Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File:                     89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier:          Xva+8vWfdUGevJ2VgB/BMguDCYo8mXzalOeMDhOdpLA=
Subject key identifier:   3F:2D:12:B4:C9:5D:85:94:E8:6D:DE:0F:A5:91:EB:74:59:61:6B:BA
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       12BAF88678B2AF3EB405654DB9DFB67E10C659D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number:          0479
Signing time:             Wed 29 Jan 2025 15:51:48 +0000
Manifest this update:     Wed 29 Jan 2025 15:46:48 +0000
Manifest next update:     Sat 01 Feb 2025 22:53:48 +0000
Files and hashes:         1: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=)
                          2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 3kwk4UMF9iNYpMSf21W/eUwvYsmaPApbmHcViGehMaU=)
                          3: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: DO7ogbI2UpcST5Do0xfAryknKNzHKoFL4YPFX4NOgG8=)
                          4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c=)
                          5: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: PwE45jFMLVz2aKNWwjQc8HudCo64xhteJbVEjdFpgd8=)
                          6: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: RRf7Ql5h5SbEAMdw78K3C64pckvhoIOxh8aHbdnCv8o=)
                          7: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ba:f8:86:78:b2:af:3e:b4:05:65:4d:b9:df:b6:7e:10:c6:59:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: Jan 29 15:46:48 2025 GMT
            Not After : Feb  1 22:53:48 2025 GMT
        Subject: CN=3F2D12B4C95D8594E86DDE0FA591EB7459616BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:b8:6c:c8:fb:e9:13:1c:77:e6:30:89:d6:
                    9c:86:31:19:8d:6e:17:2c:5d:b8:0d:51:4e:e6:67:
                    ef:f5:cb:3a:59:b3:ff:f0:8e:6d:07:b6:24:38:d9:
                    c2:6c:cb:ed:e5:97:6c:80:23:6b:aa:68:af:d6:ac:
                    f7:f0:ab:c4:c5:44:61:f4:63:47:b0:a6:37:68:4a:
                    b3:b6:79:bd:22:c6:ea:22:37:37:ff:d4:44:3f:ef:
                    cc:d9:28:ec:84:5f:17:a8:2e:47:33:08:c2:45:66:
                    d3:d3:df:8e:77:6d:01:a6:c6:45:ab:c6:36:a3:9f:
                    02:48:64:05:8b:c6:59:c0:b8:e6:aa:00:ab:85:24:
                    8d:e8:b8:ec:d0:bd:95:7e:d1:e9:ce:cf:a6:b5:11:
                    e8:79:6a:59:02:d3:0c:15:62:99:b8:cf:db:fe:e4:
                    2b:a6:02:1a:a9:63:74:76:09:a7:6d:5f:68:d6:94:
                    85:0d:eb:13:fb:0a:2d:e4:07:41:ec:34:66:65:b2:
                    47:c6:2e:51:7a:82:f9:98:f2:81:a0:32:f3:5b:cf:
                    73:7f:c4:dd:ae:5d:7c:9c:08:9b:01:f3:5b:17:77:
                    ff:2e:03:f8:77:b1:15:72:21:0d:9b:20:30:db:bb:
                    9a:96:e0:d2:11:df:cc:46:30:28:34:46:c2:4f:ff:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:12:B4:C9:5D:85:94:E8:6D:DE:0F:A5:91:EB:74:59:61:6B:BA
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:a7:b9:e1:bf:b9:68:14:17:95:ec:4f:78:ab:25:f1:30:
         26:6f:0b:86:b9:fa:a2:34:22:53:c0:15:4a:88:4b:a9:e1:1a:
         89:d1:54:25:5c:f0:30:c8:b3:4f:2b:81:2a:6a:fa:64:85:cc:
         db:2d:5a:d6:e4:a9:31:40:b7:4e:ff:da:bd:fb:83:d4:d3:de:
         79:87:2d:64:0a:6e:3a:dd:5a:f4:eb:05:19:69:0c:94:73:4c:
         54:2f:05:60:98:88:44:65:2f:e5:3a:09:74:e0:19:0b:88:e3:
         cf:0a:55:da:a2:0d:1a:29:f3:97:9f:3a:19:e9:0e:5b:dd:ad:
         9e:59:23:4a:ee:ca:11:28:50:ef:39:28:a4:a8:71:79:eb:0c:
         2d:8f:65:64:2c:87:65:28:17:8f:26:de:0e:5c:34:c1:d4:56:
         c8:3c:3d:98:e9:36:de:ce:e9:3e:0b:05:a2:58:3d:fc:d5:b6:
         89:bb:25:99:0e:e3:6e:d9:f5:e9:8c:32:23:a7:7d:23:cc:a5:
         c0:3a:51:de:4c:ee:4e:3f:85:b7:32:28:c3:8a:b6:a9:84:5a:
         9e:9e:f1:13:ce:66:5f:84:20:1b:a7:b0:d2:ca:9e:d3:a3:bf:
         0f:c5:9d:f0:48:ce:f6:d3:80:62:e0:1b:f1:16:cd:f9:da:8d:
         cb:74:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----