Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
File:                     60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json)
Hash identifier:          pU+iKdfldcN/nHWHI2J6i4LmIsfEcS4pxDlzKAykcGw=
Subject key identifier:   8B:34:B5:4E:D7:DE:E1:35:E0:51:2D:15:8E:0B:33:CD:8D:D7:17:6D
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Certificate issuer:       /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial:       1434618EA54EEF9AAF908EF9A638DF9656640276
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
Manifest number:          04A9
Signing time:             Thu 30 Jan 2025 12:41:42 +0000
Manifest this update:     Thu 30 Jan 2025 12:36:42 +0000
Manifest next update:     Mon 03 Feb 2025 00:15:42 +0000
Files and hashes:         1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: wX8oKZQRivI6DodV/xGT5ZmxNhQuYku9eZy7hXvzPy8=)
                          2: 3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa (hash: 6EhkXeE+t0/F1qZJMNgppu11iXtle+Lb18imNuIuhxw=)
                          3: 3130332e3132302e3230372e302f32342d3234203d3e2036393339.roa (hash: SOWGEkFY9bnPX+Ae5PlXM9qybBOs8zD006nU0iUd2qg=)
                          4: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=)
                          5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=)
                          6: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:34:61:8e:a5:4e:ef:9a:af:90:8e:f9:a6:38:df:96:56:64:02:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Validity
            Not Before: Jan 30 12:36:42 2025 GMT
            Not After : Feb  3 00:15:42 2025 GMT
        Subject: CN=8B34B54ED7DEE135E0512D158E0B33CD8DD7176D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:9e:19:06:95:89:5b:a4:04:bc:81:1b:07:
                    d9:ef:f8:90:36:44:d9:9a:4d:bd:2d:e4:ac:ee:10:
                    63:99:b1:bf:fd:48:28:bc:ab:66:b7:0a:c9:df:11:
                    bf:a0:25:e8:03:99:c2:6e:d4:0c:58:8b:40:fc:30:
                    d1:a5:90:69:2b:7b:87:20:2a:82:d7:0c:50:da:77:
                    d2:aa:fb:8d:bb:0e:23:ea:e0:c1:e6:07:eb:ed:34:
                    fc:98:83:cc:d7:2a:78:fa:f9:7d:7c:b6:f4:9a:e3:
                    c8:dc:f0:b2:8b:e7:0c:ad:0d:2c:4e:23:41:e4:65:
                    0f:df:84:5b:f9:81:71:98:46:85:52:78:dc:43:a8:
                    c9:75:3b:8d:b4:a9:24:d4:f1:bd:8a:bf:c8:88:64:
                    9e:38:7c:54:54:ba:11:21:75:14:48:d7:74:91:22:
                    82:a7:5e:e9:23:49:01:78:2d:77:93:ac:6d:2c:b2:
                    b3:6d:c7:2b:bd:44:13:57:7c:b5:9a:3f:65:64:51:
                    57:45:66:b9:9b:36:b1:04:47:13:62:47:28:17:7b:
                    d3:8a:35:d3:87:af:30:63:ba:0c:81:64:4c:fb:36:
                    c6:0c:0e:47:93:1a:9d:c1:34:a6:be:a4:46:10:55:
                    74:e4:c6:31:f7:fc:d6:e6:68:e2:c3:5a:e4:f6:c9:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:B5:4E:D7:DE:E1:35:E0:51:2D:15:8E:0B:33:CD:8D:D7:17:6D
            X509v3 Authority Key Identifier:
                keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:27:b5:0c:bc:25:09:d9:bf:92:b3:db:2b:04:db:d0:a2:
         7d:32:df:44:ab:dc:aa:8e:de:b9:0f:28:31:d0:1b:e3:98:63:
         a3:3b:70:9b:3e:41:46:a5:7e:13:2f:b4:df:d3:16:6e:5c:db:
         ef:7a:fc:08:18:9f:5a:4c:e4:03:ba:63:ba:c6:29:51:3e:49:
         a9:f4:65:ce:4a:25:51:16:e4:02:bd:b7:ab:ef:cf:d5:42:0f:
         8c:7d:a7:02:32:e1:7f:50:96:ad:c3:5d:64:61:63:c4:bb:09:
         93:a1:0f:79:05:df:62:90:15:73:28:4f:e2:5c:be:cb:40:0d:
         73:1e:c5:93:e8:00:1e:32:c7:67:5d:d7:cf:06:6c:28:6e:f9:
         47:e4:ad:3a:3a:bc:2f:65:74:56:5b:fa:6f:f9:60:b0:a7:d9:
         bb:ca:c2:50:20:25:55:92:54:7a:e4:4e:d4:90:00:4c:cb:53:
         fc:9f:c8:7c:c0:63:4d:04:14:bf:6e:fe:b6:a9:72:11:77:9c:
         98:92:fd:b7:17:75:83:c9:4f:ef:c4:06:b9:a1:78:f9:de:5d:
         cb:45:f5:c3:ee:ba:dd:87:33:7c:47:94:64:4a:81:17:69:e0:
         88:52:35:83:dd:9d:f4:52:4d:80:e7:d2:d7:51:92:56:13:b3:
         8f:2b:99:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFDRhjqVO75qvkI75pjjfllZkAnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy
ODk2RTZERTAeFw0yNTAxMzAxMjM2NDJaFw0yNTAyMDMwMDE1NDJaMDMxMTAvBgNV
BAMTKDhCMzRCNTRFRDdERUUxMzVFMDUxMkQxNThFMEIzM0NEOERENzE3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn454ZBpWJW6QEvIEbB9nv+JA2
RNmaTb0t5KzuEGOZsb/9SCi8q2a3CsnfEb+gJegDmcJu1AxYi0D8MNGlkGkre4cg
KoLXDFDad9Kq+427DiPq4MHmB+vtNPyYg8zXKnj6+X18tvSa48jc8LKL5wytDSxO
I0HkZQ/fhFv5gXGYRoVSeNxDqMl1O420qSTU8b2Kv8iIZJ44fFRUuhEhdRRI13SR
IoKnXukjSQF4LXeTrG0ssrNtxyu9RBNXfLWaP2VkUVdFZrmbNrEERxNiRygXe9OK
NdOHrzBjugyBZEz7NsYMDkeTGp3BNKa+pEYQVXTkxjH3/NbmaOLDWuT2yeDVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUizS1Ttfe4TXgUS0VjgszzY3XF20wHwYDVR0j
BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3
QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2
RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz
YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC
REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJt2J7UMvCUJ2b+Ss9srBNvQon0y30Sr3KqO
3rkPKDHQG+OYY6M7cJs+QUalfhMvtN/TFm5c2+96/AgYn1pM5AO6Y7rGKVE+San0
Zc5KJVEW5AK9t6vvz9VCD4x9pwIy4X9Qlq3DXWRhY8S7CZOhD3kF32KQFXMoT+Jc
vstADXMexZPoAB4yx2dd188GbChu+UfkrTo6vC9ldFZb+m/5YLCn2bvKwlAgJVWS
VHrkTtSQAEzLU/yfyHzAY00EFL9u/rapchF3nJiS/bcXdYPJT+/EBrmhePneXctF
9cPuut2HM3xHlGRKgRdp4IhSNYPdnfRSTYDn0tdRklYTs48rmXw=
-----END CERTIFICATE-----