cd:e0:2b:42:7c:b3:59:
                    bd:8a:8d:d9:41:cd:31:af:10:c4:a4:ab:80:a8:06:
                    c9:a8:97:00:6a:c2:a7:b6:7c:a8:57:13:04:96:c9:
                    96:38:43:0d:5f:43:ab:0b:53:e9:4e:20:ac:54:f6:
                    d3:f2:b7:6f:d5:1d:a0:24:a2:8d:a7:fe:c2:44:17:
                    18:59:ea:76:7a:f2:53:4f:c3:9e:d7:55:40:35:83:
                    53:7b:40:a1:4b:da:60:9d:60:43:0b:33:cf:9d:ff:
                    e7:9a:51:28:d5:9d:00:e6:3e:e9:d9:09:99:95:e3:
                    8f:a7:55:f2:80:50:16:5d:57:9f:88:2c:87:4d:29:
                    ab:ad:03:e7:4e:a2:23:d7:c8:0d:8c:57:1e:a9:5b:
                    51:f4:06:86:bd:75:77:92:7a:73:bd:08:74:7a:fb:
                    01:f7:af:1d:f6:73:98:cc:a5:a4:29:a4:c6:15:3b:
                    fe:07:1f:4e:a7:23:e5:65:27:29:16:4c:40:27:14:
                    4e:16:d3:75:41:71:5b:41:4b:53:fd:1c:34:ab:b2:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:74:C8:BD:AF:B1:ED:B1:1A:0D:E5:5F:08:44:1E:18:88:71:33
            X509v3 Authority Key Identifier:
                keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:29:0f:9f:62:3f:b7:e6:dd:ae:84:3d:3c:fb:ab:93:24:
         ac:31:00:1b:c8:f1:c4:11:de:ee:ab:ce:4c:c4:13:9d:e1:62:
         f8:03:15:8f:df:80:74:a0:7c:4d:24:7f:97:54:38:c9:98:fb:
         c6:cd:35:c0:35:d2:09:89:26:91:a2:86:1c:98:51:1b:05:ca:
         76:17:34:b3:39:2c:79:99:ec:31:64:92:7f:b2:a2:e0:03:ed:
         69:7c:7b:70:e8:40:06:47:8c:53:4c:f1:45:5b:fa:c2:ae:53:
         b5:96:8b:3c:98:49:30:22:82:98:d9:fa:d0:a3:a0:a3:7d:f4:
         e3:76:6f:b7:11:12:d6:37:16:99:e8:f2:58:cf:4d:3b:4e:4c:
         30:72:10:7e:db:ba:d7:87:db:16:3b:a8:f1:30:21:f2:5a:03:
         e9:45:6d:bf:ec:98:64:6e:d1:73:43:86:cb:a7:9a:8d:9f:d2:
         78:5d:44:f9:3d:24:91:7f:4e:6b:0a:36:ef:86:4f:e0:73:41:
         d5:ef:7c:b6:44:32:14:46:0a:3b:ae:0c:b0:f1:52:5d:f3:90:
         0a:2f:37:63:2e:e6:8c:63:02:ec:7e:cf:95:29:11:e7:18:f2:
         f2:1c:44:04:98:ec:75:0b:0c:fa:65:8a:2e:0f:f7:17:31:cb:
         52:db:64:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDEQGkhQNNO0D6bv3Il7E3mQn41wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5
M0E0MkJEMTAeFw0yNTAxMzEwOTU1NTBaFw0yNTAyMDMxNTMxNTBaMDMxMTAvBgNV
BAMTKDAyNEE3NEM4QkRBRkIxRURCMTFBMERFNTVGMDg0NDFFMTg4ODcxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJO9a6WJggK4Y/CHFuoiUlbMJ
yASDAQN6/eusgBsbr4TRRyB9jMXLS6WVoGkM/ebWrRtazeArQnyzWb2KjdlBzTGv
EMSkq4CoBsmolwBqwqe2fKhXEwSWyZY4Qw1fQ6sLU+lOIKxU9tPyt2/VHaAkoo2n
/sJEFxhZ6nZ68lNPw57XVUA1g1N7QKFL2mCdYEMLM8+d/+eaUSjVnQDmPunZCZmV
44+nVfKAUBZdV5+ILIdNKautA+dOoiPXyA2MVx6pW1H0Boa9dXeSenO9CHR6+wH3
rx32c5jMpaQppMYVO/4HH06nI+VlJykWTEAnFE4W03VBcVtBS1P9HDSrsn3VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAkp0yL2vse2xGg3lXwhEHhiIcTMwHwYDVR0j
BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw
RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0
MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz
NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE
OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIXAKQ+fYj+35t2uhD08+6uTJKwxABvI8cQR
3u6rzkzEE53hYvgDFY/fgHSgfE0kf5dUOMmY+8bNNcA10gmJJpGihhyYURsFynYX
NLM5LHmZ7DFkkn+youAD7Wl8e3DoQAZHjFNM8UVb+sKuU7WWizyYSTAigpjZ+tCj
oKN99ON2b7cREtY3Fpno8ljPTTtOTDByEH7buteH2xY7qPEwIfJaA+lFbb/smGRu
0XNDhsunmo2f0nhdRPk9JJF/TmsKNu+GT+BzQdXvfLZEMhRGCjuuDLDxUl3zkAov
N2Mu5oxjAux+z5UpEecY8vIcRASY7HULDPplii4P9xcxy1LbZIk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:11 2025 by rpki-client