Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
File:                     1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json)
Hash identifier:          XaXMJ9I42WfTxEG1dii+8i0shPIoHJSpRaxgt/eI3AI=
Subject key identifier:   7D:25:58:D0:1C:75:F6:5A:8D:BE:24:D0:D7:4A:8D:5F:F6:6D:2A:0E
Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
Certificate issuer:       /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
Certificate serial:       463231353F55E46C86B05AF175024D04172B8259
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
Manifest number:          0269
Signing time:             Fri 28 Mar 2025 07:22:18 +0000
Manifest this update:     Fri 28 Mar 2025 07:17:18 +0000
Manifest next update:     Mon 31 Mar 2025 10:53:18 +0000
Files and hashes:         1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=)
                          2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: jwYCdMwinqOPgrnJOUvgq8BstsYU6VLQyEUaebXD0B0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:32:31:35:3f:55:e4:6c:86:b0:5a:f1:75:02:4d:04:17:2b:82:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
        Validity
            Not Before: Mar 28 07:17:18 2025 GMT
            Not After : Mar 31 10:53:18 2025 GMT
        Subject: CN=7D2558D01C75F65A8DBE24D0D74A8D5FF66D2A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:cb:66:6f:cd:6b:75:23:4f:b1:20:48:f9:
                    bd:53:66:75:d1:e6:85:50:91:97:46:02:49:d6:1c:
                    4c:b8:c4:c1:81:01:89:fc:65:fc:52:8e:a4:8d:a6:
                    f0:d0:ea:7c:e3:a9:9f:19:6a:c9:c5:db:dd:9a:f4:
                    1e:5f:32:d0:c9:c5:65:74:bd:4f:61:8f:eb:b9:82:
                    31:71:a2:da:cb:79:06:04:89:a3:b9:88:3b:72:75:
                    91:c4:30:c7:68:49:ba:78:e9:84:9c:8b:f3:cd:98:
                    a6:0d:f4:5d:fe:17:5c:4f:8b:9b:6d:9b:ea:d0:b2:
                    80:f7:36:b2:b9:36:2f:8f:88:02:aa:05:e5:ff:9d:
                    b2:f9:3d:ce:23:2f:c7:86:08:c9:f7:96:7c:f1:27:
                    d1:e8:9c:bc:f3:07:24:d3:1a:23:96:7d:a9:aa:ba:
                    10:44:c5:1a:4b:97:f1:7d:a9:51:2a:b1:57:cf:f1:
                    e0:4d:c9:3b:e6:51:df:e0:0d:51:4f:6a:39:88:ad:
                    74:b3:74:61:7c:7a:b8:8a:c7:d8:8a:2d:51:e2:2e:
                    96:8b:20:b7:b4:eb:76:6b:ea:1c:d3:8b:31:89:53:
                    43:15:d5:7c:62:de:6a:f8:1b:f8:f2:bd:83:7f:44:
                    20:6f:e4:38:aa:7d:74:e2:05:b9:00:d6:00:03:a7:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:58:D0:1C:75:F6:5A:8D:BE:24:D0:D7:4A:8D:5F:F6:6D:2A:0E
            X509v3 Authority Key Identifier:
                keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2d:f7:63:7f:ac:4e:f6:d9:43:90:86:7c:92:4d:84:aa:cb:
         74:a2:81:72:e6:01:bd:94:3c:22:9c:4e:72:8e:6f:e9:29:61:
         62:91:b3:04:80:fe:56:e2:3d:24:7e:3a:6c:87:89:31:29:e3:
         e6:01:96:6d:cc:7e:d8:77:e5:0f:5f:dc:92:d4:60:1c:4a:fc:
         35:ac:38:c0:e1:12:44:cf:cc:4c:dc:ac:2a:cb:1e:0f:56:c4:
         a0:74:39:3b:bd:1a:1c:c0:12:1a:ea:89:99:22:f9:0d:90:aa:
         d9:d4:65:4d:38:79:be:45:c8:00:27:8f:08:7e:21:0d:52:51:
         0b:d2:23:65:8c:d2:fe:1d:fc:e9:19:bd:85:cd:bf:69:e6:cb:
         e4:dd:87:0b:35:d4:a4:c0:9e:f2:22:76:b8:55:42:ad:9f:19:
         5d:9b:9e:c8:66:62:29:58:31:79:82:a2:cb:e7:ed:de:ca:a5:
         d3:ed:b4:4a:92:56:a7:9e:f2:9b:fa:16:02:cf:55:0f:4c:11:
         e5:3b:f5:1b:f1:2d:14:83:f0:a6:ec:19:7e:01:03:ed:dc:c2:
         ea:81:63:ae:91:c1:db:b5:99:bf:6b:e9:bc:06:43:d3:b2:49:
         1d:0e:6d:15:c5:bb:5b:19:d4:c8:d6:79:4b:c8:dc:7f:fe:f7:
         7e:74:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----