Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
File:                     2D18956397FA6055A44153CABF07303FD6E55E44.mft (raw, json)
Hash identifier:          950S4Hn0sWZIgvnZ9wsAKI4CejRFWLjdnxASaFKwnSQ=
Subject key identifier:   07:BE:E6:C3:F2:D0:05:2C:8C:A2:41:E2:95:3B:B4:B9:68:AF:4B:51
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Certificate issuer:       /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial:       0310CB3027D4DBD390288B3FB185587FE9E4DEED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
Manifest number:          04AE
Signing time:             Thu 30 Jan 2025 19:12:03 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:03 +0000
Manifest next update:     Mon 03 Feb 2025 02:40:03 +0000
Files and hashes:         1: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: 9pt7JLtOWMCBsJXp8H1J28V9N/OUvx5VflNai/uQZgc=)
                          2: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: LMlg0YtMMAZTGP6EzKXImD6a6ZjUtLMQ+VabkB5A5lc=)
                          3: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HyMWadhCrBlbrvw7eV4dA67xhQ9znG8zfhfFTeZs2rs=)
                          4: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: 1cZaLW2bYSVuCFR3p6/QnCg+KIF2tEt9ZDlyjUYN2tI=)
                          5: 2D18956397FA6055A44153CABF07303FD6E55E44.crl (hash: w+WE2g/tmpvGlKrEYRarfAyCSgBvJuFqXW0c7KOfU4o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:cb:30:27:d4:db:d3:90:28:8b:3f:b1:85:58:7f:e9:e4:de:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
        Validity
            Not Before: Jan 30 19:07:03 2025 GMT
            Not After : Feb  3 02:40:03 2025 GMT
        Subject: CN=07BEE6C3F2D0052C8CA241E2953BB4B968AF4B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:f9:b6:bd:2f:d3:29:09:7f:46:e7:6c:e0:
                    18:45:25:cd:4b:53:f7:16:07:f7:b6:e4:5f:e4:30:
                    c4:cc:28:e3:31:62:d8:f4:f1:6f:a5:e9:25:75:5a:
                    3d:07:db:68:2d:d0:0b:5d:1c:bc:95:63:66:88:0e:
                    7a:b4:dc:13:52:9d:02:dc:d0:fe:a2:6e:eb:0d:3c:
                    9b:02:51:93:f4:8e:a2:9e:f0:61:f6:41:5d:e8:8a:
                    df:9d:39:70:6c:89:80:a9:74:38:8d:18:da:4c:6c:
                    09:88:af:00:22:b2:5b:96:c9:fa:88:68:d9:47:50:
                    77:07:87:65:41:ff:4e:0e:54:7c:5a:9f:12:8c:ac:
                    4b:68:2b:01:9b:85:78:b7:5b:28:e9:5a:0d:2d:3b:
                    4b:29:62:66:b8:e3:a3:78:08:7e:e8:3b:d8:c3:9d:
                    68:d3:34:42:fc:33:ec:75:12:07:66:9e:a4:a3:3b:
                    80:c0:b9:92:e4:90:1c:a5:ee:06:05:79:8e:87:98:
                    5f:58:9f:c4:4f:b5:06:db:77:c6:7c:53:71:ae:86:
                    83:2d:88:3d:9b:5b:81:ba:34:c8:f4:2a:5c:18:98:
                    5f:16:c1:5e:2a:b5:c0:80:c9:8b:a1:50:fb:00:c1:
                    fc:5f:bc:94:55:35:77:58:ed:3d:5c:6c:80:89:2a:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:E6:C3:F2:D0:05:2C:8C:A2:41:E2:95:3B:B4:B9:68:AF:4B:51
            X509v3 Authority Key Identifier:
                keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e3:a8:80:31:fb:8c:d6:35:62:0d:b8:fb:5b:b7:af:f6:43:
         60:f0:be:1b:fe:a5:1e:af:be:8c:e0:84:df:b2:a8:e4:4f:97:
         a1:d8:26:9e:7e:82:bc:4b:ce:b5:39:9a:f6:c4:ee:91:75:04:
         5b:06:17:13:24:f6:2f:12:46:51:dd:f8:d4:fe:d4:3a:01:c8:
         c6:78:b1:aa:9c:66:0d:d5:dd:12:60:0b:51:6e:c8:e7:e9:46:
         85:d4:b5:82:86:fa:6c:d3:66:5a:c0:8f:e3:11:50:83:d0:12:
         d0:b8:60:a4:c3:44:be:9b:ac:36:9d:df:a5:9c:7d:c0:43:b0:
         cb:09:d1:8f:38:3e:a0:cd:7c:79:2f:e8:4f:9d:68:00:6e:41:
         bf:57:35:0b:88:84:a9:36:9e:64:45:1d:6d:9b:96:b1:97:3e:
         71:2f:d8:fa:27:f2:e6:db:dd:32:c1:fd:f4:1d:ba:26:2c:19:
         f5:4f:64:9c:d7:e6:14:78:b1:c7:b0:f1:79:6c:da:23:92:43:
         45:c1:a2:d1:92:35:ed:2d:48:42:1a:94:dc:52:89:ff:04:18:
         cc:29:e2:c7:e5:f2:92:98:9b:c2:f3:c0:84:0f:00:ae:c0:b4:
         7f:1f:13:fa:ae:7d:c2:f1:cd:9e:38:52:85:d5:53:71:5c:67:
         04:16:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----