Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
File:                     00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json)
Hash identifier:          2QffnKdtOcvk4vie8yRtCQUa+C9wKutLe2g6x00KxIA=
Subject key identifier:   C3:9F:19:69:8E:86:23:2E:CC:06:FC:CF:D6:34:14:EE:EA:C0:0C:D5
Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4
Certificate issuer:       /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4
Certificate serial:       79E348CBB5EF90855C2E6BF19A287A6F60FB6FAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft
Manifest number:          74
Signing time:             Thu 27 Mar 2025 11:31:31 +0000
Manifest this update:     Thu 27 Mar 2025 11:26:31 +0000
Manifest next update:     Sun 30 Mar 2025 23:25:31 +0000
Files and hashes:         1: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: Rf1aK9LB89vfgVwvpmr+XB5qIqpUCggXRX9B1DaIEQU=)
                          2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: 3Hm40iWjQ2mGL/ioKg4PmFkyFgospmr9E6G7OvRGuhQ=)
                          3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: iwWTX/EFBujyZQDKZ9Hg7h0CZYdGO5vfAJe8qoIVz88=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e3:48:cb:b5:ef:90:85:5c:2e:6b:f1:9a:28:7a:6f:60:fb:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4
        Validity
            Not Before: Mar 27 11:26:31 2025 GMT
            Not After : Mar 30 23:25:31 2025 GMT
        Subject: CN=C39F19698E86232ECC06FCCFD63414EEEAC00CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:88:18:9e:0e:82:51:a5:1b:04:3f:d8:99:
                    f9:fc:61:c2:c5:e2:41:95:e9:f0:af:16:98:c9:8e:
                    20:a0:43:b9:5c:7d:56:54:a6:4f:c6:67:e1:f1:05:
                    31:c0:ea:94:24:d1:ee:df:f3:d4:dd:1d:76:a7:b0:
                    71:e8:9a:05:4e:9b:1f:2d:94:6f:18:6d:b2:90:80:
                    39:26:88:a6:90:8b:8f:9d:59:69:82:eb:d4:62:79:
                    15:a2:69:b0:4a:80:2e:7f:8b:fb:5c:ac:c0:27:55:
                    9f:25:70:c9:fa:44:0e:4a:26:a8:74:63:c5:49:1a:
                    0b:9b:4c:8c:7a:aa:6a:d7:22:02:03:a5:c8:57:78:
                    df:18:01:33:47:0d:09:03:7b:d4:92:b9:07:7e:75:
                    a2:aa:6d:2b:01:8a:ae:d8:3d:c2:db:65:8b:50:14:
                    75:ab:17:8e:f1:9d:91:c0:33:9f:be:10:ce:a1:b2:
                    1c:c1:84:e0:96:83:f2:24:89:3c:1c:d4:b0:b2:45:
                    3b:9f:1a:82:9d:21:4a:ba:bc:15:eb:41:5e:3c:1a:
                    6a:be:d6:de:d1:c1:f4:93:fb:19:16:d5:1c:ce:a2:
                    56:e2:6d:b4:b0:06:0f:56:3a:95:98:7b:0c:0f:c5:
                    d9:ca:84:0c:64:6c:55:0d:6a:94:5a:d1:97:21:41:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:19:69:8E:86:23:2E:CC:06:FC:CF:D6:34:14:EE:EA:C0:0C:D5
            X509v3 Authority Key Identifier:
                keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:01:27:53:ba:6e:02:c9:50:0a:47:af:c5:c2:7a:94:c6:
         45:8c:9f:f2:da:be:b8:2d:60:66:79:7d:e4:86:78:10:33:66:
         e9:49:db:b7:a7:4a:01:87:bb:85:1c:13:f7:e6:3b:f2:f0:ab:
         dd:dd:f1:b1:68:59:a4:98:d4:cb:f3:51:c0:50:01:97:34:e1:
         5b:51:38:b1:6c:05:df:0d:38:59:31:72:3c:99:bf:ba:a1:59:
         c1:3f:7f:c8:43:df:ff:11:43:24:9a:5b:c2:aa:a6:fe:e8:a5:
         14:67:a5:54:ca:74:19:ad:2c:0a:08:54:4f:b8:ae:bb:b6:05:
         66:b2:a9:f9:80:99:12:b9:bb:61:8c:8b:1c:8d:9c:20:8e:76:
         ec:47:99:3c:aa:7b:49:0f:44:3b:1d:36:16:b9:d6:ac:41:e4:
         1d:d6:86:12:02:7a:c9:ab:e9:c3:9f:7f:f4:69:d2:aa:68:c9:
         26:88:36:ad:e2:40:59:c0:ab:0c:1d:cc:f9:7b:bf:27:9a:79:
         ca:44:bc:16:8c:08:99:c9:d1:0b:39:93:aa:1d:96:c1:1b:b6:
         66:b6:d5:70:90:40:b2:39:15:3d:92:77:0d:99:07:5c:80:7e:
         0c:88:0c:f9:ef:68:fe:97:fb:f1:11:c6:11:a2:ac:69:3f:a4:
         06:d6:ae:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeeNIy7XvkIVcLmvxmih6b2D7b6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4
QzE0NUFENDAeFw0yNTAzMjcxMTI2MzFaFw0yNTAzMzAyMzI1MzFaMDMxMTAvBgNV
BAMTKEMzOUYxOTY5OEU4NjIzMkVDQzA2RkNDRkQ2MzQxNEVFRUFDMDBDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtUogYng6CUaUbBD/Ymfn8YcLF
4kGV6fCvFpjJjiCgQ7lcfVZUpk/GZ+HxBTHA6pQk0e7f89TdHXansHHomgVOmx8t
lG8YbbKQgDkmiKaQi4+dWWmC69RieRWiabBKgC5/i/tcrMAnVZ8lcMn6RA5KJqh0
Y8VJGgubTIx6qmrXIgIDpchXeN8YATNHDQkDe9SSuQd+daKqbSsBiq7YPcLbZYtQ
FHWrF47xnZHAM5++EM6hshzBhOCWg/IkiTwc1LCyRTufGoKdIUq6vBXrQV48Gmq+
1t7RwfST+xkW1RzOolbibbSwBg9WOpWYewwPxdnKhAxkbFUNapRa0ZchQXsVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw58ZaY6GIy7MBvzP1jQU7urADNUwHwYDVR0j
BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB
RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0
NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1
ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF
NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIw8ASdTum4CyVAKR6/FwnqUxkWMn/Lavrgt
YGZ5feSGeBAzZulJ27enSgGHu4UcE/fmO/Lwq93d8bFoWaSY1MvzUcBQAZc04VtR
OLFsBd8NOFkxcjyZv7qhWcE/f8hD3/8RQySaW8Kqpv7opRRnpVTKdBmtLAoIVE+4
rru2BWayqfmAmRK5u2GMixyNnCCOduxHmTyqe0kPRDsdNha51qxB5B3WhhICesmr
6cOff/Rp0qpoySaINq3iQFnAqwwdzPl7vyeaecpEvBaMCJnJ0Qs5k6odlsEbtma2
1XCQQLI5FT2Sdw2ZB1yAfgyIDPnvaP6X+/ERxhGirGk/pAbWrio=
-----END CERTIFICATE-----