Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
File:                     2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json)
Hash identifier:          9rNnt52Q7ajLdClJSZGhGbKgzw9j/l4PnyXVRKNwuII=
Subject key identifier:   51:78:1E:72:CB:F0:D8:80:D7:C0:66:D1:A3:54:6E:31:93:70:C7:D1
Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
Certificate issuer:       /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Certificate serial:       7CA866DF0A124EF76C005D2B1E68A8488AA7C0BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
Manifest number:          C7
Signing time:             Thu 30 Jan 2025 06:42:09 +0000
Manifest this update:     Thu 30 Jan 2025 06:37:09 +0000
Manifest next update:     Sun 02 Feb 2025 10:10:09 +0000
Files and hashes:         1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: NlR1sGvjGAemF3+8wBtDjxxBOlBW8f3jeEVqQqc16JI=)
                          2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a8:66:df:0a:12:4e:f7:6c:00:5d:2b:1e:68:a8:48:8a:a7:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
        Validity
            Not Before: Jan 30 06:37:09 2025 GMT
            Not After : Feb  2 10:10:09 2025 GMT
        Subject: CN=51781E72CBF0D880D7C066D1A3546E319370C7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:d8:fb:81:4c:19:35:6e:f6:ff:06:7a:6d:
                    ee:37:6d:33:e5:e0:84:79:fd:7b:17:bd:62:a4:66:
                    4e:e6:20:8d:98:d5:ce:45:25:16:9e:fe:45:db:c9:
                    04:c4:f0:35:a8:41:6d:e4:60:6c:d2:3c:f1:ce:d1:
                    eb:dd:2d:58:a3:8f:2c:f8:b1:15:a9:d8:a8:57:ad:
                    a8:20:e3:04:1e:56:4e:7a:73:80:23:3a:b6:00:49:
                    6d:7c:66:96:c7:74:d5:a7:3c:64:ff:65:d9:31:bc:
                    6c:fa:4b:b0:58:c0:44:3f:3f:89:30:55:44:54:3d:
                    37:dd:8f:c1:ed:64:66:32:b3:f2:7e:b8:a2:5d:96:
                    46:a0:78:8e:ef:36:52:27:6a:4b:c4:e7:5d:45:eb:
                    2f:20:25:04:f7:3b:6e:e0:0e:2b:2f:cc:51:3e:20:
                    60:1d:fc:2c:ef:72:83:19:6a:e9:43:42:5d:52:11:
                    bc:0f:1c:59:3a:b3:bc:c1:78:ac:18:25:ec:c1:b4:
                    05:33:02:ed:e1:00:5e:3c:4b:38:e3:a4:4d:18:92:
                    77:d9:5e:af:10:5f:a3:14:c5:3c:6e:e2:ed:f0:34:
                    6b:e7:0c:6d:fc:53:ed:8b:b9:2e:de:c2:8c:00:9f:
                    86:92:25:04:18:1e:18:71:58:a5:d3:87:2f:47:55:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:1E:72:CB:F0:D8:80:D7:C0:66:D1:A3:54:6E:31:93:70:C7:D1
            X509v3 Authority Key Identifier:
                keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:86:8e:60:9d:2b:40:7e:d3:ea:35:61:a0:3f:d5:4a:eb:
         aa:2e:4e:41:68:e6:70:99:d1:18:7c:05:a9:e2:48:f4:46:05:
         f1:2f:18:7b:3a:3a:df:b1:aa:5d:b8:94:37:83:96:0a:a5:86:
         e1:c1:ec:4b:00:ea:ce:fc:f8:31:9e:95:87:d4:2d:78:a5:f4:
         84:a6:c8:89:a0:d5:70:f4:ff:2a:fe:dc:bc:53:6a:af:ef:91:
         d7:b2:7e:2d:4c:32:73:1a:6b:4c:bd:b7:54:ba:26:8b:15:96:
         2a:ae:85:49:3d:f9:58:11:19:ff:34:5a:40:4c:f0:b6:f4:8c:
         25:33:48:78:5b:25:33:f2:19:23:37:6d:ca:99:cc:b6:f1:1a:
         fd:11:ad:d8:30:8f:d7:ef:44:49:2b:26:14:98:90:6e:27:72:
         07:64:3e:1e:93:58:ed:2d:5e:8e:35:f6:93:8a:a0:6c:ec:a8:
         36:fc:9e:ff:df:34:67:eb:cf:00:e2:df:63:55:62:5d:3a:29:
         c1:41:c6:99:ec:e7:87:4a:ac:75:c6:d0:9a:b3:94:16:ee:21:
         9c:7b:df:83:04:5a:3f:00:af:34:9d:a0:8d:3c:68:df:ad:b8:
         18:46:83:5c:b0:17:ae:2f:82:f1:3b:ef:1e:62:5c:54:16:e0:
         5e:55:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----