Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
File:                     9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json)
Hash identifier:          CQY71+PgZjcoPyp4wixs/38Bv6vKAq4C+qpUfp52f9g=
Subject key identifier:   45:5F:2C:E9:5C:91:36:23:3A:91:FB:79:3B:AB:4D:8A:DC:FD:E9:68
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Certificate issuer:       /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial:       58E95D04696FEEF4EDDDD6EF6C35A0F3154FFC97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
Manifest number:          67
Signing time:             Thu 30 Jan 2025 04:21:22 +0000
Manifest this update:     Thu 30 Jan 2025 04:16:22 +0000
Manifest next update:     Sun 02 Feb 2025 07:03:22 +0000
Files and hashes:         1: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: IO/iDpjxGtO9u/3pWEFUATuibuSL20cGvyzQOUML/eA=)
                          2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: UQvjbahM5wEVbxKknlNWx8E15RhJ5vKpHF1nJfhJShU=)
                          3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 3i2g7jxsUXTPGCfj25R9lOwqZsJAmJHMUbi9jMP6xpw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e9:5d:04:69:6f:ee:f4:ed:dd:d6:ef:6c:35:a0:f3:15:4f:fc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
        Validity
            Not Before: Jan 30 04:16:22 2025 GMT
            Not After : Feb  2 07:03:22 2025 GMT
        Subject: CN=455F2CE95C9136233A91FB793BAB4D8ADCFDE968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:de:25:d1:e0:b9:44:25:9b:46:00:d8:ff:
                    da:35:cd:a2:9b:e7:0b:a8:96:9b:20:b5:cc:b5:cc:
                    a8:8a:e3:9e:e3:e2:18:b9:6b:9c:37:39:c2:e3:cb:
                    24:f3:b5:f1:1e:70:f0:70:08:82:59:75:ab:e9:f2:
                    a3:43:85:4f:93:a0:8c:71:e0:9c:ca:9d:67:ff:63:
                    7e:2b:09:ff:72:de:57:90:f3:2a:5c:c5:b0:19:23:
                    ef:19:9e:1b:62:4d:88:5e:36:8f:2a:aa:71:cc:4c:
                    f1:5c:c8:0e:95:23:64:a5:a9:10:da:b0:0b:5f:b0:
                    4d:63:a9:34:e9:3f:05:55:d0:68:92:06:b8:d6:80:
                    ee:09:72:96:14:ea:b0:e4:8d:63:5a:d4:d3:c9:65:
                    da:6c:1d:c2:45:02:3a:ce:d7:53:da:03:f8:f4:4f:
                    ec:86:66:cb:97:70:75:47:77:5d:d8:ff:d7:14:8a:
                    01:21:64:3f:49:96:02:78:1f:47:e9:6d:b8:f9:cd:
                    45:d4:e1:e1:82:3a:85:e7:b3:9f:3e:81:1a:5c:fb:
                    76:ce:3c:77:ce:8c:42:64:8d:61:1a:ab:9b:75:8f:
                    77:76:98:23:28:e1:75:95:74:44:97:ca:3d:f1:2a:
                    f5:04:fa:b5:fb:72:ec:b7:26:6b:84:2c:c7:d8:09:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5F:2C:E9:5C:91:36:23:3A:91:FB:79:3B:AB:4D:8A:DC:FD:E9:68
            X509v3 Authority Key Identifier:
                keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:0c:d4:35:8f:af:1a:f5:e3:68:20:1b:21:86:ca:b8:e6:6c:
         3f:3e:d3:48:05:f2:c2:36:8c:e8:ae:d4:af:85:04:78:59:7d:
         ba:36:b5:c9:b0:1b:0d:6d:58:c4:03:8c:5b:7f:19:4e:23:ea:
         09:b2:3e:01:df:b3:75:75:13:d0:b4:63:27:bc:57:c2:3a:7d:
         5d:e6:19:76:2a:f9:88:2f:a1:e7:29:42:7b:eb:e0:00:0c:1a:
         e6:42:69:cd:1b:63:3a:1b:c8:30:93:21:52:cd:83:0e:e0:81:
         a0:d7:fd:ff:83:42:3c:3b:f9:78:de:bb:af:b3:f9:c8:4d:f9:
         77:a8:c6:e6:50:7e:b8:47:72:ba:10:e8:93:5b:cb:aa:7e:16:
         7d:a5:8c:d0:0d:50:45:75:06:af:b2:78:90:8e:79:d4:f2:1f:
         5d:b4:29:67:86:c2:b7:18:ab:ef:6f:9f:76:25:20:ea:b5:b7:
         42:d8:9b:0d:7e:e3:8d:93:68:61:c4:6a:28:aa:f0:4a:1b:89:
         fa:69:97:43:e5:ab:3b:92:23:5b:3d:6c:b2:18:63:55:8d:6f:
         94:b2:4f:46:35:85:07:ac:4b:2c:44:83:09:1a:f9:99:4a:86:
         e3:6d:43:33:bb:33:55:e6:38:c3:ec:60:88:bd:9b:9b:2d:3d:
         41:c3:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----