Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
File:                     3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json)
Hash identifier:          A/X1l3V7JqbX1oPAaH/rvbEbB1SlfAhDVuH3E4mIrhw=
Subject key identifier:   AB:A5:0F:64:AA:B4:00:7A:B7:5B:80:C7:E8:B3:AD:BF:46:FB:29:EA
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Certificate issuer:       /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial:       2AB0B9FF1EEC8FAFA2936F5059FB7D6DC3114847
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
Manifest number:          97
Signing time:             Thu 30 Jan 2025 08:21:51 +0000
Manifest this update:     Thu 30 Jan 2025 08:16:51 +0000
Manifest next update:     Sun 02 Feb 2025 13:49:51 +0000
Files and hashes:         1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: pMG+ZAw0cWb9oW6JXLAMB44cr+AtbRvCQ3Z+y/D0PjQ=)
                          2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: EuWDRw74O+k8JEJvK09P76kFiPDImOnN/O3rdBgN6mY=)
                          3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: krImOk7uS01p8FYUEsyE38HwSzrilyeAWb5nA5kpK0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b0:b9:ff:1e:ec:8f:af:a2:93:6f:50:59:fb:7d:6d:c3:11:48:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
        Validity
            Not Before: Jan 30 08:16:51 2025 GMT
            Not After : Feb  2 13:49:51 2025 GMT
        Subject: CN=ABA50F64AAB4007AB75B80C7E8B3ADBF46FB29EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:b2:17:55:60:b7:7a:94:e6:43:bb:29:01:
                    21:df:aa:42:29:7b:86:ba:8f:e7:76:3a:c6:71:57:
                    cb:d9:bb:b8:d8:1e:63:7d:41:08:80:8e:dd:ab:b6:
                    49:5b:50:0a:8b:b7:b0:09:55:3a:bc:c6:f3:62:f3:
                    2d:3a:0b:13:7b:24:89:10:3b:8f:2b:fa:18:56:6a:
                    56:59:90:82:7f:e4:6e:83:94:c6:58:2f:69:44:03:
                    24:5b:b9:a9:f5:9c:24:55:0a:03:c6:29:00:85:a7:
                    d9:9a:72:ad:67:09:ef:85:2d:4e:2e:87:fb:49:a1:
                    cf:16:5c:e8:08:53:0f:7f:18:ea:4f:60:88:9d:2b:
                    a7:99:8a:10:b7:62:cd:70:07:30:80:c8:dc:65:98:
                    7b:78:cd:dc:c0:48:cc:49:8d:9e:2d:f8:c1:f8:66:
                    7a:d7:22:cf:fa:79:6f:a8:da:74:9e:5d:6d:65:33:
                    9d:f4:ad:c3:68:cd:24:d2:af:b9:13:4a:36:bd:66:
                    e8:a0:c0:51:b7:8e:fd:bb:04:18:5e:86:3d:f0:a3:
                    89:3d:02:35:73:d3:28:dd:1e:a0:61:fd:4e:ad:84:
                    45:f9:0f:00:92:67:d2:af:9e:d6:9b:46:b3:aa:71:
                    f2:aa:96:c3:2f:c0:ad:94:86:2d:14:d0:d3:fd:f2:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A5:0F:64:AA:B4:00:7A:B7:5B:80:C7:E8:B3:AD:BF:46:FB:29:EA
            X509v3 Authority Key Identifier:
                keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:61:ec:38:18:c4:29:10:b6:f9:9e:5d:b6:30:63:33:12:
         6a:82:cf:25:73:73:01:e0:3b:d7:8d:15:6e:21:32:46:18:c5:
         55:3d:85:14:be:70:e9:c2:e5:77:2f:8a:15:a0:f9:fc:f2:d7:
         68:56:0d:3e:cb:a5:83:d2:4c:5b:8a:5e:00:64:b7:27:68:b4:
         ea:ea:0e:56:89:d4:66:1a:34:bc:a9:ec:07:29:ce:d6:e9:2d:
         bc:7b:59:ee:81:e9:d1:41:8c:00:52:4c:ee:fc:55:41:d3:3f:
         41:74:d5:92:90:a2:62:9d:bd:44:be:86:ca:9d:35:a3:2a:47:
         75:8e:2a:cb:fc:2f:4a:e0:f2:0b:08:72:79:ac:b0:ed:66:58:
         d3:ec:fa:b0:29:1a:81:e5:02:84:3b:7b:27:0a:13:c9:6d:3d:
         8a:65:b7:af:44:30:d0:1d:e1:69:06:0e:b9:05:17:ac:f4:84:
         59:3d:29:ae:cd:9a:2b:e6:0e:51:31:f8:7c:15:a8:57:a0:67:
         39:c2:3e:e9:90:a5:71:b4:52:9d:96:3e:73:25:76:41:75:d7:
         bd:05:5a:30:42:dd:08:e0:5e:e6:15:47:af:19:ab:ff:64:c6:
         a5:e6:da:2f:00:70:e0:e4:c8:26:2a:fe:79:0a:5f:1c:aa:5c:
         33:e8:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----