Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
File:                     A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json)
Hash identifier:          XtwCflVvQ7S1n9CNVopWIzzfkSJxAaKo8pbV2DGDicc=
Subject key identifier:   1D:80:85:70:A9:2D:96:DB:EB:33:CA:76:72:5B:4C:40:8C:4A:D6:D5
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Certificate issuer:       /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial:       1A2FCF60FE03F212CEF5F6CB42BE588C78D00C48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
Manifest number:          044E
Signing time:             Thu 30 Jan 2025 19:20:35 +0000
Manifest this update:     Thu 30 Jan 2025 19:15:35 +0000
Manifest next update:     Sun 02 Feb 2025 23:10:35 +0000
Files and hashes:         1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: 3nVmfAC7GGjRCG3XU5JbGqMgbCCx53tVkmWtRX8TDtc=)
                          2: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: UaZWWZhydSN98p5y32jrdY9cHJT5n2VEbPKlK1g6HNo=)
                          3: 3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa (hash: wlioCK39F6ZtstmRZt6ZJ7pCIQubSVYa/k9rwDqC7Oc=)
                          4: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: 0Gfb1t1DEaMxbrEMa4JI9uiPSy4rGrzNXOFZVdc17v8=)
                          5: 3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (hash: Er6imwwu/bZPZyfg/bjua6k7KHLjwxDl0mpgaBvXLaI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2f:cf:60:fe:03:f2:12:ce:f5:f6:cb:42:be:58:8c:78:d0:0c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
        Validity
            Not Before: Jan 30 19:15:35 2025 GMT
            Not After : Feb  2 23:10:35 2025 GMT
        Subject: CN=1D808570A92D96DBEB33CA76725B4C408C4AD6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:5f:05:d7:44:9b:7a:dd:53:71:85:0d:5d:
                    e5:01:e5:c4:a9:0a:b8:b7:2a:3a:cb:28:22:68:e3:
                    8a:b4:88:bb:81:11:9d:50:59:bc:20:88:07:23:96:
                    86:bc:bc:40:75:c2:93:ca:75:23:b8:2a:4e:d7:de:
                    da:ea:3b:70:3c:ca:fe:85:3c:ff:5d:1c:35:25:de:
                    d1:d4:79:99:c9:e1:0e:09:55:fb:87:d3:a0:ef:bf:
                    39:cf:b4:04:e1:64:87:49:86:db:8b:bf:48:d4:eb:
                    97:5a:41:f5:7d:e0:f2:94:b1:56:67:3a:00:fe:e8:
                    71:7b:6c:6e:8f:3a:e3:59:82:7b:f6:79:11:e7:be:
                    77:f6:d3:c5:69:8a:0d:6c:43:36:6c:af:33:59:02:
                    7f:6b:ae:b8:6d:fc:cb:76:40:13:08:02:cc:ce:b2:
                    14:2c:6f:d4:ed:7f:d9:37:61:da:ba:58:ec:b2:0a:
                    18:c7:e1:69:7d:a1:cc:5b:c2:95:77:e7:6f:de:97:
                    26:85:2c:b5:1d:2b:41:e8:a3:05:73:b8:1a:c5:36:
                    f4:bb:2a:3a:ab:47:cb:8a:01:91:b0:c7:21:50:a9:
                    96:8f:33:b7:01:41:ec:01:b3:a9:df:1e:4d:93:50:
                    b1:a7:cb:6e:d0:9d:24:94:f8:ad:3f:86:81:3b:23:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:85:70:A9:2D:96:DB:EB:33:CA:76:72:5B:4C:40:8C:4A:D6:D5
            X509v3 Authority Key Identifier:
                keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:90:c4:35:c3:97:0e:be:2a:43:1b:39:9d:72:a9:b4:e2:
         a9:ac:40:fa:f7:6f:47:51:43:a7:34:c6:14:fa:e4:6d:cf:72:
         ed:82:c4:46:c2:09:79:14:bd:18:69:ad:75:6b:d5:7b:a9:b2:
         06:5d:59:8d:a0:30:b9:07:ca:66:f4:c6:ff:cf:49:3c:49:27:
         63:10:2e:2c:eb:68:84:3d:2b:0b:3b:75:87:ad:a7:12:cd:ee:
         42:ac:c8:80:4f:c5:00:49:0e:a2:a9:93:69:8b:4a:fb:82:df:
         72:95:61:63:1c:49:8b:a7:9d:9a:64:6b:7b:52:47:b0:41:8d:
         b3:b5:7f:8e:06:8d:c6:1c:f9:8b:21:5a:d1:ed:cd:a2:63:98:
         1d:52:60:cd:17:c0:38:de:5b:ab:d1:27:06:dd:a9:e1:48:8c:
         8d:f0:47:f4:42:7b:10:bd:bd:aa:e0:2d:da:67:56:64:4c:c4:
         a5:16:f9:a8:cc:e3:11:45:3a:60:af:ba:59:91:44:32:f6:97:
         9e:a1:64:69:2a:26:77:97:8c:f8:1f:84:3d:57:70:1d:4b:f5:
         e4:f0:9c:ed:87:58:69:6f:13:2c:f3:c9:86:f2:1b:ed:47:d4:
         ca:db:59:1c:d5:87:cd:07:40:00:2f:82:58:b9:d1:90:16:9e:
         70:5b:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----