Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft
File:                     EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json)
Hash identifier:          5V+553YttfYuiNje8nMLkXNK3OlZY98O86IyHcNflbM=
Subject key identifier:   D7:61:81:6A:81:D2:40:77:99:EF:28:EB:2C:E5:04:16:D4:C4:CE:21
Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20
Certificate issuer:       /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
Certificate serial:       32FDA1EA28BC450F9149FDB312AA14C6ED0BE442
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft
Manifest number:          014D
Signing time:             Thu 30 Jan 2025 09:20:02 +0000
Manifest this update:     Thu 30 Jan 2025 09:15:02 +0000
Manifest next update:     Sun 02 Feb 2025 14:19:02 +0000
Files and hashes:         1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=)
                          2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=)
                          3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: Nd3EsXmpj7fpuffNm+tlyFmYDKxodH+8s0K2wQCmDWg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fd:a1:ea:28:bc:45:0f:91:49:fd:b3:12:aa:14:c6:ed:0b:e4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
        Validity
            Not Before: Jan 30 09:15:02 2025 GMT
            Not After : Feb  2 14:19:02 2025 GMT
        Subject: CN=D761816A81D2407799EF28EB2CE50416D4C4CE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:0a:9a:67:be:da:bf:8a:da:c1:93:f1:a4:
                    7d:ae:d9:aa:ca:bb:a8:3a:29:a8:2e:b1:b5:f0:b8:
                    ae:85:76:6d:b5:a4:6d:17:9f:3f:81:2e:fa:f1:8c:
                    c7:17:55:a2:18:81:ae:18:0a:f9:85:19:c8:86:37:
                    c8:3a:d7:76:b2:92:ee:6d:e5:82:e4:9c:88:04:33:
                    f2:bd:1c:fe:4f:5e:33:38:e9:54:f1:c9:23:c0:47:
                    6e:38:df:2d:eb:84:64:85:24:fe:e3:8f:a3:c2:01:
                    ad:2f:da:a0:bb:72:3e:b6:ad:da:88:91:5c:c8:fb:
                    88:f1:f4:59:42:44:a0:a8:ec:23:c6:2c:b0:39:fe:
                    fa:8f:76:57:05:cb:ac:b6:f6:02:90:60:92:18:9f:
                    3f:1d:33:e3:92:7e:ad:ac:16:75:93:84:b6:b4:2b:
                    a4:21:94:e3:4e:70:74:1c:6f:59:4c:29:e6:d8:23:
                    2d:21:c9:7a:1e:41:c4:81:82:69:66:db:bd:76:73:
                    fa:22:d4:22:16:ed:ff:db:d7:16:1a:80:76:46:a6:
                    a8:0a:9d:1d:ca:0a:84:69:c1:06:c0:ba:90:17:c3:
                    c9:22:10:3c:27:3c:34:93:62:7d:10:86:7d:e0:c5:
                    fb:f7:dc:b5:e2:31:29:61:3f:74:a0:0f:25:0e:61:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:61:81:6A:81:D2:40:77:99:EF:28:EB:2C:E5:04:16:D4:C4:CE:21
            X509v3 Authority Key Identifier:
                keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:45:b8:2f:d3:ea:92:8a:d3:19:eb:20:b6:4e:e1:8f:fb:81:
         57:81:5b:fa:b5:dc:1e:24:67:ba:86:1c:cd:24:b0:a6:fb:b7:
         a6:8d:89:98:79:98:c5:04:62:7a:9b:05:3e:50:1b:0a:97:2f:
         61:40:dc:51:9a:49:ea:d1:9b:33:ab:bb:45:9e:53:d7:d4:ed:
         db:4a:68:4a:80:94:10:b1:ce:d3:a6:04:ad:db:a9:b7:d5:ae:
         52:63:10:49:d4:f6:18:be:69:4a:60:2f:1f:25:e6:79:c9:79:
         05:84:23:09:ed:da:40:f8:6f:d1:0e:7e:2a:01:c1:3f:58:aa:
         06:05:f9:c6:c8:7a:73:fe:65:e6:66:67:73:d9:a8:b7:84:8b:
         3f:78:61:f7:e1:d2:da:f1:3d:42:4f:9c:a6:6e:75:48:8a:4a:
         9c:a3:7c:d2:31:76:fe:99:81:5f:0b:ce:2b:5b:12:ac:60:18:
         33:23:d7:1a:00:e0:26:d5:11:55:0a:3d:5b:cb:29:2b:d8:b7:
         6a:a3:00:f8:00:70:a0:d5:ab:8b:9e:e6:10:c5:83:ff:c5:60:
         06:8b:e6:dd:5d:b2:e3:01:36:24:e6:34:80:90:82:0a:11:89:
         35:70:51:bc:c8:44:7b:7a:24:4d:27:85:16:4b:c0:b7:0c:65:
         64:29:b7:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMv2h6ii8RQ+RSf2zEqoUxu0L5EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx
QTVEMDUyMDAeFw0yNTAxMzAwOTE1MDJaFw0yNTAyMDIxNDE5MDJaMDMxMTAvBgNV
BAMTKEQ3NjE4MTZBODFEMjQwNzc5OUVGMjhFQjJDRTUwNDE2RDRDNENFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVwqaZ77av4rawZPxpH2u2arK
u6g6KagusbXwuK6Fdm21pG0Xnz+BLvrxjMcXVaIYga4YCvmFGciGN8g613ayku5t
5YLknIgEM/K9HP5PXjM46VTxySPAR2443y3rhGSFJP7jj6PCAa0v2qC7cj62rdqI
kVzI+4jx9FlCRKCo7CPGLLA5/vqPdlcFy6y29gKQYJIYnz8dM+OSfq2sFnWThLa0
K6QhlONOcHQcb1lMKebYIy0hyXoeQcSBgmlm2712c/oi1CIW7f/b1xYagHZGpqgK
nR3KCoRpwQbAupAXw8kiEDwnPDSTYn0Qhn3gxfv33LXiMSlhP3SgDyUOYcZtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU12GBaoHSQHeZ7yjrLOUEFtTEziEwHwYDVR0j
BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx
QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE
MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw
MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG
MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAChFuC/T6pKK0xnrILZO4Y/7gVeBW/q13B4k
Z7qGHM0ksKb7t6aNiZh5mMUEYnqbBT5QGwqXL2FA3FGaSerRmzOru0WeU9fU7dtK
aEqAlBCxztOmBK3bqbfVrlJjEEnU9hi+aUpgLx8l5nnJeQWEIwnt2kD4b9EOfioB
wT9YqgYF+cbIenP+ZeZmZ3PZqLeEiz94Yffh0trxPUJPnKZudUiKSpyjfNIxdv6Z
gV8LzitbEqxgGDMj1xoA4CbVEVUKPVvLKSvYt2qjAPgAcKDVq4ue5hDFg//FYAaL
5t1dsuMBNiTmNICQggoRiTVwUbzIRHt6JE0nhRZLwLcMZWQpt+w=
-----END CERTIFICATE-----