Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
File:                     B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json)
Hash identifier:          3KuCrfRSJvAyvKpSwiZ/rntQpml/ML0pm+4L9j+NR6w=
Subject key identifier:   50:A2:A5:6D:E9:96:0D:85:C3:D1:55:27:82:8C:AE:AF:BC:A1:0F:4C
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Certificate issuer:       /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial:       258D31429A7CAB46D9F57A5E262534CE6C316AC6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
Manifest number:          012F
Signing time:             Thu 30 Jan 2025 15:32:08 +0000
Manifest this update:     Thu 30 Jan 2025 15:27:08 +0000
Manifest next update:     Mon 03 Feb 2025 00:23:08 +0000
Files and hashes:         1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=)
                          2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: Usm/nplDmysnQWc4IwdSuTXg0MHdJMOF88HrxHSPxpM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8d:31:42:9a:7c:ab:46:d9:f5:7a:5e:26:25:34:ce:6c:31:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
        Validity
            Not Before: Jan 30 15:27:08 2025 GMT
            Not After : Feb  3 00:23:08 2025 GMT
        Subject: CN=50A2A56DE9960D85C3D15527828CAEAFBCA10F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:88:90:d5:8d:d3:dc:56:6f:37:87:11:d9:
                    40:60:0d:cb:e0:f6:03:ab:9d:9d:b4:aa:ca:58:37:
                    22:9b:10:11:d8:64:4a:32:a0:c3:f0:e4:44:c1:85:
                    a1:f2:49:a6:77:fe:61:a8:27:40:69:5a:77:a1:43:
                    dd:c6:1e:41:43:4d:9b:c5:93:8f:09:19:fe:af:64:
                    41:3e:18:56:ae:3e:67:1e:cb:bf:77:ea:18:27:97:
                    73:14:54:22:e1:0d:a3:66:1f:19:a6:0a:ab:ec:68:
                    bd:3d:7c:3c:85:37:f3:ec:1d:93:2f:1f:b6:d3:58:
                    d6:af:db:ae:c6:d7:04:c5:ee:c3:3e:4f:3b:f1:68:
                    9a:9b:ef:05:57:f4:e6:a6:68:68:84:12:b9:67:6d:
                    ed:07:5c:78:95:76:7c:89:44:e0:0d:c5:57:bb:66:
                    ba:bb:07:72:89:d7:76:d5:55:1b:b9:03:bf:b1:03:
                    c1:e0:a5:16:35:44:f3:c4:df:65:e2:a2:e8:4f:ab:
                    94:77:21:9e:03:d7:47:ce:4e:d6:aa:5d:a8:78:be:
                    b2:28:54:55:29:08:05:50:01:50:ae:4d:49:15:84:
                    f5:e0:12:85:a4:80:bc:26:b5:7d:90:c1:ec:59:0f:
                    2e:b2:27:bf:84:3b:8a:11:13:2f:1a:a9:36:a1:97:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:A5:6D:E9:96:0D:85:C3:D1:55:27:82:8C:AE:AF:BC:A1:0F:4C
            X509v3 Authority Key Identifier:
                keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:cc:a5:61:eb:d5:66:ff:ef:2d:45:a4:92:83:45:5b:ac:
         b6:e5:80:2b:eb:a2:31:d9:cf:d5:05:ed:f9:a2:d1:73:3a:49:
         fd:47:e3:10:81:e6:16:83:3d:9f:a5:16:99:6b:1d:6e:5d:c1:
         0c:41:42:cb:f8:c5:65:02:9e:14:5e:58:e2:f1:07:c6:a9:65:
         e6:87:32:23:1c:d9:b2:e0:bd:57:35:f9:c5:ec:cd:1e:1a:39:
         2b:fa:b0:49:f2:69:d9:69:d7:54:5d:98:df:8d:0a:08:1a:c4:
         77:06:27:b3:63:fa:ec:12:b1:16:e7:16:50:4d:88:72:1b:02:
         1e:89:d2:2c:29:4d:3c:b7:36:27:45:cb:ac:04:9a:6a:93:95:
         42:e6:8b:4a:d6:68:5e:f5:53:b0:1a:d4:90:43:fa:cd:ac:18:
         a7:c8:79:a0:1e:2b:45:d9:6b:06:84:d4:b3:d9:d8:f3:52:75:
         78:d5:53:63:28:3d:8d:c7:c5:70:6f:b8:2e:0c:6a:1f:45:b2:
         1d:2e:4d:50:f9:7e:ea:2e:6f:b1:70:12:c0:3d:7d:c8:bb:32:
         90:79:e5:13:38:8b:f1:7f:0d:70:19:1b:39:57:c1:67:73:3c:
         f0:88:69:8a:3b:ea:8b:43:d3:b9:62:26:f5:3f:44:b4:c8:ba:
         b5:2f:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:32 2025 by rpki-client