Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft
File:                     3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json)
Hash identifier:          Z9GKJM89kKZkt0tlA5O5JnxUC9gGbVMC/xvGat0OWVk=
Subject key identifier:   11:45:9A:E9:B2:A9:26:44:D8:65:2E:C8:6F:1B:68:8E:D0:4C:20:27
Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74
Certificate issuer:       /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074
Certificate serial:       4952050913A6E0AA592B2E623C89C04B2FCE3270
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft
Manifest number:          018C
Signing time:             Fri 31 Jan 2025 07:52:11 +0000
Manifest this update:     Fri 31 Jan 2025 07:47:11 +0000
Manifest next update:     Mon 03 Feb 2025 18:39:11 +0000
Files and hashes:         1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: NK7ClTvv4/NDBbf89x9B3VnTnm5k2ddyF3YW/vuXpLs=)
                          2: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: 2RXBXjhuRJwExPVNX9hB9NFX7D025vTvzr5gHLewJr0=)
                          3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: pj91Qs2tURvKQAKL6L3l5bFtaBP3SPbqgRHlO/yRwo8=)
                          4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: 1QFmqqnDt9FD4CT5iXH8IaTJeZQAgHohWAPwCtiQfbk=)
                          5: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: jWIeEj8fX0qqStZK4DC//9sEKdVwxbP2pcQ0ebAsVP8=)
                          6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: i1T+k/Fj5jmrloNHibD0LTah+LErHR2m6DpQ2W7p/XI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:52:05:09:13:a6:e0:aa:59:2b:2e:62:3c:89:c0:4b:2f:ce:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074
        Validity
            Not Before: Jan 31 07:47:11 2025 GMT
            Not After : Feb  3 18:39:11 2025 GMT
        Subject: CN=11459AE9B2A92644D8652EC86F1B688ED04C2027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:61:98:9d:16:47:97:b0:0d:2f:e4:8f:e1:
                    8e:51:f1:55:e6:be:91:9c:ca:f3:61:aa:74:68:ff:
                    c1:41:1c:57:33:81:de:54:42:e8:fc:1c:de:5d:2d:
                    80:46:ab:c0:0b:ba:34:0c:ac:34:7c:d3:57:79:3e:
                    d0:5c:e8:43:33:af:31:62:48:f0:2e:ca:9e:50:31:
                    08:4c:de:2d:43:63:46:4e:6c:79:09:24:62:2a:90:
                    ff:14:ef:dd:cd:79:bc:47:9c:19:b7:00:b7:4d:c0:
                    b1:be:8a:a8:10:93:bb:c7:d8:3e:7b:94:55:47:7e:
                    37:09:43:8b:84:c3:c1:bc:39:17:8a:c4:b8:4b:30:
                    7b:b7:36:cc:f2:b9:02:6d:cd:d4:5a:c6:d6:35:3d:
                    8b:11:a1:7a:21:49:d3:d0:09:e4:b5:6e:a5:77:c7:
                    ac:4b:0c:9d:56:0c:a1:bd:9f:e5:46:ce:e7:e5:82:
                    1d:e0:ba:a3:a2:e5:13:02:8d:dd:34:39:10:de:a7:
                    23:e1:7f:54:3b:8f:e8:99:aa:df:2d:51:2f:a0:63:
                    c1:0c:1c:a3:3f:7e:36:78:23:04:67:d2:54:7e:53:
                    ad:c3:ce:dc:5c:2e:66:3d:46:1d:7d:2b:e2:e2:bc:
                    26:37:f3:c8:16:dc:f4:2c:60:9f:c4:c8:fd:90:e5:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:9A:E9:B2:A9:26:44:D8:65:2E:C8:6F:1B:68:8E:D0:4C:20:27
            X509v3 Authority Key Identifier:
                keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:0a:85:c4:d3:ea:5e:12:75:04:25:fa:35:d8:92:f0:f9:
         11:18:44:94:6b:04:86:ac:7f:f8:e5:a2:9a:c1:96:1c:82:0a:
         29:c4:a2:54:4c:27:9c:44:bc:0f:84:01:79:5f:50:7c:55:1d:
         39:15:c2:c0:d3:97:cd:a6:ae:31:7d:95:80:b3:55:a6:d0:c5:
         9e:0d:6a:44:dc:2c:8c:df:b9:e4:eb:c6:a4:12:5f:f1:1a:b6:
         6d:f6:27:1a:52:bd:ba:ff:68:30:c1:f0:58:ef:02:eb:21:cb:
         58:01:ae:d2:54:d6:4f:fe:75:ba:77:d5:fd:7b:fb:93:5b:25:
         99:b3:df:9c:6a:95:89:3d:ec:a0:41:98:38:c6:72:8d:2a:41:
         7d:80:4a:dc:d2:ac:d8:bd:1b:4e:9c:de:fb:f9:96:4c:34:48:
         51:14:f6:4a:f6:91:69:23:02:07:5a:50:01:d7:1d:4c:85:ba:
         a3:b0:0d:a2:78:92:bd:84:a5:a3:79:88:ce:7f:a7:5f:e0:02:
         56:4e:4c:ef:5d:5d:f3:78:b0:a4:65:38:04:ec:d7:a3:ce:bc:
         ba:49:2f:00:cc:7c:4f:c9:7e:8d:dc:d1:3e:b3:70:b4:63:00:
         14:1b:f2:8a:e5:e4:8e:bc:d5:e1:bc:ba:19:0b:11:20:c6:ed:
         6e:89:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----