Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
File:                     A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json)
Hash identifier:          SYY4GuYuCClxUUe48DLvN5TkAyF+Id8oj0RUgO3vJbA=
Subject key identifier:   4B:99:27:D9:6A:FB:8B:54:8B:6C:84:62:DC:42:DE:FE:EA:25:48:60
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Certificate issuer:       /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial:       6645FF1CF24C0BB7E36D7B1949C4C67723DFB08F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
Manifest number:          BF
Signing time:             Fri 28 Mar 2025 18:21:32 +0000
Manifest this update:     Fri 28 Mar 2025 18:16:32 +0000
Manifest next update:     Mon 31 Mar 2025 19:21:32 +0000
Files and hashes:         1: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=)
                          2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: o04aeSE5UoU9eagTKxtPL57KfRYOew/56TXJ4AtP8nc=)
                          3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=)
                          4: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:ff:1c:f2:4c:0b:b7:e3:6d:7b:19:49:c4:c6:77:23:df:b0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
        Validity
            Not Before: Mar 28 18:16:32 2025 GMT
            Not After : Mar 31 19:21:32 2025 GMT
        Subject: CN=4B9927D96AFB8B548B6C8462DC42DEFEEA254860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:ee:40:af:89:d7:e8:4a:0e:1e:26:87:ba:
                    94:2b:58:cf:2a:db:fa:cf:04:3a:95:a7:17:25:f4:
                    f2:5f:8c:55:6f:44:00:56:e4:9d:47:7c:b1:a3:7d:
                    ba:4f:1a:63:c5:67:13:50:61:67:b8:c8:0d:4f:06:
                    58:4d:f2:bc:c9:04:f1:6d:4d:8c:59:59:80:cb:f2:
                    27:b0:54:5f:7a:34:32:c5:32:ab:cd:7e:2b:29:b3:
                    c9:85:a9:29:9d:17:b5:6a:97:51:c4:28:bc:90:f3:
                    42:40:89:82:94:d1:bc:a6:a9:c0:3d:03:bc:20:98:
                    28:6b:1c:6f:02:25:c8:1c:7a:6a:3b:10:76:73:08:
                    9f:9d:d9:b3:53:f2:ff:35:2b:15:b0:4e:56:ce:04:
                    e9:6a:33:13:1a:30:3d:90:9a:e3:54:f1:44:fd:73:
                    1b:a5:56:af:75:74:5d:70:e2:de:85:31:b9:f0:b3:
                    2a:43:d9:16:f2:45:26:5e:60:02:bd:a0:c8:53:1f:
                    6e:36:cf:35:b1:2c:30:96:da:6f:2d:16:74:51:ee:
                    e5:84:dd:1a:43:77:e0:59:57:ba:7e:fa:27:89:8c:
                    c9:bb:1f:85:b3:e7:aa:00:49:f6:aa:ff:dc:4e:da:
                    ef:93:d2:b7:ab:0a:89:ee:b7:40:05:1a:55:93:cc:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:99:27:D9:6A:FB:8B:54:8B:6C:84:62:DC:42:DE:FE:EA:25:48:60
            X509v3 Authority Key Identifier:
                keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:07:14:a7:10:c9:98:f8:20:cd:2d:32:f4:42:c3:17:27:
         74:d7:83:6f:f4:67:3d:2e:59:08:28:6b:04:03:f0:6e:dc:36:
         44:d5:13:9f:16:5f:ba:17:66:73:3a:fd:33:dc:d8:fe:c0:98:
         f4:cc:3b:8f:35:64:39:05:f9:a7:7a:32:9c:45:e2:3e:a1:9f:
         87:10:9d:fb:60:d3:49:a7:07:65:f7:8c:1f:62:0e:5a:c0:ae:
         51:17:1a:56:95:b1:54:4c:2e:e5:b3:3f:ab:51:99:26:ad:52:
         12:70:ec:33:7a:1d:09:ae:3a:69:89:61:ae:e5:81:2b:05:9e:
         6c:9d:7f:3e:86:fb:30:9d:d6:ff:ad:fc:b7:9d:e6:32:26:d2:
         72:05:55:36:3f:a7:47:bf:9f:54:53:b2:34:e1:cd:1d:d5:b8:
         06:b9:17:d3:26:dc:3b:9a:34:de:f3:71:84:35:8c:c4:3b:d9:
         a7:f3:b8:30:17:04:60:28:10:ca:89:18:3e:b7:bd:43:4d:8a:
         38:7b:29:98:52:a7:47:44:8e:d8:c0:fe:b2:a6:48:ee:65:b5:
         66:36:60:0a:c8:c5:4e:7d:96:68:3b:f2:35:76:38:44:21:68:
         fa:48:82:b8:8c:ba:0b:2c:30:16:ba:fb:07:18:f1:ee:c6:b1:
         a3:01:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:43 2025 by rpki-client