Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft
File:                     DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json)
Hash identifier:          /gLOmpnfCFJNZKQIYusvCaIzfIO+42/TqkshUg81kH0=
Subject key identifier:   32:6C:25:84:2A:84:DB:36:06:5E:09:D3:38:BD:02:B5:2C:DC:F1:3D
Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E
Certificate issuer:       /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E
Certificate serial:       29AB9CCC0D3E017706409D62414DADEE17DC2D28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft
Manifest number:          04A0
Signing time:             Fri 31 Jan 2025 15:51:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:46:19 +0000
Manifest next update:     Mon 03 Feb 2025 17:33:19 +0000
Files and hashes:         1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: YG5KxTh1wrwrfzghGkFQt4bqxQ9l9pPsz3/Us87rnE8=)
                          2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: kic57aXXLWATxjKS0QIxUZVlZJ5rlzeUQ8B0nZVuNJE=)
                          3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: yQ8r9aTimM+1fU3cDxtTiC5piuG7uhQf6ZdHLgllIPI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ab:9c:cc:0d:3e:01:77:06:40:9d:62:41:4d:ad:ee:17:dc:2d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E
        Validity
            Not Before: Jan 31 15:46:19 2025 GMT
            Not After : Feb  3 17:33:19 2025 GMT
        Subject: CN=326C25842A84DB36065E09D338BD02B52CDCF13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:61:43:bb:f7:e7:3a:8b:e1:2c:42:99:5e:
                    6d:c8:5b:2d:66:31:a3:a3:5d:64:2b:21:22:91:fc:
                    e6:ce:56:eb:cb:04:c8:c4:fb:0a:d3:56:04:fb:c1:
                    2b:8a:1b:15:bd:15:2f:8b:63:2c:50:a2:18:95:56:
                    e5:29:ef:be:c2:7c:b3:f9:d3:90:65:0b:48:42:25:
                    c6:e4:15:d7:4f:c7:5a:b4:b8:c1:fb:8c:ae:0f:c6:
                    8c:5c:60:93:e3:47:52:d3:e9:69:1e:42:d3:5b:33:
                    35:30:2e:b3:3e:b4:1b:3e:a1:df:29:89:ea:f9:cb:
                    37:a4:bb:cc:77:70:fc:b2:22:68:e8:34:af:d0:d8:
                    41:12:e5:dc:6b:04:37:6e:82:b0:0c:4a:92:15:49:
                    5b:83:f6:0b:d6:d6:f5:51:0b:ff:b2:bf:8f:55:87:
                    4f:d6:0a:c8:c6:b7:7e:1b:27:fc:4d:bf:70:ff:36:
                    d0:da:d7:3b:6d:72:f5:f6:5a:e3:ba:3c:fe:6e:c3:
                    c6:ae:c4:66:ed:58:3f:02:c2:ac:fb:f2:3c:27:e6:
                    de:6e:4d:d1:c1:25:af:0d:b7:0d:70:1d:f8:ed:d5:
                    4b:68:6d:6d:02:22:d4:68:bc:c3:d1:28:e7:99:37:
                    b4:ce:3c:87:82:8e:40:25:44:52:e2:fe:f0:ac:e7:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:25:84:2A:84:DB:36:06:5E:09:D3:38:BD:02:B5:2C:DC:F1:3D
            X509v3 Authority Key Identifier:
                keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:e5:e7:37:35:8f:e6:0f:55:45:a3:0a:10:04:14:eb:2b:
         03:90:57:f3:ba:24:9f:c0:8e:3b:48:b7:bc:9e:ae:e2:f2:74:
         f4:3e:17:ed:ac:9d:04:dc:dd:f2:aa:e8:c2:cb:0a:6a:cb:68:
         85:a3:32:9a:02:64:bc:67:8b:d5:6d:56:58:55:08:59:aa:76:
         bc:27:42:14:93:64:c0:c6:9a:1c:a8:23:2b:f6:64:66:35:11:
         d2:93:f6:fe:88:99:d4:c2:79:26:98:03:63:9f:fd:fe:18:6c:
         6c:43:fc:26:09:5a:69:16:ac:03:95:fd:d0:34:92:a8:3d:96:
         8e:97:58:f3:a4:ab:c9:21:de:01:24:9a:cf:54:bb:fb:58:83:
         2e:0c:76:25:69:bf:e6:a9:91:2b:60:64:50:45:64:aa:fc:cd:
         3e:b7:d6:62:18:82:c8:3d:df:f8:97:a0:8d:e0:65:df:09:5d:
         96:f2:a7:9c:bd:7e:7a:c5:d8:ad:45:11:e1:ef:e1:6c:48:0a:
         6f:99:c4:59:4a:b3:e7:9d:b6:ee:1e:6a:6a:70:c8:1c:7d:f5:
         38:50:5b:55:86:fe:55:6b:db:e5:ac:5f:7b:00:8d:56:16:e3:
         ca:43:25:ec:f4:14:e6:a5:14:0f:8f:59:d0:b7:56:93:6e:2e:
         29:dc:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----