Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
File:                     E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json)
Hash identifier:          j+ACr18/zp/66AR68H7dzeZyZ2vf+sGWuc1yFoKs4Vo=
Subject key identifier:   72:75:99:72:AD:9A:A6:10:09:02:A2:3C:A2:15:CF:5E:3A:69:A7:66
Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
Certificate issuer:       /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Certificate serial:       15DE3347C40260A3D8B3C3CB2DFDA549D18E5A6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
Manifest number:          2D
Signing time:             Fri 31 Jan 2025 14:21:52 +0000
Manifest this update:     Fri 31 Jan 2025 14:16:52 +0000
Manifest next update:     Mon 03 Feb 2025 21:08:52 +0000
Files and hashes:         1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=)
                          2: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=)
                          3: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: 8QEO1DrscXTe6g+bGPzNJR/A6RzfMhHMEiSmIZhn/g8=)
                          4: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=)
                          5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:de:33:47:c4:02:60:a3:d8:b3:c3:cb:2d:fd:a5:49:d1:8e:5a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
        Validity
            Not Before: Jan 31 14:16:52 2025 GMT
            Not After : Feb  3 21:08:52 2025 GMT
        Subject: CN=72759972AD9AA6100902A23CA215CF5E3A69A766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:70:35:95:fb:cd:8d:bc:50:2a:da:fc:2e:
                    18:ba:6e:78:6c:c6:9e:95:81:fe:2c:e8:1b:f1:14:
                    f8:e1:f1:49:b3:5c:5d:fb:b6:3d:55:c9:ee:b8:2f:
                    1f:76:32:70:22:b1:fd:5d:ce:d3:26:43:87:b6:86:
                    a9:82:7d:9f:2a:16:10:cf:53:c2:4b:ec:04:8d:64:
                    d2:2d:9e:36:c4:7b:55:f6:d6:37:0c:03:be:22:04:
                    c1:07:2a:14:61:91:3a:e2:d9:84:bd:89:07:d1:8d:
                    c6:39:fa:23:cf:10:e4:a2:ce:49:6c:27:1b:23:64:
                    b9:2a:4e:ae:fb:ae:fc:31:3d:55:a6:6f:c1:52:10:
                    3c:1f:05:f1:10:f6:58:d7:38:52:6c:26:41:35:ca:
                    56:57:88:e7:d7:62:18:5f:8b:6d:e7:83:cc:8f:fb:
                    2a:19:09:2c:55:92:83:47:a3:99:ed:21:26:7f:c7:
                    ea:f9:18:1a:88:8e:53:83:83:4f:9e:5c:38:82:21:
                    b6:16:a9:e5:18:c6:55:61:b7:77:62:9d:08:ff:ab:
                    de:41:78:a0:cc:dc:36:98:f4:45:46:5a:14:4b:5b:
                    68:5e:1f:a6:13:26:fb:c8:9f:6b:fa:2c:ee:df:ec:
                    53:42:65:90:95:61:26:e4:ba:94:a4:3d:0a:b8:d8:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:99:72:AD:9A:A6:10:09:02:A2:3C:A2:15:CF:5E:3A:69:A7:66
            X509v3 Authority Key Identifier:
                keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:f5:62:04:82:16:47:16:af:3c:71:f8:a9:21:27:43:4e:
         0a:1d:3c:30:82:13:82:c7:3c:9c:a7:89:cf:a7:91:2e:13:c8:
         66:b1:49:a2:ea:4b:f9:f6:c0:3a:81:00:01:d2:a2:99:4f:28:
         07:12:74:16:42:54:6d:9b:16:7b:a7:4c:fb:b1:a4:cd:f1:21:
         5f:ed:36:70:3b:d9:4a:bc:58:10:56:83:e3:40:9c:8b:a3:a9:
         fe:b0:92:3d:98:4b:fb:7a:33:5e:40:ea:b5:0f:e0:53:a0:7e:
         10:ab:bb:2b:8d:29:41:ab:e2:b8:9b:31:d4:e0:8e:ff:fc:ae:
         c4:e8:30:ef:b3:a7:81:64:61:a7:20:cb:77:3c:0f:6a:44:97:
         0a:26:a8:3e:a5:e3:dc:aa:81:5a:08:a4:5e:63:a0:9d:7d:f5:
         d4:79:c2:22:90:f6:f1:e0:94:da:b2:31:1d:2f:c0:0e:a4:70:
         66:ef:17:af:8e:c1:de:ac:a9:8c:0b:4e:7a:48:15:69:21:7b:
         28:14:45:ea:c3:09:95:54:d0:20:47:b8:63:91:33:27:e3:6e:
         8a:39:50:5e:53:2f:3a:f9:0a:43:24:3c:78:ff:4d:f6:5c:85:
         f4:89:52:d3:00:66:6a:0e:97:40:b7:65:2a:2e:8c:57:1d:eb:
         bb:7e:d2:03
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFd4zR8QCYKPYs8PLLf2lSdGOWmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3
RTFENzIxQzAeFw0yNTAxMzExNDE2NTJaFw0yNTAyMDMyMTA4NTJaMDMxMTAvBgNV
BAMTKDcyNzU5OTcyQUQ5QUE2MTAwOTAyQTIzQ0EyMTVDRjVFM0E2OUE3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHHA1lfvNjbxQKtr8Lhi6bnhs
xp6Vgf4s6BvxFPjh8UmzXF37tj1Vye64Lx92MnAisf1dztMmQ4e2hqmCfZ8qFhDP
U8JL7ASNZNItnjbEe1X21jcMA74iBMEHKhRhkTri2YS9iQfRjcY5+iPPEOSizkls
JxsjZLkqTq77rvwxPVWmb8FSEDwfBfEQ9ljXOFJsJkE1ylZXiOfXYhhfi23ng8yP
+yoZCSxVkoNHo5ntISZ/x+r5GBqIjlODg0+eXDiCIbYWqeUYxlVht3dinQj/q95B
eKDM3DaY9EVGWhRLW2heH6YTJvvIn2v6LO7f7FNCZZCVYSbkupSkPQq42LzTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcnWZcq2aphAJAqI8ohXPXjppp2YwHwYDVR0j
BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5
QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE
NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh
YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF
RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGbZ9WIEghZHFq88cfipISdDTgodPDCCE4LH
PJynic+nkS4TyGaxSaLqS/n2wDqBAAHSoplPKAcSdBZCVG2bFnunTPuxpM3xIV/t
NnA72Uq8WBBWg+NAnIujqf6wkj2YS/t6M15A6rUP4FOgfhCruyuNKUGr4ribMdTg
jv/8rsToMO+zp4FkYacgy3c8D2pElwomqD6l49yqgVoIpF5joJ199dR5wiKQ9vHg
lNqyMR0vwA6kcGbvF6+Owd6sqYwLTnpIFWkheygURerDCZVU0CBHuGORMyfjboo5
UF5TLzr5CkMkPHj/TfZchfSJUtMAZmoOl0C3ZSoujFcd67t+0gM=
-----END CERTIFICATE-----