Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
File:                     FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json)
Hash identifier:          UzBEQRu10IVj8KR5QNUJfBqut6ZMW1Iufyk5Z1FlA+A=
Subject key identifier:   D1:3D:76:07:4C:03:68:EC:32:04:B2:42:72:BE:70:A5:32:DC:95:4C
Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
Certificate issuer:       /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Certificate serial:       65A5B47CA8D0FEA69C875A8A1E3C2E050E917181
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
Manifest number:          04AB
Signing time:             Thu 30 Jan 2025 08:41:54 +0000
Manifest this update:     Thu 30 Jan 2025 08:36:54 +0000
Manifest next update:     Sun 02 Feb 2025 11:35:54 +0000
Files and hashes:         1: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: ixRSzbLsmV+ke+fWtUXnvyxXmIn6Pm5nIY9ItISO/d4=)
                          2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: aPp8Wggq6IekM/UN3qv/W18PD70qmh9HNYPiKuvakcM=)
                          3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: 6jBV+YbQK26iBcOQ7S5zsMw9nUVxGEuIbJ7fF7HfYs0=)
                          4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: h2g3sIbdso4gRFxWGiYO/f5Y9InbwTXbbshwWzTUD+Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:b4:7c:a8:d0:fe:a6:9c:87:5a:8a:1e:3c:2e:05:0e:91:71:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
        Validity
            Not Before: Jan 30 08:36:54 2025 GMT
            Not After : Feb  2 11:35:54 2025 GMT
        Subject: CN=D13D76074C0368EC3204B24272BE70A532DC954C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:e7:67:e3:94:e8:46:b7:ac:49:da:db:aa:
                    f8:79:3f:c5:30:9d:bc:ed:6c:ea:6a:65:b5:15:cc:
                    1d:c8:3d:29:29:0b:f7:1b:50:20:a6:90:eb:07:8d:
                    b1:cf:3f:61:d3:14:ef:46:2b:47:ad:02:67:b8:52:
                    39:69:ac:11:46:75:dc:84:be:62:cf:63:f2:76:99:
                    c9:79:d4:ce:72:e8:1e:17:53:dd:a0:85:d7:b0:fc:
                    dc:06:f8:88:5a:2b:04:dd:7d:b9:9d:37:a8:e3:84:
                    2f:88:2c:b9:b1:63:9f:ef:bf:88:15:01:f4:65:e3:
                    db:9b:27:4b:52:db:bd:f0:80:b1:1a:98:13:b2:76:
                    95:98:46:b9:c3:a5:52:8d:d5:d4:2b:9c:bd:12:02:
                    9c:d2:e0:d3:9c:e7:7b:61:1c:68:3e:43:65:ea:ab:
                    5d:72:9f:e3:43:07:e9:40:a6:f8:9f:ff:40:fc:c9:
                    33:6f:e8:ba:5d:18:89:4d:09:bc:8e:bf:f0:df:40:
                    66:d8:49:d0:ed:15:14:8f:f5:1c:dc:b1:2f:a4:ec:
                    9a:c5:fd:f7:5a:ef:73:98:8d:5b:65:4d:04:c5:61:
                    0f:49:04:f7:5d:ec:50:5d:91:d0:a7:a4:ae:ec:3f:
                    86:2b:b4:63:e1:86:9c:78:ea:7e:59:1d:29:29:12:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3D:76:07:4C:03:68:EC:32:04:B2:42:72:BE:70:A5:32:DC:95:4C
            X509v3 Authority Key Identifier:
                keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:47:85:14:10:e7:25:47:10:90:34:15:95:eb:11:5c:8d:
         0c:05:f6:22:f6:43:26:a6:54:b1:b6:b3:88:50:b0:2f:98:6a:
         25:64:52:c4:f7:33:c6:a1:3b:84:b3:30:db:87:af:0a:38:3a:
         2a:95:23:2c:9a:c1:aa:72:7e:fd:eb:8b:f0:e9:51:c0:1a:03:
         0d:fd:da:04:52:67:cc:65:c7:43:8b:05:d8:25:94:f9:03:3d:
         1b:a5:a7:90:3a:24:9e:79:0b:45:c2:e4:e2:84:df:ec:57:09:
         04:58:69:79:b8:33:78:14:35:e5:3b:ce:88:7b:ab:36:0c:5e:
         b7:65:7f:fb:95:e2:99:c8:b1:95:59:26:32:5a:9a:40:03:57:
         fd:65:a6:03:ba:d9:96:3e:3e:fe:a6:bb:71:75:2d:93:04:5e:
         bc:8d:77:1e:22:1f:d5:af:c4:e3:95:8c:8e:ed:b0:0c:26:bf:
         85:42:16:06:b3:4f:dc:a2:dd:f3:f5:4b:c5:25:76:2e:db:0d:
         4a:cc:56:c0:b6:1b:26:ee:2a:cc:f2:89:34:71:76:71:15:5a:
         97:df:22:e6:61:0c:03:bb:46:f5:f3:13:8b:fa:49:e1:17:38:
         e9:ca:dd:12:69:ba:39:e1:64:dd:a4:c3:19:3e:e2:26:38:22:
         b9:c8:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----