Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
File:                     7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json)
Hash identifier:          tFU3j3OnNXn6p+GIfXfnIhG8ld3NxI/UoaeliEsmwNg=
Subject key identifier:   13:E3:0B:CC:FB:1B:5B:2D:B6:59:F8:DD:C2:3E:5C:72:75:7A:88:06
Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99
Certificate issuer:       /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
Certificate serial:       36B0FF0694D7035F04BB3A9C6BD2297ED73DADFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
Manifest number:          D7
Signing time:             Thu 30 Jan 2025 17:11:41 +0000
Manifest this update:     Thu 30 Jan 2025 17:06:41 +0000
Manifest next update:     Sun 02 Feb 2025 20:56:41 +0000
Files and hashes:         1: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: KjiE2BUKhr2WLzDy3qSKYDQ/DW61ulbzRm4Bu7wyDmo=)
                          2: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 18Hkz/XR+bc2+4hLanlNPrrmjy5COqEUY7Uy7tOHT7Q=)
                          3: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: smWnJtZ/R67U2ULFGK7Jk8VcGNSJ3hQ7lt79pWbaLFY=)
                          4: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: goBdU2IBnHy9wcOLLQQ/OCQZydl32zY5z0yZl8PUzN4=)
                          5: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: ORKr4ha8P6tv9X5zA4ht6mjFvslVRbnM+gzBN7aD/Sw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b0:ff:06:94:d7:03:5f:04:bb:3a:9c:6b:d2:29:7e:d7:3d:ad:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
        Validity
            Not Before: Jan 30 17:06:41 2025 GMT
            Not After : Feb  2 20:56:41 2025 GMT
        Subject: CN=13E30BCCFB1B5B2DB659F8DDC23E5C72757A8806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:86:bd:9a:d1:d0:30:c7:b1:76:47:2f:87:
                    57:ce:d0:47:8a:e0:bf:00:22:63:64:08:ac:b6:aa:
                    74:68:05:4f:b0:56:86:32:66:0f:4e:19:a2:5d:3a:
                    a4:eb:f4:11:94:2f:7e:96:15:d8:ee:d2:f2:54:f0:
                    fc:2a:51:3c:97:71:03:66:fb:e8:ca:74:12:64:15:
                    0d:2e:0b:8d:9c:bb:bb:83:e4:04:db:b7:67:e9:6e:
                    72:c7:e3:8c:54:9e:56:29:af:48:c4:93:1f:da:e1:
                    c8:5b:08:1b:0e:54:3c:8e:be:fc:59:12:df:a3:28:
                    88:cc:30:76:33:87:26:fa:7b:03:9b:c5:e0:67:62:
                    a8:2a:f4:04:ad:7d:e2:5a:86:a1:b1:90:aa:14:24:
                    55:38:48:d9:bc:02:a7:4a:7f:da:9b:c1:63:d4:07:
                    4a:0b:99:2f:28:f8:ae:17:0d:88:25:05:2b:2f:0b:
                    32:be:14:21:26:85:c7:7d:7e:16:79:b6:21:bb:b5:
                    20:dd:6c:79:9f:26:41:9e:8b:9b:4a:59:b5:ab:e9:
                    cc:51:da:bb:3f:f4:7a:ef:93:6b:34:9b:0c:e5:18:
                    3f:1d:f2:6a:07:2d:97:c8:ed:11:cd:08:85:3d:1a:
                    86:cc:75:5f:98:84:fb:b8:c0:08:54:23:87:0a:26:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:0B:CC:FB:1B:5B:2D:B6:59:F8:DD:C2:3E:5C:72:75:7A:88:06
            X509v3 Authority Key Identifier:
                keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:57:b2:04:5d:f8:6a:4b:db:5d:fb:0a:b3:54:08:dc:35:
         74:82:9a:47:db:a4:68:e4:2a:e2:42:4a:77:29:7d:a4:10:81:
         72:e7:e4:eb:bd:b3:8e:3c:ec:0b:93:09:84:35:61:84:ff:4d:
         94:1b:d8:db:9d:66:28:70:6a:07:56:b3:c4:bc:56:86:53:46:
         00:ad:91:0d:a4:04:4c:c0:f1:0c:f7:03:d0:9b:19:6d:26:8a:
         bc:a6:39:3c:45:64:46:92:ff:fe:66:a5:67:ac:f9:f0:80:32:
         b4:9b:13:9c:9c:48:3a:40:3c:c1:f4:12:9f:97:be:85:af:0c:
         57:83:1c:5f:02:98:bb:70:17:22:1b:52:73:7e:0a:9c:c3:c4:
         46:7d:4f:cb:b5:c6:19:df:a5:03:bf:c9:d6:27:dd:fc:51:1a:
         6d:ab:30:5f:c5:71:20:d4:47:2c:ba:39:61:75:09:b5:2a:5c:
         6e:cb:61:84:0d:8a:a4:fc:37:8b:28:12:9e:37:6d:7f:db:7c:
         7b:bd:78:ee:ee:6a:d7:aa:2a:23:a0:90:b9:98:4a:fb:7b:6b:
         2b:c8:41:c5:6c:c4:6d:be:37:ca:45:0d:19:84:88:52:ec:a4:
         aa:09:d7:1f:ab:52:3d:8f:ff:be:f3:95:f8:ea:19:6b:33:1c:
         bd:b3:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----