Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft
File:                     535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json)
Hash identifier:          6rXhmTysiBw8QdsWSleTZbZzWxTZaW/Zgr5HEVgzHn0=
Subject key identifier:   B7:FF:EE:D6:A2:74:FB:C8:3C:06:4B:23:DA:B9:41:E2:6C:D0:4B:79
Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7
Certificate issuer:       /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7
Certificate serial:       1F5FE63061576DA30CF7920F7DCE68B6007BC7F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft
Manifest number:          B5
Signing time:             Thu 30 Jan 2025 09:31:19 +0000
Manifest this update:     Thu 30 Jan 2025 09:26:19 +0000
Manifest next update:     Sun 02 Feb 2025 15:11:19 +0000
Files and hashes:         1: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: 66Wgry/mLBS2tbJac5j6GkGGYTmxbRBcergCDy0RRiU=)
                          2: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: jf5znzRFy2+P6OoEH2nJsLB6FzpE4dX49Aqe9OCR/Ck=)
                          3: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: ziqyElqA9AWawQsIwtFYhW7vigptCpJYDFMjj4wIn2E=)
                          4: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: O+DYiMiMwkf2fjBBi2Y0uG1bMY8o2RWfJ3yizKPcbzk=)
                          5: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: yq265ELsxp0oAlCM/3VQz9AgxchX8BpcvalzRZ4r8Rc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5f:e6:30:61:57:6d:a3:0c:f7:92:0f:7d:ce:68:b6:00:7b:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7
        Validity
            Not Before: Jan 30 09:26:19 2025 GMT
            Not After : Feb  2 15:11:19 2025 GMT
        Subject: CN=B7FFEED6A274FBC83C064B23DAB941E26CD04B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:4b:a1:5a:99:56:68:cf:c0:97:49:f8:4f:
                    3a:43:13:e9:c3:10:b1:ea:f6:f0:9a:e9:bc:60:e1:
                    2b:6e:28:cb:9f:4f:b4:01:df:5f:c8:2d:3c:05:f3:
                    91:dc:78:9e:8f:40:6a:ce:36:27:bc:12:3c:e7:88:
                    48:c9:13:ad:93:13:c5:ed:8f:c9:e3:be:86:e6:47:
                    10:a5:55:96:4f:c4:32:50:b1:8e:fa:24:34:f0:ac:
                    c5:83:a4:fa:28:2e:7d:a1:32:69:9a:f3:30:e2:c2:
                    02:a2:3e:c3:3c:89:51:5e:1f:76:3c:51:da:e1:a9:
                    6c:43:18:74:8e:ef:5b:6a:38:b6:90:c4:75:2d:ca:
                    53:ba:99:b0:8c:31:cf:e4:91:9a:06:36:c6:8a:6c:
                    41:65:35:e6:bb:01:04:f3:78:00:cd:7c:24:0d:da:
                    8c:e4:6a:bd:10:b0:fe:d0:4c:6e:48:f9:26:dc:84:
                    a4:23:5d:c4:95:e8:1b:32:85:df:b0:64:95:0f:f0:
                    39:44:90:23:4c:3b:ab:3e:16:66:08:a2:50:82:75:
                    bc:b8:7a:20:35:1f:ce:53:48:f0:e2:55:99:46:72:
                    c2:b6:60:bd:be:e3:a4:99:63:87:2f:8a:c8:67:b8:
                    bd:53:f0:38:44:76:29:19:9b:ce:c8:f7:41:0e:45:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FF:EE:D6:A2:74:FB:C8:3C:06:4B:23:DA:B9:41:E2:6C:D0:4B:79
            X509v3 Authority Key Identifier:
                keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:bf:43:fd:14:af:04:9e:47:d6:e6:6b:b4:a9:08:cd:06:
         d6:32:0e:25:71:c0:d2:99:49:0d:9c:6e:c3:51:1d:82:9e:ef:
         93:f9:76:39:1c:26:8c:80:64:51:47:29:79:f7:9d:73:46:73:
         89:6e:0d:7b:c1:9c:9e:15:dc:3a:28:93:aa:a8:4a:27:15:18:
         2b:44:4c:5e:7b:34:8b:b8:53:16:99:d0:f0:7d:3e:82:42:b2:
         73:3b:3c:fb:09:d2:50:10:9a:97:8f:32:5c:6a:64:d6:1c:9c:
         3c:2e:0f:00:0f:ef:0c:39:70:8b:f8:c9:94:04:ef:38:e8:90:
         52:64:fd:c2:49:0c:0d:cc:eb:dc:a2:d1:51:88:d5:b9:6b:64:
         18:4b:9b:2b:76:4c:f4:1b:4e:d7:4c:22:3d:d7:84:fb:47:a6:
         59:a1:ec:da:67:4f:6f:bd:19:4d:84:ef:b2:be:ad:92:e2:e3:
         ee:6b:ed:47:f3:f8:55:ac:98:d0:ef:9a:f5:de:c4:da:33:ff:
         2c:7a:0f:1a:10:18:61:96:1e:9d:d6:76:cf:e4:52:5f:74:74:
         18:31:6c:d6:4a:a8:78:eb:d3:f9:e3:9c:21:e7:d3:c0:25:b9:
         7d:22:30:c1:75:eb:3c:49:ca:a8:0e:af:03:8c:b9:5a:6b:73:
         5a:27:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----