Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft
File:                     00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json)
Hash identifier:          B2XATstiAnWAaf71OtHfZZ2aiOHmhfYWHkiURe1vTL8=
Subject key identifier:   6C:1E:03:06:91:32:0C:2C:05:1C:81:ED:D3:D9:D0:31:29:DC:1E:21
Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F
Certificate issuer:       /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F
Certificate serial:       24EA3810CBD151DC0CC64876F71DC879E4482700
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft
Manifest number:          04A2
Signing time:             Thu 30 Jan 2025 23:40:42 +0000
Manifest this update:     Thu 30 Jan 2025 23:35:42 +0000
Manifest next update:     Mon 03 Feb 2025 02:31:42 +0000
Files and hashes:         1: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: HLEWFtCpCB2EZIgd+Nbb6dNDr2nRY9qggzs4p2imZIQ=)
                          2: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: GyQ3rTA4havMS5lidJTX5ZhWoHPWWQvhSKW+0x1lFv4=)
                          3: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: 3EM09fz5U4vIetkukDcNawwvtS4WV5nD8HmoRxw+WmQ=)
                          4: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: mIQL4Q5wnaduq+Smgc4E/2achiI+t5Z1BEbqpLX1tbs=)
                          5: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: Mb0v9h1dQ2fzKimG/dnv0t/MA1EgX4nopy7o63/fKic=)
                          6: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: ii+HEOYSI26ONdCQzTSyl9DTOtWXGw12f4RUOO1wwl4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ea:38:10:cb:d1:51:dc:0c:c6:48:76:f7:1d:c8:79:e4:48:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F
        Validity
            Not Before: Jan 30 23:35:42 2025 GMT
            Not After : Feb  3 02:31:42 2025 GMT
        Subject: CN=6C1E030691320C2C051C81EDD3D9D03129DC1E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:80:1d:88:8a:99:42:9c:a7:f4:64:7f:2c:
                    7a:c8:fe:21:93:be:6c:01:cf:28:fb:af:dc:52:e7:
                    eb:db:fc:cb:9c:50:02:cb:b2:8f:26:d9:67:10:f1:
                    09:18:eb:01:5b:a7:6c:1c:32:ed:87:f1:ac:6c:1c:
                    fe:dc:f1:da:c4:cc:58:48:1e:bc:c5:04:4f:bd:79:
                    c2:18:74:77:d5:ae:7f:aa:86:0f:d6:44:af:86:60:
                    5e:54:7d:e3:ff:6c:9a:3e:6c:ec:e1:45:1e:62:b8:
                    1a:9b:b9:bd:10:ef:31:af:fd:94:4e:a2:c2:93:bc:
                    66:61:47:94:20:44:6d:72:53:00:29:6b:fe:e5:5c:
                    0d:f1:87:e2:e7:ad:8a:d8:1b:3c:67:2c:3d:24:ae:
                    3f:f4:e8:ee:df:bf:29:03:72:f4:ff:fe:27:cb:f1:
                    39:e5:a3:ce:78:10:39:45:f6:d1:be:03:77:b9:ee:
                    c9:a2:02:e4:91:77:e0:32:06:86:a1:e2:6b:79:bc:
                    a8:13:b4:ef:ff:75:76:63:bc:8d:f5:da:bb:35:08:
                    4c:3e:05:3c:07:e9:cc:de:46:e5:e8:8e:5c:28:59:
                    bd:7e:b2:98:86:90:f0:fb:12:60:89:dd:0f:5e:a2:
                    36:1b:98:bb:72:ec:21:e2:23:1a:08:b4:83:fc:11:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:03:06:91:32:0C:2C:05:1C:81:ED:D3:D9:D0:31:29:DC:1E:21
            X509v3 Authority Key Identifier:
                keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:a0:0b:61:4b:bf:c3:5b:ef:c4:ad:b1:cd:c8:34:0e:d5:
         6b:6c:31:18:e7:c3:09:80:1e:d6:e2:0f:6a:39:3d:71:79:f9:
         6f:9e:36:03:ed:81:1d:fd:8c:75:fa:d2:7c:de:e9:35:4a:89:
         1d:3e:ff:7a:6f:41:f6:8c:ee:b4:43:1e:de:3e:f1:2d:3f:2b:
         85:50:f5:1b:21:72:30:14:d4:4d:71:3b:18:93:25:44:90:7c:
         15:a6:6c:27:4d:7f:f1:68:b8:b6:b9:39:b6:1a:4b:84:96:72:
         68:e2:55:c3:b0:4d:e0:1d:01:f7:d2:b0:3d:ef:29:d0:47:45:
         ed:75:82:6e:65:22:55:4b:33:cf:44:5b:86:75:34:be:c2:84:
         f0:51:21:8e:2f:9a:a5:11:8a:b7:b7:f5:d1:00:2a:9d:cb:38:
         34:2d:c1:a0:a0:6a:4b:8d:5b:a6:9c:7e:1f:dd:66:20:18:6b:
         97:23:ed:04:16:09:46:d9:3f:8a:fc:f3:e7:8d:56:2e:11:04:
         64:a0:d8:8a:0c:8e:66:05:c6:40:fc:e9:5d:ed:63:86:78:1c:
         3b:98:46:d3:f9:15:8d:9a:e6:7a:c8:f9:6d:bd:a9:81:cc:e0:
         e4:38:74:f9:53:5c:f4:47:48:3b:76:0a:4c:56:4c:b0:71:39:
         b1:cf:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----