Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
File:                     F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json)
Hash identifier:          HjGF+BHI4YOgZOSpilAjjoLFPzRvD9ExKrRBLy/pc8o=
Subject key identifier:   7E:EC:34:57:05:9D:40:82:55:BB:D9:BB:2B:9C:A1:53:30:7B:3F:45
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       182EAD7A3D027A16BC4DF52D8538DA3CBF9530CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
Manifest number:          016D
Signing time:             Wed 29 Jan 2025 11:21:56 +0000
Manifest this update:     Wed 29 Jan 2025 11:16:56 +0000
Manifest next update:     Sat 01 Feb 2025 23:12:56 +0000
Files and hashes:         1: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: 6wwfL31Om8ctedEcQ+VmJY1JMp9rj5McIm66tvOZaEQ=)
                          2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=)
                          3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=)
                          4: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=)
                          5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:ad:7a:3d:02:7a:16:bc:4d:f5:2d:85:38:da:3c:bf:95:30:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Jan 29 11:16:56 2025 GMT
            Not After : Feb  1 23:12:56 2025 GMT
        Subject: CN=7EEC3457059D408255BBD9BB2B9CA153307B3F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:22:ca:44:a0:ca:c6:a7:cc:68:b6:1b:b6:
                    e1:b5:56:08:88:f7:8e:dd:3e:50:ad:f9:7f:ac:25:
                    3d:a4:cf:41:ee:c8:96:e1:22:bb:b8:4d:e5:ae:6c:
                    53:ad:9f:19:c4:05:82:64:25:32:29:fd:c3:44:e6:
                    53:af:77:30:63:0c:6e:8c:19:85:79:40:49:65:09:
                    f6:1f:ce:72:ae:8b:bb:32:ba:22:51:48:18:97:07:
                    2c:cd:d7:4f:d6:fd:93:bf:94:2b:6a:db:27:ac:df:
                    9c:d7:97:9d:ba:ec:c4:a2:41:d8:68:ea:6d:61:04:
                    26:a6:53:37:d1:a2:b0:32:02:a3:2a:f7:2e:c0:0e:
                    42:7a:7a:de:67:91:84:b8:d2:15:d7:69:20:59:8c:
                    62:56:33:b5:29:e5:7b:76:1e:c4:d6:49:93:50:fa:
                    57:ed:cd:bf:bf:37:5c:43:4b:10:b1:c0:a0:ed:8d:
                    7f:30:e2:d8:61:3b:0d:2c:e8:a9:07:fc:98:b5:41:
                    b0:2c:af:28:bc:6f:72:e2:57:d7:06:de:67:30:aa:
                    05:64:a4:17:eb:4f:fe:ad:86:49:5a:a8:b5:04:e2:
                    36:66:5d:0c:a4:97:cc:b7:c8:45:cc:66:fe:21:95:
                    ba:59:05:d9:f1:8f:4d:94:40:44:38:c9:da:a6:d5:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:34:57:05:9D:40:82:55:BB:D9:BB:2B:9C:A1:53:30:7B:3F:45
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:06:90:b0:28:96:e4:53:4e:ae:f7:d0:d0:fb:9d:5c:13:
         d2:7f:1c:16:92:3f:98:eb:e2:d3:41:6b:ae:37:6b:47:5e:36:
         20:c9:93:15:13:b1:b5:4d:8a:e0:35:8c:49:b8:de:e2:f8:b8:
         2f:f4:d9:60:56:ee:5c:c3:4f:63:29:62:c4:58:c7:de:78:b9:
         71:45:d7:c5:36:1a:f8:47:e1:b8:04:cc:dd:c0:9a:49:ee:b0:
         ca:6d:86:a4:75:53:56:6f:d4:e7:c8:a8:9f:f8:a2:db:45:e3:
         e1:d0:e9:59:b0:e6:59:d3:8f:61:ba:8a:52:86:58:80:24:c8:
         7e:21:02:d1:ef:f1:d0:61:7e:58:63:01:ee:c4:96:31:77:b3:
         d0:1c:dc:da:c0:bf:81:6a:68:c6:b9:c4:4e:de:f5:83:e8:f4:
         64:9d:b4:48:78:a6:a5:ba:90:98:13:8b:c7:c3:bf:87:9b:16:
         4e:3e:0d:ec:bd:0e:a3:07:d9:4a:03:8a:71:7d:23:5b:b3:f0:
         f8:06:d1:01:5b:89:e8:15:8b:60:b7:ca:65:04:7e:0c:90:9d:
         eb:27:32:f3:b9:f8:90:12:c9:73:fa:7e:9b:11:9e:67:25:31:
         95:b3:8b:e5:ec:59:5e:53:4c:14:54:20:24:36:71:9a:54:aa:
         42:46:eb:55
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGC6tej0Ceha8TfUthTjaPL+VMM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5
NDNEQTIzQzAeFw0yNTAxMjkxMTE2NTZaFw0yNTAyMDEyMzEyNTZaMDMxMTAvBgNV
BAMTKDdFRUMzNDU3MDU5RDQwODI1NUJCRDlCQjJCOUNBMTUzMzA3QjNGNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMCLKRKDKxqfMaLYbtuG1VgiI
947dPlCt+X+sJT2kz0HuyJbhIru4TeWubFOtnxnEBYJkJTIp/cNE5lOvdzBjDG6M
GYV5QEllCfYfznKui7syuiJRSBiXByzN10/W/ZO/lCtq2yes35zXl5267MSiQdho
6m1hBCamUzfRorAyAqMq9y7ADkJ6et5nkYS40hXXaSBZjGJWM7Up5Xt2HsTWSZNQ
+lftzb+/N1xDSxCxwKDtjX8w4thhOw0s6KkH/Ji1QbAsryi8b3LiV9cG3mcwqgVk
pBfrT/6thklaqLUE4jZmXQykl8y3yEXMZv4hlbpZBdnxj02UQEQ4ydqm1e1DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfuw0VwWdQIJVu9m7K5yhUzB7P0UwHwYDVR0j
BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4
QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE
QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy
YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw
NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGB7BpCwKJbkU06u99DQ+51cE9J/HBaSP5jr
4tNBa643a0deNiDJkxUTsbVNiuA1jEm43uL4uC/02WBW7lzDT2MpYsRYx954uXFF
18U2GvhH4bgEzN3AmknusMpthqR1U1Zv1OfIqJ/4ottF4+HQ6Vmw5lnTj2G6ilKG
WIAkyH4hAtHv8dBhflhjAe7EljF3s9Ac3NrAv4FqaMa5xE7e9YPo9GSdtEh4pqW6
kJgTi8fDv4ebFk4+Dey9DqMH2UoDinF9I1uz8PgG0QFbiegVi2C3ymUEfgyQnesn
MvO5+JASyXP6fpsRnmclMZWzi+XsWV5TTBRUICQ2cZpUqkJG61U=
-----END CERTIFICATE-----