Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
File:                     BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json)
Hash identifier:          xlgBFM13+UAz8tddbQiEoOEtt7B1Hi+aTZ72GtCdvGI=
Subject key identifier:   BA:C6:AA:07:8D:78:4E:7B:6A:0A:91:27:01:50:E2:67:7B:F0:90:2C
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Certificate issuer:       /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial:       78494C4C051E5ED8C58D36E5600C7E8B9D4734D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
Manifest number:          015A
Signing time:             Wed 29 Jan 2025 17:01:36 +0000
Manifest this update:     Wed 29 Jan 2025 16:56:36 +0000
Manifest next update:     Sat 01 Feb 2025 20:28:36 +0000
Files and hashes:         1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: Bj7TICbYtksyFgIA+LLtH5L4MjNzwOzwshxoeIwJ39c=)
                          2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=)
                          3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=)
                          4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:49:4c:4c:05:1e:5e:d8:c5:8d:36:e5:60:0c:7e:8b:9d:47:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
        Validity
            Not Before: Jan 29 16:56:36 2025 GMT
            Not After : Feb  1 20:28:36 2025 GMT
        Subject: CN=BAC6AA078D784E7B6A0A91270150E2677BF0902C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:79:14:cc:d2:fe:fe:9d:a2:cb:03:bc:9c:
                    24:27:1e:7d:fb:c0:ff:f0:e9:0f:cd:6e:f6:82:8a:
                    67:b7:a5:f3:8e:4d:74:83:cf:10:98:5a:71:69:a6:
                    e8:f5:26:b5:c8:88:92:13:c6:ed:ae:f9:d7:c9:f7:
                    c4:ff:8f:3b:21:4b:41:b2:04:9c:5d:8e:f3:3e:91:
                    94:7b:d7:e7:2e:ec:c6:f3:49:04:94:77:42:24:cb:
                    36:e1:26:e1:43:b4:2b:e3:77:8f:0e:e9:29:36:c2:
                    59:67:fb:e6:3f:69:dd:99:5c:d5:62:8f:39:cb:b1:
                    1d:be:8b:f1:f4:82:17:95:d0:8e:0c:e0:1b:04:e1:
                    d7:b1:07:dc:39:7b:64:fe:1f:5f:d1:3d:10:f7:9e:
                    a3:77:8b:6e:43:b2:99:75:a5:b7:b5:f3:1e:3d:f5:
                    26:e3:d9:fd:62:eb:b9:b0:c0:33:b0:89:78:92:56:
                    5c:1c:0d:46:19:8f:b5:40:b5:7f:e2:23:72:e0:7e:
                    b2:4e:fc:8e:8f:ec:fb:22:38:0f:1f:11:67:9a:20:
                    ae:94:5e:46:b2:0d:f9:68:ff:4b:d6:1c:3d:68:e0:
                    62:13:96:b7:82:dc:f7:e7:cc:62:b3:e2:31:3c:03:
                    a8:27:01:a7:f7:04:a0:76:9c:e0:3d:8c:a6:34:be:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:AA:07:8D:78:4E:7B:6A:0A:91:27:01:50:E2:67:7B:F0:90:2C
            X509v3 Authority Key Identifier:
                keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:e6:45:3f:37:ac:68:98:56:4f:96:0f:51:0e:21:6d:13:
         bc:28:df:a1:3a:53:6c:2d:1d:a9:0f:5b:9b:43:3c:31:87:c9:
         d7:8e:a5:81:23:24:78:3a:31:27:03:7b:64:67:96:b6:be:e9:
         37:c8:b3:14:63:ff:fe:fd:9a:26:dd:87:73:f7:59:60:43:3d:
         99:ee:14:ba:86:43:42:be:23:e2:f3:3f:bb:80:81:ef:96:62:
         2e:11:38:35:c8:7c:0b:01:18:55:ee:7f:88:0b:1a:f2:fa:ad:
         8b:e0:e7:5b:75:ae:d5:81:a0:8e:be:26:be:3f:46:78:55:d9:
         b9:4b:e2:6b:e1:3d:f5:84:77:8b:2b:bc:be:6d:02:de:3d:0c:
         bf:7c:ab:01:ae:aa:a5:8c:6f:73:a8:c8:6b:4e:6f:c2:89:b0:
         23:ab:fc:de:94:0a:b1:6c:51:37:47:98:42:0a:60:d3:b6:49:
         aa:77:9a:80:03:76:bc:af:04:98:49:ad:24:2a:77:06:7f:c5:
         27:fa:77:5c:e9:4f:84:41:1c:79:2d:61:5c:9a:e8:ce:32:f6:
         78:e8:55:21:08:3d:e6:a9:f6:c3:d5:e7:4a:67:a3:81:cd:87:
         e8:89:d3:1e:80:57:56:6c:0e:03:71:dd:e7:49:63:3d:ed:be:
         30:3c:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----