Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File:                     104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier:          UtBjmF1VsuHNs6N9GPexCVSwKrIgX4+nSzzj8ziLcmY=
Subject key identifier:   84:C1:3D:CC:F1:67:05:16:EC:2F:C3:2D:B6:44:A5:A0:12:76:70:04
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       58DF4FD5BDE825BB74F43339DE6A34AFF8B9A783
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number:          02CA
Signing time:             Thu 30 Jan 2025 19:01:22 +0000
Manifest this update:     Thu 30 Jan 2025 18:56:22 +0000
Manifest next update:     Sun 02 Feb 2025 23:35:22 +0000
Files and hashes:         1: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: 8dCWJ4ZQZt5WChh6Narmgjs82k0+OBaAdDRG1XGcKLQ=)
                          2: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: SlI7AhoOF3We3sIYmVmNNifD2NycJGbtgvQxMW2JHqo=)
                          3: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: LeUyJ9o4fhoz/H6h0dDJDWn+lC9aUUwyzbGZ89Ocfng=)
                          4: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: gN6klDDPDLCJSlm265q8fEQ3dLrHI958rq06xPPq/rw=)
                          5: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: BOFN0GMI61kC/DiDrBY854XkvtU/vjRFMol08vmHoXk=)
                          6: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: E2yYTsCk6Z9EhH3CuGS/JtKeUD/mcVjv2foriJG4teo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:df:4f:d5:bd:e8:25:bb:74:f4:33:39:de:6a:34:af:f8:b9:a7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Jan 30 18:56:22 2025 GMT
            Not After : Feb  2 23:35:22 2025 GMT
        Subject: CN=84C13DCCF1670516EC2FC32DB644A5A012767004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:1b:d8:8f:d6:9f:07:e8:ab:c1:83:51:36:
                    e7:bd:c9:30:31:1f:00:48:1d:3f:4b:f7:92:a3:c4:
                    e3:9a:28:54:d6:84:f1:bb:13:da:cc:00:76:1b:b9:
                    85:ca:d1:48:44:39:b9:db:56:e5:08:0f:a4:5a:4e:
                    76:f3:cb:6c:76:19:39:be:59:b0:a4:cc:19:8a:58:
                    b3:98:38:c5:ad:cd:99:33:99:b4:fe:4b:9f:35:4a:
                    b2:45:ca:ab:02:df:c2:81:f5:ef:65:06:2a:ae:1c:
                    fd:ec:39:0f:5b:75:53:c1:33:6f:09:ac:00:2d:7c:
                    32:85:d8:de:36:45:40:dd:78:fc:b7:b6:2d:8d:49:
                    ad:16:18:4a:5f:5f:b3:ed:1d:f8:4c:41:00:bc:30:
                    23:99:96:ce:a1:1c:01:16:aa:c3:5a:51:cd:09:33:
                    d0:ad:fb:96:d4:a9:00:57:9b:05:6f:8a:50:0f:05:
                    af:0b:fc:57:5d:91:3d:9f:11:c9:a2:bb:51:28:13:
                    ab:d0:a3:9a:d6:f0:9a:92:e9:d0:7c:f4:48:5b:5c:
                    23:be:b9:cb:11:35:a1:72:57:fa:69:ee:5a:fa:50:
                    18:f9:e4:50:9a:b5:10:e8:49:bb:8c:75:da:b0:1f:
                    f0:a4:0f:0f:cc:73:41:76:07:e8:68:8d:ee:ad:ab:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:3D:CC:F1:67:05:16:EC:2F:C3:2D:B6:44:A5:A0:12:76:70:04
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:57:25:ff:be:1a:fe:69:c0:e9:e5:8f:84:49:37:17:1a:87:
         4d:40:ef:d4:cd:e8:8c:2d:19:25:b7:7e:cd:06:96:e0:97:99:
         cf:04:e4:2a:8e:67:8b:91:24:1e:f4:70:e5:dd:de:e3:d2:f5:
         91:3d:ab:30:44:1e:4f:3a:d0:c5:86:5e:3f:39:94:e1:69:ac:
         82:8c:29:cf:2e:42:2d:b4:29:28:bc:f7:3f:45:b7:b4:68:56:
         3e:29:bb:3b:0f:58:e8:df:2c:fd:b4:fb:02:33:0f:92:7b:c4:
         f1:84:ab:db:6f:da:ec:b6:ad:29:90:c7:36:50:c9:3b:5c:a3:
         b8:42:1c:44:45:ec:ee:f7:33:9d:87:c4:53:cc:1d:a3:28:da:
         c9:97:c7:48:47:d4:35:2c:57:ab:fa:ca:9f:75:79:50:da:a3:
         6a:c7:41:02:84:7e:b1:1b:58:c6:1f:af:65:59:e2:11:6b:aa:
         af:a1:82:eb:0e:c1:22:38:a5:04:a3:ef:02:ad:a9:5f:eb:c2:
         fd:67:ab:79:6c:0c:63:7f:16:bd:04:e4:aa:b9:ca:d6:02:e6:
         5d:b0:eb:99:3c:0d:44:87:2a:3a:69:01:c0:77:1e:f2:96:31:
         4d:e8:8f:25:a4:26:0b:38:34:e1:aa:b7:40:02:54:e3:a3:70:
         f0:08:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----