Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft
File:                     2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json)
Hash identifier:          5v/4xfhNfizJI4vPu1sunfEn1wN6qetGcA+6l6VrXbo=
Subject key identifier:   A1:74:B5:C2:AD:FE:35:BE:71:4F:33:77:48:B9:69:4B:CC:5D:73:CF
Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA
Certificate issuer:       /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
Certificate serial:       4EA5E53AEE912FFB9D4007605983782C811BC320
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft
Manifest number:          04A7
Signing time:             Thu 30 Jan 2025 19:21:55 +0000
Manifest this update:     Thu 30 Jan 2025 19:16:55 +0000
Manifest next update:     Mon 03 Feb 2025 02:19:55 +0000
Files and hashes:         1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: vzqh/DIiKaxTtSHfzibTju1MXYLVCm6nZTZLoRiAMXA=)
                          2: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: vwG6rdNeDAh4jG1/O0P49gXsPwynq5he4dtgM3d7KkM=)
                          3: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: JKL8GItUihRrdCkSJOOVhm5LQYoYemeFawFD+HGbn0Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a5:e5:3a:ee:91:2f:fb:9d:40:07:60:59:83:78:2c:81:1b:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
        Validity
            Not Before: Jan 30 19:16:55 2025 GMT
            Not After : Feb  3 02:19:55 2025 GMT
        Subject: CN=A174B5C2ADFE35BE714F337748B9694BCC5D73CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d2:4b:94:c4:ba:48:2d:cd:5d:24:b5:ba:2e:
                    e7:50:8d:aa:aa:10:7b:0f:60:af:7d:9c:63:2c:bb:
                    ad:9e:a1:10:94:6a:95:df:6f:76:e8:c9:f1:b1:5d:
                    52:e3:04:f1:cd:6a:4a:eb:ab:29:bb:95:f8:96:ad:
                    be:b1:34:fa:d6:51:0c:74:0f:01:8d:b4:d7:0e:8a:
                    c3:52:3e:bc:56:f4:78:b4:16:b8:09:a5:77:7a:fa:
                    a1:2c:56:88:3e:51:bb:31:b6:4d:35:b9:76:87:1b:
                    f1:85:88:70:5d:bb:30:52:f0:1f:47:d7:45:73:b9:
                    50:80:c7:8d:e9:bd:fe:6a:b2:e3:74:3d:63:fa:6c:
                    c0:43:a6:9a:17:37:fa:84:c7:15:c1:95:0a:83:aa:
                    69:a6:4b:5e:0d:a9:9e:35:e9:c1:8a:c1:bd:69:cd:
                    0f:d1:f9:a1:0c:5e:fe:d0:f5:34:9b:91:ab:e1:6d:
                    ab:b5:06:d1:ad:fa:28:95:1e:5f:be:72:64:48:2a:
                    b9:00:21:4e:1f:c6:1c:47:08:b3:fe:b4:65:68:8c:
                    49:25:5d:0f:3c:86:09:f2:0c:de:a2:35:06:f3:85:
                    5a:c8:21:04:11:e8:7e:00:c6:e8:75:5e:8a:82:1c:
                    c3:e1:ee:29:d2:4d:df:87:b2:f9:2a:3c:e3:46:90:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:B5:C2:AD:FE:35:BE:71:4F:33:77:48:B9:69:4B:CC:5D:73:CF
            X509v3 Authority Key Identifier:
                keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:dd:dd:c8:88:0e:54:ca:39:5e:83:d4:9c:52:22:98:24:ad:
         4a:f5:6c:80:dc:56:45:da:01:15:ff:5f:66:03:f2:f8:56:4d:
         ae:c6:b2:3d:c0:fe:91:5c:95:df:bb:cf:c6:34:59:6d:32:a6:
         e3:1b:41:b7:a8:6d:af:5f:96:74:32:68:47:1c:65:40:69:4e:
         34:98:5a:bf:72:7e:94:31:ed:f8:73:b0:b1:d7:10:7e:87:d4:
         45:fb:5e:c9:5f:e3:d5:a0:02:e3:ae:38:47:3e:e1:85:f5:69:
         02:93:8c:d3:e8:dc:21:58:6d:99:c2:bd:4b:28:78:6a:e6:f8:
         80:69:5c:0c:4b:aa:5b:09:43:56:1c:06:a5:12:a4:02:34:04:
         4a:92:83:11:ee:05:aa:fc:5b:08:e9:df:0c:3d:fe:01:f5:b9:
         db:7d:6a:73:9c:1b:49:bd:7c:94:a4:ad:bb:7e:cf:89:29:db:
         c1:c4:5a:dd:5a:ca:97:0f:24:e8:51:21:45:29:96:8e:42:f9:
         6f:f7:7d:d0:b5:f8:a4:91:8f:3f:6a:0b:08:a8:84:73:2b:0a:
         38:5c:cf:77:47:e3:c6:59:b5:13:ef:65:87:04:40:4f:ec:fc:
         c2:75:4a:81:f3:2f:a9:d8:83:ff:2f:8c:eb:d1:4f:49:b0:58:
         e5:f5:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----