Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft
File:                     E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json)
Hash identifier:          mPKsw5bZt1JFXm6pT1vsC7ekLkiGxbQQ2HyCjfHYsQ4=
Subject key identifier:   F4:A8:07:F0:AA:7A:D5:8C:98:89:30:2D:84:15:B6:D2:30:F4:47:33
Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
Certificate issuer:       /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Certificate serial:       620D969A6340F93A883278033B62007E17C07EA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft
Manifest number:          0168
Signing time:             Fri 31 Jan 2025 17:00:01 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:01 +0000
Manifest next update:     Mon 03 Feb 2025 23:14:01 +0000
Files and hashes:         1: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=)
                          2: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: SxSv4At5x4bNso2mHNi27ZKWOdP8yBGSQTdT/V6TZtE=)
                          3: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=)
                          4: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=)
                          5: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0d:96:9a:63:40:f9:3a:88:32:78:03:3b:62:00:7e:17:c0:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
        Validity
            Not Before: Jan 31 16:55:01 2025 GMT
            Not After : Feb  3 23:14:01 2025 GMT
        Subject: CN=F4A807F0AA7AD58C9889302D8415B6D230F44733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:d8:eb:17:45:4c:85:ef:5d:38:be:f5:db:
                    72:61:90:f9:41:fb:04:47:71:a0:b3:cb:99:5e:55:
                    c7:43:98:d3:3a:db:2f:38:3e:36:99:a0:05:b4:35:
                    e5:ca:06:b1:19:65:71:0c:50:6d:6d:2d:37:dd:21:
                    a4:d5:15:14:b9:88:0f:9d:c4:63:09:cc:f3:3d:16:
                    14:d8:fd:21:9b:d3:c5:b9:00:5b:15:e4:d7:dd:8a:
                    27:07:ca:14:bc:ff:53:f7:ac:98:60:60:c5:63:b6:
                    49:13:8e:18:aa:10:41:eb:32:8d:79:66:1c:5a:cb:
                    56:6e:bc:de:fd:88:bd:a4:76:c1:e9:18:14:de:fb:
                    15:95:12:51:25:7c:3a:96:9c:db:c9:ac:ff:66:d4:
                    d7:d9:40:99:3d:78:6b:c9:39:5b:ab:a5:42:e7:89:
                    42:f3:49:b7:df:ee:7a:35:13:31:a7:7c:89:63:22:
                    93:b8:e6:1c:d7:0e:81:4e:fa:f4:4d:5b:fe:50:04:
                    f0:2a:cc:13:51:d3:43:c2:3a:44:b9:70:fb:eb:6a:
                    a8:51:73:95:49:9c:d7:d6:60:20:8b:97:47:5a:e4:
                    16:c6:3a:cb:1e:fe:77:ad:f7:aa:18:58:5f:6d:50:
                    04:7c:3c:8a:ad:02:66:53:20:b3:a2:1a:29:46:03:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A8:07:F0:AA:7A:D5:8C:98:89:30:2D:84:15:B6:D2:30:F4:47:33
            X509v3 Authority Key Identifier:
                keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:8f:64:fd:a1:70:a4:0e:9b:fc:d8:bf:0e:ae:fb:c2:a7:
         91:4a:f6:1c:ba:aa:3c:ec:42:73:51:1b:4b:72:67:a5:96:a5:
         d4:c1:d7:c0:cc:63:c2:54:fd:5c:c1:20:1c:69:8b:81:fa:e2:
         4d:28:b9:8c:f4:9a:a2:76:43:9e:16:81:ef:1d:b3:52:81:b2:
         f8:19:1c:7d:cd:4d:1d:de:d5:ad:f6:44:1a:27:51:5d:9e:ea:
         35:b8:6c:c8:c3:b5:c9:47:95:61:eb:84:30:29:a5:7d:4b:9a:
         44:e8:63:13:9b:3d:f7:c0:b5:d1:84:b8:de:40:c5:50:b4:1d:
         0d:67:b7:9d:30:0d:80:ae:a3:ef:22:7f:ab:d9:37:90:c9:61:
         b7:3b:11:3e:d3:fa:1e:12:6d:93:1f:8d:1c:63:ed:89:a7:6f:
         1d:26:05:fe:00:4d:f2:6d:97:b4:4a:9f:74:ea:39:f2:a6:7b:
         3a:cd:d2:0f:9e:7b:4d:d5:79:d6:10:e1:f8:c4:0e:69:48:a9:
         e9:34:8f:44:8e:77:b7:33:2b:e6:ec:0b:3c:04:20:39:3a:7b:
         f7:8d:04:2f:8e:b4:08:55:40:76:37:db:a8:53:e4:f0:50:bf:
         7d:46:4a:fd:87:aa:7e:1d:48:2b:bb:0e:9a:d4:aa:cc:f4:59:
         2b:8f:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----