Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft
File:                     42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json)
Hash identifier:          IWa6+wrkHIu3qw4LKImW7+wnhGpw7psKpvsWOpq1G0w=
Subject key identifier:   13:6E:61:EE:13:BE:6C:BA:62:3B:4B:EB:AC:4E:75:6A:81:F9:8E:F1
Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50
Certificate issuer:       /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
Certificate serial:       7B5230D4DDC0A59457C68101FFB93BA12C640CA3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft
Manifest number:          0472
Signing time:             Fri 31 Jan 2025 12:51:48 +0000
Manifest this update:     Fri 31 Jan 2025 12:46:48 +0000
Manifest next update:     Mon 03 Feb 2025 19:41:48 +0000
Files and hashes:         1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=)
                          2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: Mb4bsXf0EPUlbWHG9XHQqViojfXewWzFWA1RRVbSGOU=)
                          3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:52:30:d4:dd:c0:a5:94:57:c6:81:01:ff:b9:3b:a1:2c:64:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
        Validity
            Not Before: Jan 31 12:46:48 2025 GMT
            Not After : Feb  3 19:41:48 2025 GMT
        Subject: CN=136E61EE13BE6CBA623B4BEBAC4E756A81F98EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:65:22:6f:60:34:0d:4a:ce:74:4d:0b:03:
                    10:98:5d:69:21:e1:41:e9:b5:34:dc:ed:c8:76:50:
                    65:26:2c:9f:dc:42:54:62:f5:ca:31:7e:ef:e9:43:
                    a4:97:9a:7d:63:bf:65:b0:36:87:89:ed:10:35:34:
                    18:c9:e9:f0:6f:a1:f8:c5:1e:fe:f1:a1:1d:b7:26:
                    9e:39:13:1d:99:32:a4:17:41:45:d4:03:25:6a:fb:
                    70:57:eb:45:4e:8d:90:e3:48:a8:0c:22:cd:39:47:
                    ed:c0:61:7a:8d:46:29:1f:ea:75:92:e5:99:62:c9:
                    8f:15:2d:4e:fa:59:0d:ab:d2:65:9c:63:2d:59:57:
                    6f:61:e6:82:56:77:f1:28:63:35:32:68:29:6d:04:
                    9b:72:b7:b6:17:80:4e:1f:e8:8c:50:ad:c2:12:cd:
                    f4:a3:b0:2b:0c:66:4b:b9:31:8f:94:89:5d:2f:28:
                    8e:b4:38:d0:98:53:71:ce:7e:ad:2b:b5:e9:db:38:
                    23:f9:3f:77:c5:df:90:45:ed:e3:e5:96:c6:4f:85:
                    18:f5:c7:54:ec:8a:5b:34:b2:9b:f2:16:da:48:7a:
                    6e:b5:38:70:06:bc:bb:0d:7a:25:0d:63:ea:a8:7d:
                    ea:ab:44:c8:9b:d5:0f:bc:5a:ac:6b:e5:e9:ab:db:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:61:EE:13:BE:6C:BA:62:3B:4B:EB:AC:4E:75:6A:81:F9:8E:F1
            X509v3 Authority Key Identifier:
                keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:a6:b8:a1:95:7a:d2:dd:d4:8e:27:37:64:29:2d:3e:d4:
         ca:0e:e9:13:42:23:5b:41:a4:8b:82:ea:e9:fc:e1:cd:a7:ea:
         57:4f:23:4e:37:83:f2:ca:f3:b7:b7:83:39:c0:6a:ab:67:b7:
         96:5d:7d:56:69:d5:69:c4:81:3c:6c:b8:b7:f0:ae:61:a5:4f:
         b7:fe:0d:66:43:0b:cf:82:b5:43:f3:47:cf:66:df:55:42:26:
         0b:37:31:f5:bd:06:60:00:8f:84:37:bd:48:bf:96:41:f5:65:
         db:1e:30:4d:bf:24:a2:de:09:2f:fe:cd:f8:85:fe:24:80:7e:
         a3:9d:bc:56:94:eb:69:67:78:91:36:84:cd:b7:0a:16:fe:2d:
         29:d3:6f:90:3b:22:5d:0a:50:9b:02:da:2e:c8:6b:b3:4f:f9:
         53:64:9e:41:a6:74:8c:06:ee:25:f7:ff:b9:e9:e5:b9:bf:ed:
         33:ea:e3:15:f3:ff:16:e2:81:39:e9:21:55:4f:b5:06:11:41:
         e1:20:8a:15:54:9e:cc:64:65:73:46:7c:c0:a5:60:76:f6:ce:
         d0:58:9b:d6:df:05:82:c6:4e:0d:92:d9:89:12:95:cb:8a:3b:
         e1:a6:4a:f8:6f:ae:9d:da:dd:69:20:66:fc:d9:82:43:c6:c9:
         e5:98:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----