Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft
File:                     BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json)
Hash identifier:          aeDtss6qcOrMWopBPdI0TwkcuTQ95pJp2UXUcmlrKz4=
Subject key identifier:   17:41:58:19:85:38:D6:A7:0D:F8:58:85:85:FB:9B:AA:CB:0D:14:3E
Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4
Certificate issuer:       /CN=BB64FDB64281947C3567104C08735A011C6210F4
Certificate serial:       14E7FFE3CA87874BA56EFE22C9E3B305A6B49E6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft
Manifest number:          0343
Signing time:             Fri 28 Mar 2025 21:51:42 +0000
Manifest this update:     Fri 28 Mar 2025 21:46:42 +0000
Manifest next update:     Tue 01 Apr 2025 08:39:42 +0000
Files and hashes:         1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: zzH64W01k51UtMKo9K1XtqIEAU0v0y4EltQRbWU1t7M=)
                          2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: 9uE6J7V5tN/ZsTrO3q+Am6jyw5XlQ4wjJN7rTD3j0nE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:ff:e3:ca:87:87:4b:a5:6e:fe:22:c9:e3:b3:05:a6:b4:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4
        Validity
            Not Before: Mar 28 21:46:42 2025 GMT
            Not After : Apr  1 08:39:42 2025 GMT
        Subject: CN=174158198538D6A70DF8588585FB9BAACB0D143E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:5b:84:77:d7:a0:d8:bd:ca:8a:fb:87:dc:
                    49:1d:d8:77:7d:a1:5c:ab:71:92:df:36:e4:14:f2:
                    17:96:3b:55:35:c7:63:92:df:47:8a:c0:ae:14:05:
                    f7:80:c1:03:ce:ee:ec:e1:d1:25:f1:0d:d6:4a:e7:
                    73:e4:53:de:1f:67:df:0a:50:55:78:f5:bd:eb:01:
                    7b:74:fe:a9:a8:ea:d5:33:4d:00:24:ff:25:7b:f7:
                    bb:76:65:f9:76:74:51:58:06:dc:86:04:41:01:2c:
                    10:4e:2b:cd:11:34:fa:68:e8:26:27:e1:18:20:fc:
                    f0:b3:f9:25:50:f2:a1:06:ba:11:20:4c:c4:98:66:
                    11:24:21:32:0e:5e:b1:95:89:03:91:72:c1:57:ca:
                    be:a6:85:00:4b:d9:fb:fb:93:cf:2b:d6:98:c4:42:
                    2e:06:d6:80:44:b2:a5:78:ba:c5:34:1e:44:4b:b2:
                    85:78:1a:b0:4b:0d:65:47:92:8f:71:85:7c:01:64:
                    a3:4b:56:bd:30:b7:08:00:fe:79:d5:25:c8:25:a0:
                    fb:f2:7c:ef:13:da:8a:1e:9a:1a:02:2f:f5:df:96:
                    b2:9f:cd:21:cf:42:7c:9e:cc:01:66:dc:33:a8:0e:
                    90:e8:a3:fe:a0:a6:f1:14:51:b9:db:5d:03:28:3c:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:41:58:19:85:38:D6:A7:0D:F8:58:85:85:FB:9B:AA:CB:0D:14:3E
            X509v3 Authority Key Identifier:
                keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:43:ee:6e:eb:67:6b:e4:6f:ae:2c:d4:4f:f5:65:56:9e:
         fe:f2:87:06:49:84:0d:a6:53:c1:dd:69:2b:db:70:4a:f6:90:
         79:6f:dc:83:8d:de:20:55:52:5f:db:76:59:f8:dc:bd:b5:06:
         00:4f:0c:d2:00:c5:c8:fe:97:03:ef:c1:06:35:c4:b0:a5:37:
         5c:fc:46:57:65:20:32:12:a1:fc:97:18:70:5b:5f:78:db:b5:
         49:e8:2d:19:78:69:22:17:47:bb:9b:33:28:e2:75:95:4e:40:
         88:8f:a4:92:5c:1d:c1:71:94:75:90:27:d4:64:d8:9a:dc:62:
         20:89:6f:1b:24:40:6a:4c:d1:96:db:ba:7a:3d:68:7f:34:0f:
         06:17:52:fc:fe:50:7d:a0:bb:f5:8e:d9:54:08:29:55:63:43:
         19:5a:25:71:d7:b2:e6:93:b3:dc:59:e3:97:9b:31:ed:6f:b2:
         a1:17:12:73:54:be:78:17:e4:4b:24:c7:85:d1:d4:84:7d:ca:
         23:af:68:48:52:fd:32:48:f6:03:b3:7f:cf:00:80:26:73:8a:
         33:ea:8a:5c:d9:d8:f8:f1:0a:e3:c6:80:a6:fe:63:c0:0b:3c:
         bf:cc:44:1b:4c:a1:75:d3:ec:cb:eb:51:1d:2f:1e:a6:23:a0:
         c5:84:76:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFOf/48qHh0ulbv4iyeOzBaa0nm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx
QzYyMTBGNDAeFw0yNTAzMjgyMTQ2NDJaFw0yNTA0MDEwODM5NDJaMDMxMTAvBgNV
BAMTKDE3NDE1ODE5ODUzOEQ2QTcwREY4NTg4NTg1RkI5QkFBQ0IwRDE0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0uVuEd9eg2L3KivuH3Ekd2Hd9
oVyrcZLfNuQU8heWO1U1x2OS30eKwK4UBfeAwQPO7uzh0SXxDdZK53PkU94fZ98K
UFV49b3rAXt0/qmo6tUzTQAk/yV797t2Zfl2dFFYBtyGBEEBLBBOK80RNPpo6CYn
4Rgg/PCz+SVQ8qEGuhEgTMSYZhEkITIOXrGViQORcsFXyr6mhQBL2fv7k88r1pjE
Qi4G1oBEsqV4usU0HkRLsoV4GrBLDWVHko9xhXwBZKNLVr0wtwgA/nnVJcgloPvy
fO8T2ooemhoCL/XflrKfzSHPQnyezAFm3DOoDpDoo/6gpvEUUbnbXQMoPJ5fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF0FYGYU41qcN+FiFhfubqssNFD4wHwYDVR0j
BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy
ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy
MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj
ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB
MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1sQ+5u62dr5G+uLNRP9WVWnv7yhwZJhA2m
U8HdaSvbcEr2kHlv3ION3iBVUl/bdln43L21BgBPDNIAxcj+lwPvwQY1xLClN1z8
RldlIDISofyXGHBbX3jbtUnoLRl4aSIXR7ubMyjidZVOQIiPpJJcHcFxlHWQJ9Rk
2JrcYiCJbxskQGpM0Zbbuno9aH80DwYXUvz+UH2gu/WO2VQIKVVjQxlaJXHXsuaT
s9xZ45ebMe1vsqEXEnNUvngX5Eskx4XR1IR9yiOvaEhS/TJI9gOzf88AgCZzijPq
ilzZ2PjxCuPGgKb+Y8ALPL/MRBtMoXXT7MvrUR0vHqYjoMWEds8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:58 2025 by rpki-client