Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft
File:                     F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json)
Hash identifier:          JI8AdRSIDGLBlPtcQNKQTmj5TnYzT3bxLgKNbEJqEM4=
Subject key identifier:   11:91:83:B6:95:B8:90:44:EC:FB:4D:F6:2E:12:21:8B:FC:C2:69:A8
Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32
Certificate issuer:       /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832
Certificate serial:       5B9BFEEF2130819A1CFD59584205C29829233762
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft
Manifest number:          9D
Signing time:             Thu 30 Jan 2025 03:21:30 +0000
Manifest this update:     Thu 30 Jan 2025 03:16:30 +0000
Manifest next update:     Sun 02 Feb 2025 09:42:30 +0000
Files and hashes:         1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: aZ67xnZ2GmpS5x3v6wGoZHaJnKpkTD7bioQ4/2mf/9I=)
                          2: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: 7l+KDkpftZ1olZ/l9vZxZiSFCmqzAQeP2WLVDLagbJo=)
                          3: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: Bx/4+sfkV2W5ofbXzx8CSg0kMlh6Q/zNSvuWBs06reQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9b:fe:ef:21:30:81:9a:1c:fd:59:58:42:05:c2:98:29:23:37:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832
        Validity
            Not Before: Jan 30 03:16:30 2025 GMT
            Not After : Feb  2 09:42:30 2025 GMT
        Subject: CN=119183B695B89044ECFB4DF62E12218BFCC269A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:8e:68:6b:9c:29:c9:42:2a:ad:ac:0d:89:
                    95:91:bc:34:53:1c:3c:da:45:f8:5a:d3:42:87:94:
                    f0:ff:80:d8:57:93:0d:b2:48:89:9d:4e:24:1e:2d:
                    93:d4:f4:2e:25:ff:5b:0b:f1:d8:9e:99:05:84:f4:
                    41:3d:6b:57:d6:da:65:32:02:6b:5b:e1:ea:98:3a:
                    1d:a6:3c:3a:82:7b:37:ea:a7:c9:be:73:7e:04:51:
                    b3:d4:71:8f:ba:0c:a7:f7:c9:c9:a0:7f:9f:ae:bd:
                    75:9f:a0:3c:8c:3e:81:96:c1:2a:c9:53:0c:a0:13:
                    52:06:42:a6:6b:77:61:3f:39:1b:55:b7:d1:73:d9:
                    03:3f:c9:83:63:93:f9:8c:bc:03:7a:25:83:f7:7a:
                    50:27:7a:42:04:87:b4:2e:fe:ae:85:b3:08:9b:f3:
                    13:82:cb:13:4d:17:19:8c:e4:da:27:5e:c4:f8:b9:
                    22:55:15:31:ef:ef:37:e7:88:22:cc:85:36:6f:a4:
                    2f:f8:fd:76:37:ba:aa:82:b0:aa:3c:2d:87:22:11:
                    60:15:94:e1:5c:69:3c:f8:25:40:4e:3c:39:81:69:
                    9d:b5:cd:dd:e0:94:b9:d7:5c:35:b7:d2:35:17:71:
                    fc:ff:ad:f9:79:fe:e9:c3:db:c9:df:bf:e0:79:d0:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:83:B6:95:B8:90:44:EC:FB:4D:F6:2E:12:21:8B:FC:C2:69:A8
            X509v3 Authority Key Identifier:
                keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:db:79:32:9c:91:71:ac:52:85:75:f3:2d:e4:8e:c4:9f:
         3c:c2:55:14:58:2d:51:cf:65:b2:72:e9:9d:06:1b:3d:ba:60:
         92:a6:8b:27:8e:82:ff:13:77:9e:f6:8c:55:8a:e1:b1:9c:3b:
         9f:17:ed:5a:4b:6b:8e:4e:20:06:0e:84:49:12:8a:3f:18:7a:
         d2:67:32:7a:bb:05:38:0b:47:46:a5:05:0b:f4:9d:3b:1b:40:
         a7:19:dc:11:ca:bb:52:06:06:96:94:d8:0a:7c:fd:ef:cc:30:
         73:fd:de:5c:c0:c4:6e:b6:a1:2a:c1:1e:0c:8d:76:e9:19:ef:
         59:45:ab:5e:bb:85:04:7a:df:00:24:94:5d:ed:d8:82:6c:c7:
         68:91:29:1f:47:ef:4b:1c:ad:cd:28:a1:f0:00:1d:e3:2a:06:
         8a:1b:35:3e:01:4e:19:a4:67:ba:09:25:18:d6:23:58:32:21:
         2b:bd:85:14:df:6f:10:15:b0:02:ce:2f:b9:7c:5c:40:30:23:
         67:f2:9b:c3:18:9a:73:49:9e:79:39:12:93:7f:fe:68:3b:6e:
         52:2e:06:97:51:0b:17:91:48:a3:29:c2:fd:fd:e6:b6:e8:9e:
         b8:02:9f:1c:e0:4f:99:b6:3b:6e:f2:59:1e:e3:97:3f:5b:b7:
         c8:28:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----