Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft
File:                     8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json)
Hash identifier:          ERpAqddBMncZPec4XQvCI3Zk5Fl0GaA6XdUW3fnpvMk=
Subject key identifier:   DD:2B:19:DD:21:3F:77:61:F6:71:39:D4:96:AF:1C:F7:66:D9:8C:35
Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD
Certificate issuer:       /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
Certificate serial:       320A05D5C28A33D6B13FE7632E16A85761FDFA36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft
Manifest number:          04BB
Signing time:             Sat 29 Mar 2025 03:22:03 +0000
Manifest this update:     Sat 29 Mar 2025 03:17:03 +0000
Manifest next update:     Tue 01 Apr 2025 05:20:03 +0000
Files and hashes:         1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 3IyEShEeofzEZUvsp/9YLk7A3IOTw4ew58ZAJ0GoCYA=)
                          2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: Y6c/qlkdFUZiUAWXd8Af98xAx9jFmsdKgR2Wq84Wkuo=)
                          3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 8iuxlfUHlShVLXZPa/rNG/34daU402Tq6bUHq+eNs5k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:05:d5:c2:8a:33:d6:b1:3f:e7:63:2e:16:a8:57:61:fd:fa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
        Validity
            Not Before: Mar 29 03:17:03 2025 GMT
            Not After : Apr  1 05:20:03 2025 GMT
        Subject: CN=DD2B19DD213F7761F67139D496AF1CF766D98C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:b0:79:d1:bf:e8:74:cb:f9:aa:14:84:e8:
                    67:3c:c3:4f:b9:8b:06:06:ae:d2:b4:40:5b:85:54:
                    e6:5d:50:a7:55:1f:62:6b:83:f4:ed:9f:56:53:34:
                    98:c5:4c:f3:45:61:a8:91:c3:d9:85:f1:85:5d:36:
                    7b:ea:06:53:cc:7b:34:06:a6:f5:8c:c9:5c:e6:4b:
                    5e:0f:99:77:7c:9c:87:60:ef:88:f5:d8:6e:a2:7c:
                    5c:a6:46:a8:3b:63:04:93:f7:17:da:ec:b8:45:12:
                    ec:33:f0:42:90:ed:70:eb:ab:3c:54:1b:5f:65:7a:
                    7a:71:7c:16:32:cf:f3:0f:fe:fa:d6:9d:74:5b:36:
                    79:13:92:eb:bb:df:92:fb:ac:91:0d:91:a3:81:b6:
                    de:63:60:04:8b:5e:4b:56:f0:01:be:6a:fc:0a:34:
                    a1:cf:ca:68:73:ab:37:16:97:f2:de:a1:c8:7b:fc:
                    4b:8f:7c:01:5b:89:f3:9c:87:29:be:ce:b4:94:4b:
                    83:3f:63:f3:a0:58:e9:63:fe:43:7a:47:0e:ef:6b:
                    49:16:97:c2:b5:ca:b6:78:b0:9b:42:7d:f4:94:de:
                    a8:02:27:ea:6e:18:65:b6:7d:82:41:86:b2:46:9e:
                    94:b1:9a:48:a6:35:e2:6d:7a:9b:19:43:6a:4c:03:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:19:DD:21:3F:77:61:F6:71:39:D4:96:AF:1C:F7:66:D9:8C:35
            X509v3 Authority Key Identifier:
                keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:19:c0:25:29:43:3f:79:1c:fe:c6:42:62:a5:42:19:09:
         dc:e2:d3:9b:5b:97:c1:c6:e0:52:1c:21:cb:0c:61:f7:0b:89:
         12:ce:ca:97:fe:16:fa:8e:06:c3:80:46:1a:dd:69:a6:c9:39:
         8b:3d:9d:90:b2:4b:72:9e:3d:ae:c7:5b:b1:26:03:09:af:8c:
         5b:aa:2e:47:64:ca:11:9a:a1:40:8a:d9:15:52:60:61:21:d3:
         ff:7c:88:fa:5d:56:fa:ab:cf:ae:96:03:80:49:27:e4:fe:8a:
         93:1a:2e:6a:59:66:c8:c4:6e:d9:07:95:5d:42:58:5c:e4:c4:
         ff:19:77:60:d3:4a:e6:a5:de:9d:6b:10:bf:76:29:ed:f9:d1:
         7b:11:38:62:b2:73:25:f1:82:f9:6d:eb:90:17:93:2b:4e:35:
         95:98:51:8c:08:d6:79:ca:55:94:d9:ab:f8:0d:76:09:46:a1:
         b8:88:e7:cb:9b:ab:f8:d1:05:1d:b6:77:67:50:c5:d4:09:65:
         3f:17:4d:59:b3:05:41:93:e3:c1:c3:d7:07:df:7a:af:0e:b5:
         da:a3:5b:84:7a:87:5c:11:e5:8b:a2:b4:d3:df:0a:47:dd:23:
         4e:33:83:0d:7c:31:db:7b:8b:43:bd:d8:c1:98:d9:3e:0e:43:
         6e:20:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:16 2025 by rpki-client