Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
File:                     BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json)
Hash identifier:          K57Ff+rtw1xCl/qnAxhkOZLMB2M7j4T3LRMb8GUotWE=
Subject key identifier:   39:10:C2:95:6E:3D:7D:FA:13:3F:86:57:98:56:2E:0F:A0:18:B6:C6
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       68E54566AA7496FAE41BF399A47CF4DEDFF068FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
Manifest number:          0552
Signing time:             Tue 28 Apr 2026 08:27:42 +0000
Manifest this update:     Tue 28 Apr 2026 08:22:42 +0000
Manifest next update:     Fri 01 May 2026 13:27:42 +0000
Files and hashes:         1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: RaAYlliEyM+AjVBiuekKX6xK5u7T6rrUf+1HYX7pFVI=)
                          2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e5:45:66:aa:74:96:fa:e4:1b:f3:99:a4:7c:f4:de:df:f0:68:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Apr 28 08:22:42 2026 GMT
            Not After : May  1 13:27:42 2026 GMT
        Subject: CN=3910C2956E3D7DFA133F865798562E0FA018B6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:c5:f7:eb:67:47:bd:77:22:d8:c8:01:51:
                    7f:a0:df:c9:3e:c1:41:0c:c4:78:28:e7:e3:af:4f:
                    64:63:68:f5:ad:ad:1f:f5:d8:d7:32:4f:6f:0a:34:
                    7b:d3:37:22:d9:50:64:ac:8f:77:b9:81:52:2b:14:
                    a8:50:a8:f2:cd:3f:c8:79:18:f5:1a:d8:34:7a:32:
                    07:eb:8c:83:a7:f4:df:e2:9a:14:6b:b9:8f:70:b2:
                    29:13:7f:00:95:14:c0:6b:1d:d8:e5:05:ac:c6:8e:
                    62:0c:55:17:8e:6e:a4:43:64:64:85:c0:d4:16:f5:
                    fb:24:93:aa:81:21:1c:c6:95:89:b3:1c:24:5e:d8:
                    ce:1b:3a:85:4e:af:17:d1:ea:f0:9d:39:ce:2d:64:
                    a3:ad:75:ad:3d:13:4f:ca:1e:8a:3d:61:8d:7a:c2:
                    4b:2f:ff:63:9e:84:39:33:73:8f:bf:bf:9e:e6:79:
                    c5:c2:d4:9a:c3:e2:06:85:2d:6c:ce:53:88:9e:1e:
                    c8:66:71:36:0b:e6:11:d1:3d:af:37:35:9c:3b:cb:
                    43:c2:71:ae:5d:21:2b:41:bc:f9:71:cb:5f:15:38:
                    4f:ec:5e:b2:3a:a2:6b:eb:c3:29:2d:04:42:c5:c8:
                    8d:19:1f:12:27:cb:3e:99:c2:55:a2:8e:5d:50:99:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:10:C2:95:6E:3D:7D:FA:13:3F:86:57:98:56:2E:0F:A0:18:B6:C6
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:79:5b:c5:84:ba:bd:6c:7b:50:13:0d:2a:58:45:bc:74:
         d8:bb:79:57:27:fa:9b:70:07:1d:a1:53:db:1d:df:5c:30:c2:
         99:99:d1:d3:74:c0:f4:5e:9a:fd:84:a0:c7:89:29:56:bb:b8:
         57:5a:69:80:bc:60:8e:a8:bb:d4:11:aa:2f:50:b7:14:16:59:
         d0:69:da:dd:90:96:af:f3:4c:c8:91:11:71:35:88:9b:76:bc:
         00:a6:70:03:df:73:69:3d:60:70:a1:49:e9:25:3e:59:83:f0:
         cb:12:68:2a:8e:43:e1:5d:ed:cb:3c:8b:a8:ef:b7:c9:28:7d:
         28:f1:be:eb:06:91:fa:f9:d0:85:86:4e:05:bb:c9:46:60:d8:
         ec:51:d1:e0:2a:e6:fa:1e:73:2d:e5:65:e6:45:31:70:77:72:
         1d:b8:21:40:21:32:73:6c:96:c0:61:58:89:06:85:ee:df:ab:
         68:54:28:15:bb:32:69:5a:a5:b4:27:26:c6:ea:1e:e6:12:a0:
         47:21:a9:74:06:9a:27:7e:78:41:41:5f:8f:ed:0f:3a:2b:04:
         e9:4f:d2:23:4e:58:0d:fe:aa:64:9c:37:e2:ec:ed:55:49:1a:
         53:71:ae:2c:a8:45:71:f8:45:a8:80:26:5f:2d:b7:b9:32:5d:
         61:d2:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----