Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
File:                     7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json)
Hash identifier:          YJI9sEbdfAh5CuglRtqBC6onrbrEXg5SjOJbL80wtJw=
Subject key identifier:   8B:8E:A7:5C:7C:5C:DE:1C:9B:B1:B1:8A:3D:6C:A9:99:BA:03:E8:50
Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD
Certificate issuer:       /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
Certificate serial:       1BAD70A076159FC18D89B294FBA8E9C377738CC5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
Manifest number:          04A1
Signing time:             Thu 30 Jan 2025 05:04:29 +0000
Manifest this update:     Thu 30 Jan 2025 04:59:29 +0000
Manifest next update:     Sun 02 Feb 2025 10:59:29 +0000
Files and hashes:         1: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: 31H5rraDNTvRBapUf64Q7/Oem40hbGy/rXXsOF9jIIQ=)
                          2: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: qUMTZOKqFJrYj5YAPgs121X9//L8rpIE4d8u+ioonEM=)
                          3: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 0SNOXJv5maedIGBL0Qm9Po7XI+eFbCTVR/NtX0bm6ts=)
                          4: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: nvj4vFogJKPPYgFqYmFWvbmjSSvxwuNwrsXUM+va/jI=)
                          5: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: JU0Fqn+bNHy7TO2FDGiu0v8Et06ozUzFP/f0/9F2tIA=)
                          6: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ad:70:a0:76:15:9f:c1:8d:89:b2:94:fb:a8:e9:c3:77:73:8c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
        Validity
            Not Before: Jan 30 04:59:29 2025 GMT
            Not After : Feb  2 10:59:29 2025 GMT
        Subject: CN=8B8EA75C7C5CDE1C9BB1B18A3D6CA999BA03E850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:cd:5f:bc:86:6d:cc:a5:f9:de:62:13:bf:
                    d1:91:b4:b8:52:1b:a0:ea:12:91:29:0d:e0:55:d3:
                    63:f7:43:a4:f4:a8:06:79:d6:49:b2:d4:37:aa:c0:
                    03:bc:02:93:6c:99:b5:9a:db:18:c5:08:52:26:0d:
                    e6:90:70:ee:b9:93:2c:57:18:15:ba:60:29:0f:f2:
                    fa:a8:ad:4b:71:46:98:b7:4d:b5:3f:7a:cd:f1:73:
                    50:3a:7a:94:8e:82:1c:95:da:8c:c3:e0:cc:bf:04:
                    2b:58:76:9f:ee:f9:97:dd:51:14:3f:e2:e7:6d:29:
                    6c:63:49:07:af:a8:fc:8d:99:49:ad:e4:bf:a3:a8:
                    4e:78:b0:e0:71:e0:ee:ec:fc:46:5e:26:8e:f7:d8:
                    c2:c2:61:9a:47:ea:03:94:13:02:af:8f:c4:ff:33:
                    48:66:81:d5:0e:ee:83:c5:d4:60:1a:61:dd:c3:a8:
                    8a:40:d4:86:b1:f6:a0:d0:1d:bb:80:d3:60:43:48:
                    7b:7d:95:d1:81:d6:bf:6f:96:aa:a0:ed:e9:62:6a:
                    66:1a:4d:7a:94:0a:15:03:78:48:b3:2f:13:d4:d7:
                    20:72:21:9d:05:fd:0c:f7:f1:4f:40:76:da:18:b0:
                    9c:ae:3e:ec:4a:1f:d2:85:28:9f:dc:0c:78:81:a4:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8E:A7:5C:7C:5C:DE:1C:9B:B1:B1:8A:3D:6C:A9:99:BA:03:E8:50
            X509v3 Authority Key Identifier:
                keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:55:06:b4:57:dd:8c:a7:6a:09:7f:51:65:3e:6c:4a:ca:
         f0:83:15:b1:9e:81:a2:67:a1:af:65:fd:32:5c:81:b3:92:bf:
         b2:cc:2f:20:84:74:63:43:b7:bd:d3:2e:33:7c:8e:4f:70:f6:
         07:56:04:21:b2:68:a7:e0:68:bb:df:a4:7c:cd:4d:3a:7a:ed:
         f7:b7:61:b8:61:00:36:96:5c:82:86:d2:23:31:f1:1f:09:5b:
         2a:0e:7f:67:54:43:65:2a:85:6c:a9:c9:6f:96:a7:8a:0c:70:
         c3:3e:fa:14:8e:09:71:11:05:b4:83:01:22:21:c0:c1:e9:0d:
         09:78:90:f0:1e:75:39:4b:b7:72:40:73:0a:16:33:91:85:56:
         8e:1b:00:6d:48:51:a1:55:88:f9:42:47:7a:19:72:5d:f5:76:
         1b:97:9c:7e:2c:10:8a:ff:e4:1d:16:9f:e7:ae:9d:41:a7:0d:
         21:5e:9b:8b:b3:10:6a:29:61:42:15:dd:52:25:15:ed:21:7e:
         1a:b3:1f:62:7a:5a:e8:b7:cd:c1:dc:db:8b:5d:df:cc:18:7a:
         fa:a3:53:42:af:6e:7a:5d:0f:a5:fb:43:e8:02:46:4e:71:54:
         21:ef:57:f1:6c:cf:77:32:e8:f1:6d:28:7d:a5:f7:60:e5:34:
         77:17:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----