Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File:                     52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier:          D/hbGfBeD+hB2vef/j3tWUWsWz4n1pS0oZ6oe2mZWHk=
Subject key identifier:   EE:96:1E:77:13:0F:65:7E:6A:FB:DC:3D:62:15:40:41:08:30:5A:7A
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer:       /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial:       3D399FB4867318ED288703072F974F71ADFF48ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number:          045D
Signing time:             Wed 29 Jan 2025 20:51:37 +0000
Manifest this update:     Wed 29 Jan 2025 20:46:37 +0000
Manifest next update:     Sat 01 Feb 2025 22:10:37 +0000
Files and hashes:         1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: /hJyfV6PR16JNZ+DEa2S1gpvBiL5SDBd/0mdlnBUhuY=)
                          2: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: D/GMNHI7CLkDPs1mYPSWjb3uTyoEMueHKbHZ7wFQlZo=)
                          3: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: MOwE9NdjkbMsjqSArgWX/DHZff75hmj3QBsAYiIXqhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:39:9f:b4:86:73:18:ed:28:87:03:07:2f:97:4f:71:ad:ff:48:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
        Validity
            Not Before: Jan 29 20:46:37 2025 GMT
            Not After : Feb  1 22:10:37 2025 GMT
        Subject: CN=EE961E77130F657E6AFBDC3D6215404108305A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:63:2b:91:1e:62:22:c8:eb:b4:3f:70:00:
                    1f:0c:eb:b1:e0:39:3d:76:db:c8:c0:39:c2:7f:40:
                    8c:b2:52:ab:bc:de:ed:93:8d:8c:51:ce:e4:c1:a9:
                    65:2e:14:b7:60:92:d1:11:0c:9b:87:93:38:ed:a8:
                    c4:1a:80:6d:ef:1d:8c:de:10:61:0e:13:e7:03:38:
                    8f:27:5b:8a:75:2d:03:ff:30:48:8d:33:03:0e:a0:
                    2f:ac:03:79:c2:c6:f2:af:f3:42:26:20:32:62:f4:
                    88:1e:8a:0c:ef:e2:1b:44:47:de:ef:98:33:70:7a:
                    3c:07:cf:f6:91:61:0b:9e:e9:1f:44:cc:0a:d4:be:
                    24:4e:a2:75:05:d7:10:98:b7:75:dc:90:02:e3:f7:
                    96:f5:e6:08:62:25:ee:70:e0:7b:79:ae:fc:bf:ac:
                    f1:3e:89:b4:7a:64:a9:ef:c3:ed:cd:d2:50:d7:46:
                    85:1c:72:99:42:e8:69:72:f2:0e:eb:ba:d9:49:4d:
                    b5:39:cf:79:ba:5a:25:12:36:75:4b:b5:99:6a:00:
                    64:fa:a2:82:8d:92:0e:bb:e2:b7:90:e0:cb:b6:13:
                    ec:d1:6b:84:3c:87:77:06:d5:18:32:19:1d:80:68:
                    cd:85:40:87:37:3c:36:b4:08:6d:8d:17:be:f7:4d:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:1E:77:13:0F:65:7E:6A:FB:DC:3D:62:15:40:41:08:30:5A:7A
            X509v3 Authority Key Identifier:
                keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:31:aa:d4:26:d3:d5:58:3f:5f:e5:e5:90:19:dd:44:e6:
         84:8f:53:8f:4e:f0:20:e6:6f:04:6b:7d:81:7c:d8:0e:72:50:
         7b:90:ce:97:d6:07:2c:8f:c8:bc:84:71:e4:03:7c:75:65:04:
         78:b1:de:34:1c:aa:2c:d0:ab:91:dd:1a:54:13:ea:7a:07:2c:
         52:ca:c5:fa:c8:00:98:e3:93:e5:9e:f3:f4:86:e9:9e:e9:c9:
         0d:85:d9:03:8f:7e:c2:bf:ea:7c:f8:2c:33:1f:e2:8b:2b:74:
         e9:62:b3:34:7e:c3:12:b2:fb:d7:96:23:26:7c:ce:34:5f:d3:
         da:94:b1:0f:39:57:b5:5c:42:eb:b2:89:7e:d0:dd:b9:18:aa:
         9b:cd:6e:2c:95:07:ec:69:98:03:4a:86:56:d2:af:54:f0:16:
         d6:83:55:7f:9f:2f:8e:b3:8a:4b:06:de:ab:a3:3f:34:1d:c5:
         f2:9a:a4:87:bd:bf:ec:d6:cd:43:44:5a:ba:e4:2c:31:8f:ed:
         ab:b2:ee:2c:3e:79:47:40:0e:68:a4:68:9f:24:2e:55:9a:bb:
         c3:fe:9d:76:64:e4:13:18:93:7d:fc:fb:7d:e8:88:7a:82:78:
         ee:9f:84:da:e8:09:fe:3a:47:9f:f5:97:d4:f6:b8:42:3f:95:
         9c:f7:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----