Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
File:                     FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json)
Hash identifier:          NaHXwniPbGtXpAfHc4Htfp0yku9iACeCH/aS70Q4yko=
Subject key identifier:   87:AF:E7:67:D1:14:CC:1C:60:D5:46:88:99:69:E2:BC:E7:86:52:84
Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
Certificate issuer:       /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Certificate serial:       098A30170DE4CDDA5DA3EA54FF66A96A053F11DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
Manifest number:          0140
Signing time:             Wed 29 Jan 2025 23:41:58 +0000
Manifest this update:     Wed 29 Jan 2025 23:36:58 +0000
Manifest next update:     Sun 02 Feb 2025 01:34:58 +0000
Files and hashes:         1: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: oYp13dPnUhNA6rLOM4dhEbkIM9ZNyVjQpzIHXoBCFsE=)
                          2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: u22TiDBqhxRDgDXVHX7pAHC7nu8jAukDNtzJmORzlts=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8a:30:17:0d:e4:cd:da:5d:a3:ea:54:ff:66:a9:6a:05:3f:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
        Validity
            Not Before: Jan 29 23:36:58 2025 GMT
            Not After : Feb  2 01:34:58 2025 GMT
        Subject: CN=87AFE767D114CC1C60D546889969E2BCE7865284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:5b:4a:b3:4b:60:10:5a:4b:55:fb:72:3f:
                    0a:52:84:e7:d3:ff:7b:d9:57:ef:eb:2b:18:be:f9:
                    ae:a1:14:44:b1:0d:8c:09:07:18:07:4f:79:76:fc:
                    ba:a6:ab:55:a8:52:63:fe:a4:88:c8:8f:32:5e:9b:
                    66:96:9f:01:a4:1a:2b:cd:f2:8f:b9:57:f0:f5:f6:
                    78:ee:df:75:46:d7:4c:0b:9c:c3:24:7e:9d:d5:16:
                    4a:57:14:82:dd:d7:c0:fd:5b:75:eb:32:ef:25:e6:
                    40:e0:d5:9c:ba:b9:ce:87:70:27:9b:8f:2f:29:d4:
                    c6:de:0d:8b:77:48:00:bc:a7:46:9e:12:60:33:29:
                    f3:08:76:d2:9c:47:77:3b:c2:9c:b7:16:0a:89:1a:
                    c1:e3:3b:cf:e4:5d:57:19:25:0d:0f:40:51:bd:d0:
                    83:7d:22:5e:d6:1f:ce:b3:73:51:40:b0:6c:15:ba:
                    fa:1d:07:c3:44:b7:de:f7:7b:f5:ea:74:e7:ef:9a:
                    22:cc:6d:9b:48:79:8b:80:c5:ae:e8:6a:45:ce:9b:
                    4a:d6:6f:ff:6e:a1:cd:68:15:bf:2d:9e:61:8a:e9:
                    14:07:f1:90:3e:a6:ec:73:86:98:be:a6:c6:26:36:
                    83:e2:a2:1a:b2:4b:b6:e6:bc:6f:54:d5:60:d2:7f:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:E7:67:D1:14:CC:1C:60:D5:46:88:99:69:E2:BC:E7:86:52:84
            X509v3 Authority Key Identifier:
                keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:18:93:1a:3f:b1:6b:9b:36:86:c1:20:35:fb:8e:a1:d8:c9:
         0a:dd:d9:33:6a:cc:b4:6d:6a:86:30:51:16:02:fd:af:34:3a:
         f7:05:2c:a8:46:39:ba:6d:e9:0e:f5:c3:41:1d:28:3f:12:ce:
         10:26:8e:3c:87:98:be:29:12:79:11:44:e6:e1:30:53:e7:7c:
         39:d1:2f:eb:0f:b4:c3:c8:5b:3c:fc:1b:d2:5a:f8:fc:34:61:
         b4:7a:04:f7:e6:70:3c:ee:a4:c0:40:eb:f8:82:d6:0f:cf:39:
         7a:1f:46:f7:20:42:42:65:38:16:44:32:2a:ec:ba:60:8b:22:
         2e:47:db:d3:15:7d:79:4c:1d:96:32:6b:88:5e:ad:7b:77:97:
         18:06:c7:9b:88:40:2d:23:99:6d:b7:67:7e:1e:ee:60:eb:c3:
         35:31:9d:e7:cd:3f:07:71:08:9d:40:06:ef:05:7e:4e:1e:7b:
         5e:e2:9b:ba:59:40:a2:e2:ea:ae:43:95:b9:c3:38:9f:d5:73:
         80:4f:a6:46:cf:f6:58:d2:4b:8d:1f:9f:86:9d:6e:b0:ff:2a:
         9c:a6:74:f1:bf:06:8c:6e:d2:35:0c:79:6f:29:fb:35:90:8d:
         bf:5b:08:6b:96:8e:aa:86:38:15:11:90:48:88:c4:04:c3:46:
         f2:6c:a4:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCYowFw3kzdpdo+pU/2apagU/Ed0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw
N0IzNUNFMTAeFw0yNTAxMjkyMzM2NThaFw0yNTAyMDIwMTM0NThaMDMxMTAvBgNV
BAMTKDg3QUZFNzY3RDExNENDMUM2MEQ1NDY4ODk5NjlFMkJDRTc4NjUyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5FtKs0tgEFpLVftyPwpShOfT
/3vZV+/rKxi++a6hFESxDYwJBxgHT3l2/Lqmq1WoUmP+pIjIjzJem2aWnwGkGivN
8o+5V/D19nju33VG10wLnMMkfp3VFkpXFILd18D9W3XrMu8l5kDg1Zy6uc6HcCeb
jy8p1MbeDYt3SAC8p0aeEmAzKfMIdtKcR3c7wpy3FgqJGsHjO8/kXVcZJQ0PQFG9
0IN9Il7WH86zc1FAsGwVuvodB8NEt973e/XqdOfvmiLMbZtIeYuAxa7oakXOm0rW
b/9uoc1oFb8tnmGK6RQH8ZA+puxzhpi+psYmNoPiohqyS7bmvG9U1WDSf4hrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh6/nZ9EUzBxg1UaImWnivOeGUoQwHwYDVR0j
BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5
QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz
NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx
ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB
MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHQYkxo/sWubNobBIDX7jqHYyQrd2TNqzLRt
aoYwURYC/a80OvcFLKhGObpt6Q71w0EdKD8SzhAmjjyHmL4pEnkRRObhMFPnfDnR
L+sPtMPIWzz8G9Ja+Pw0YbR6BPfmcDzupMBA6/iC1g/POXofRvcgQkJlOBZEMirs
umCLIi5H29MVfXlMHZYya4herXt3lxgGx5uIQC0jmW23Z34e7mDrwzUxnefNPwdx
CJ1ABu8Ffk4ee17im7pZQKLi6q5DlbnDOJ/Vc4BPpkbP9ljSS40fn4adbrD/Kpym
dPG/Boxu0jUMeW8p+zWQjb9bCGuWjqqGOBURkEiIxATDRvJspCg=
-----END CERTIFICATE-----