Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft
File:                     BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json)
Hash identifier:          mJxkzdXvVzn8rZgEUl3V/d7HWtzpfB5EdOze4OKVFnQ=
Subject key identifier:   1C:FC:1C:9A:F8:36:0B:7C:26:47:3B:5F:9E:34:46:16:8A:1D:93:EC
Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73
Certificate issuer:       /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73
Certificate serial:       36C4927FF12DF21238216BBD209CEDC9FE9FB4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft
Manifest number:          01C1
Signing time:             Thu 27 Mar 2025 12:51:22 +0000
Manifest this update:     Thu 27 Mar 2025 12:46:22 +0000
Manifest next update:     Sun 30 Mar 2025 15:15:22 +0000
Files and hashes:         1: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: W9SlEeOl3X8ocbNoZ4DhRgPCmpzG9cK0+5yGb5bLv0Q=)
                          2: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: beyY00a00VBGERsYQlRNcF1U0dKVBEdyWazQu6YOtc8=)
                          3: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: /qWK0LcoSyBB17DKdn5S/rBbFGOn/HEahhhfy2Twaq4=)
                          4: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: nj7K3TyzpAYepH2YqD93E52kYSW1ewdu9JWdj6rCNbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:92:7f:f1:2d:f2:12:38:21:6b:bd:20:9c:ed:c9:fe:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73
        Validity
            Not Before: Mar 27 12:46:22 2025 GMT
            Not After : Mar 30 15:15:22 2025 GMT
        Subject: CN=1CFC1C9AF8360B7C26473B5F9E3446168A1D93EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:64:3d:d9:04:6d:b3:c0:36:f2:ed:62:9d:
                    cf:f3:08:33:be:5f:ec:d6:0d:09:31:45:e6:14:f8:
                    64:f8:e6:ee:75:9c:52:6b:32:69:a6:26:fd:e0:f0:
                    04:73:d4:3b:93:9f:70:33:be:b9:0c:c6:bb:1c:f3:
                    b8:9d:1c:5b:af:77:da:39:0c:85:39:71:0f:6e:57:
                    75:37:3d:1d:b4:df:70:3c:e2:46:a7:ae:07:b1:b4:
                    19:ac:be:ab:d1:a3:24:35:6e:0d:16:f5:6e:3a:52:
                    d0:25:fc:ab:a0:c2:c4:c7:07:7c:1e:92:e6:a7:5d:
                    22:d1:1b:ea:74:b0:a4:5b:bd:22:13:71:35:11:96:
                    c5:ce:d3:b5:ab:ee:8e:e0:88:f9:7f:0d:5b:59:cd:
                    af:43:1c:d7:89:cf:7c:3f:8c:d6:26:57:81:36:89:
                    1f:06:bd:47:44:b0:b0:33:57:f7:5f:5c:83:f5:40:
                    ca:99:86:05:da:1b:6b:57:76:34:96:d9:1d:89:83:
                    36:13:2e:86:42:26:f0:89:aa:b0:bb:b2:b8:52:77:
                    35:06:fb:7b:27:1f:54:bd:c0:34:98:a2:b8:7a:e6:
                    1b:6a:91:4f:33:6d:65:2f:d1:cf:fc:50:e5:1b:02:
                    42:3d:5f:30:86:13:22:be:c4:e5:a2:0a:84:12:19:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FC:1C:9A:F8:36:0B:7C:26:47:3B:5F:9E:34:46:16:8A:1D:93:EC
            X509v3 Authority Key Identifier:
                keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:81:6f:55:9c:9d:5d:b6:3e:ed:71:9f:4d:1c:d3:c2:a9:49:
         ec:1b:6a:b2:a4:38:a0:29:24:57:02:e1:4c:a9:82:f5:96:c2:
         c9:2b:b5:6e:8d:4f:c3:99:bd:88:05:fc:6b:fe:77:b2:37:b7:
         77:9c:36:2d:27:8a:ce:e7:83:b9:ed:5b:c0:c0:8b:18:6b:a3:
         25:31:41:82:d9:97:bf:b9:b0:88:8b:14:2e:58:a2:7d:8c:3b:
         4c:a6:30:b4:18:7e:9e:dd:93:6a:9c:d0:3b:f5:f1:6f:2a:29:
         34:a8:6b:38:3b:2c:aa:fd:d1:81:aa:57:ef:f3:23:1a:02:32:
         a8:d6:89:cf:ae:04:ee:3e:e0:b0:ba:25:da:1f:4e:3c:af:89:
         10:1e:1f:61:e6:ad:23:5c:d3:6d:68:31:38:f3:3d:fe:95:47:
         31:f7:73:81:f6:ac:c2:bc:94:7a:b0:c1:03:52:84:e2:70:d6:
         69:71:99:a4:3c:e1:d1:84:a3:8d:cf:70:b5:6f:69:ab:83:19:
         e1:c9:3a:76:47:63:02:44:32:45:43:a0:17:3f:7e:48:a5:f6:
         e7:1f:5b:de:73:22:44:79:86:28:3c:99:2b:e3:90:29:2a:ba:
         41:b5:58:9f:14:50:ba:a5:8c:42:60:00:d5:70:dd:55:2e:6b:
         95:ce:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----