Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
File:                     8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json)
Hash identifier:          fGLwHWVKEcsvdJgiYpLX4eaYCmMLI7UrCsIPZUb90SM=
Subject key identifier:   39:9D:D9:33:BB:ED:31:34:6D:F4:3A:8C:58:1D:94:F8:87:E5:9B:DA
Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68
Certificate issuer:       /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
Certificate serial:       36B23E5C41E1172CA3A742AEDA098FC711A56600
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
Manifest number:          0174
Signing time:             Wed 29 Jan 2025 21:21:49 +0000
Manifest this update:     Wed 29 Jan 2025 21:16:49 +0000
Manifest next update:     Sun 02 Feb 2025 01:41:49 +0000
Files and hashes:         1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=)
                          2: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: ffSq979BXguN/9xeb7rdyNMUwwDB1BvyA6dqbfXGLsQ=)
                          3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b2:3e:5c:41:e1:17:2c:a3:a7:42:ae:da:09:8f:c7:11:a5:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
        Validity
            Not Before: Jan 29 21:16:49 2025 GMT
            Not After : Feb  2 01:41:49 2025 GMT
        Subject: CN=399DD933BBED31346DF43A8C581D94F887E59BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:f5:1c:b6:13:47:93:7a:f1:7b:db:4c:9c:
                    ad:c4:05:5b:83:6c:e2:b3:8c:8c:07:7a:35:27:ad:
                    43:5d:a0:63:2c:ca:94:44:5c:dd:75:d0:e7:f7:6f:
                    4a:ea:f8:94:7e:3b:9c:d0:cd:34:3d:f8:ba:ee:06:
                    cf:59:a3:6f:3b:57:94:da:f0:bb:50:c3:33:4f:81:
                    17:5f:d5:72:d3:ff:16:a4:5f:31:83:a7:fc:b3:76:
                    42:4f:f9:f5:1e:35:23:ee:d0:cf:df:1a:eb:4e:be:
                    b9:ce:e1:7d:1b:66:cc:a4:46:b6:fa:c3:f1:aa:8f:
                    46:6b:85:cb:31:a2:19:2d:70:3b:86:d1:74:28:b2:
                    b0:ad:72:8a:2a:d2:26:0e:f4:9d:20:5a:0d:c5:c1:
                    4e:91:d7:69:24:4a:4c:e0:d0:59:3c:d0:fb:1e:8a:
                    85:9e:91:ac:97:d0:0f:2b:c9:20:ed:e4:ff:86:48:
                    d1:1a:d9:17:8f:b6:d4:bd:54:d1:f4:8b:67:23:d2:
                    99:f4:c9:53:df:dd:ee:7a:1c:aa:ab:f8:32:a8:a0:
                    98:85:ea:e6:86:4a:4e:25:4d:16:c1:18:55:fa:28:
                    e1:77:da:00:d5:37:c3:c5:45:bd:55:2c:a4:56:57:
                    51:f5:97:f8:68:64:eb:62:84:1c:8c:e2:9f:8f:1c:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9D:D9:33:BB:ED:31:34:6D:F4:3A:8C:58:1D:94:F8:87:E5:9B:DA
            X509v3 Authority Key Identifier:
                keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:db:20:ef:49:96:6a:77:3c:42:86:16:44:40:d7:67:a6:
         51:9f:e4:86:b4:a1:6c:3e:22:7b:2c:fc:b0:0b:7c:fe:a4:9c:
         33:a0:6b:d1:81:75:c4:b0:2d:a0:7d:f6:fb:35:19:a9:74:08:
         e8:f6:30:90:87:c1:e5:93:e6:5f:a7:ea:0f:89:d7:8b:fe:19:
         d7:bc:a9:aa:f1:a1:ca:24:10:af:ae:5c:77:e5:9f:d5:cc:a7:
         1b:39:b3:df:3c:cd:6b:c5:d5:08:2c:7a:8f:15:d9:4e:e4:a8:
         f7:5e:52:f7:f3:a2:b1:89:54:13:82:bf:30:6a:1e:b3:1c:eb:
         19:d3:05:7b:9e:e2:66:8b:ec:09:26:ff:1d:3a:dd:9d:d0:e2:
         85:32:03:66:70:8f:00:86:91:65:2f:e5:dc:3c:ee:90:ea:07:
         e3:f5:7a:47:12:05:0e:a5:f8:3e:3a:2f:e6:e1:31:87:af:2d:
         31:1b:2d:cf:bd:a8:7e:fc:34:17:57:71:a1:97:91:5a:5f:69:
         b7:5d:7c:61:94:9a:5a:81:fb:24:86:1d:69:47:8c:3c:fd:2f:
         b3:1d:e2:92:eb:c4:85:ef:3e:73:23:1d:b9:24:bf:b1:3c:99:
         ef:a5:91:66:4c:25:f7:8b:15:cf:88:78:ce:b6:c7:fa:74:7d:
         de:4b:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----