Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft
File:                     7ED240749DF73AB541823D94017C578425D757A6.mft (raw, json)
Hash identifier:          kW1C2cVHZk7yxzgOUSjy5S7C7Lf7QiceBPwLnZoXN8c=
Subject key identifier:   BE:F7:EB:CF:4D:35:6A:10:71:6C:9A:76:1E:2B:41:86:01:39:C0:53
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       6CFC86138ACEBCC450AA6E6F7D4D2FCCD3BEEF5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft
Manifest number:          0450
Signing time:             Thu 30 Jan 2025 00:40:59 +0000
Manifest this update:     Thu 30 Jan 2025 00:35:59 +0000
Manifest next update:     Sun 02 Feb 2025 11:01:59 +0000
Files and hashes:         1: 7ED240749DF73AB541823D94017C578425D757A6.crl (hash: D5m1xkMQGdoY0wXPYE26iwYtJJGDb3lZEfX5R/vJlJo=)
                          2: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: snt9gqIX0Tu71JHqy4+1WN6xAnx6fnULGbS46QmtfVE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:86:13:8a:ce:bc:c4:50:aa:6e:6f:7d:4d:2f:cc:d3:be:ef:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: Jan 30 00:35:59 2025 GMT
            Not After : Feb  2 11:01:59 2025 GMT
        Subject: CN=BEF7EBCF4D356A10716C9A761E2B41860139C053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:80:e1:ad:9f:64:3c:a5:f3:ba:0d:c4:c5:
                    88:8b:b7:af:a4:96:38:be:eb:9e:fc:1e:f6:3d:ed:
                    2a:23:d3:b3:85:a0:a2:e7:c6:30:a1:d0:34:9b:f7:
                    f2:0b:79:9c:69:7b:80:3e:3c:8c:02:e8:a4:cc:c8:
                    ab:3e:dc:b9:cf:e0:ff:1d:14:0e:9c:e0:a9:34:c0:
                    3d:94:32:76:b5:53:4a:bd:fa:ca:db:98:6b:1a:4b:
                    4b:52:7c:4f:0f:d1:c6:9a:b5:a2:1d:f7:d8:38:64:
                    f7:07:18:84:ec:45:15:7f:94:13:7a:2f:86:fa:67:
                    cf:73:56:69:43:8a:8e:a7:c7:77:c2:c8:ea:40:88:
                    cd:c9:8c:4c:83:f8:c5:5b:93:4f:d1:41:f1:3f:29:
                    fa:d8:53:18:36:31:01:0c:6f:c5:0f:5a:b5:2c:dd:
                    00:75:c4:f8:34:e8:87:69:c3:9d:7e:e6:c0:56:28:
                    44:39:21:36:10:7f:d4:c5:4e:ce:e5:47:d0:64:fb:
                    fe:c4:1c:08:35:e2:53:5b:4e:59:49:69:09:d4:a0:
                    47:9e:c7:5a:30:c1:80:a4:67:35:06:5f:85:85:64:
                    d1:19:32:5d:bf:bb:8e:ae:0a:86:cf:9d:21:ca:12:
                    3b:a3:a8:c3:2b:d8:3f:4f:f8:90:71:1a:fa:53:2c:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F7:EB:CF:4D:35:6A:10:71:6C:9A:76:1E:2B:41:86:01:39:C0:53
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:cf:0b:36:50:1e:2c:d4:6c:e6:85:17:a2:ab:b4:5b:7c:
         41:88:f3:0f:15:ff:68:0c:7b:56:bf:a3:c5:14:45:e7:b7:fb:
         fe:93:92:0b:41:d9:fa:7e:35:1e:50:03:e6:0d:72:06:c8:3b:
         c0:67:31:2f:9a:4a:9d:f8:2b:f0:c0:37:20:e6:14:14:3e:74:
         06:b4:70:9f:c3:63:d2:81:dc:19:dc:fb:ea:d2:9e:41:55:1e:
         ed:41:bf:7c:5f:b3:f5:c5:f5:2f:82:44:ba:22:b5:c1:f2:5f:
         37:1b:a7:ac:10:fa:dc:fd:da:04:bc:20:8d:6f:04:d1:ed:34:
         02:55:e3:62:e5:a4:6e:35:43:fe:a4:fc:28:5b:62:2a:88:49:
         5e:6e:3f:b3:61:35:48:15:8d:91:f1:36:76:78:91:37:0f:d9:
         ff:b3:bf:7c:b1:fc:9b:06:66:5f:4b:23:65:30:63:28:cf:2b:
         52:6a:f6:d6:2e:8e:75:2f:62:4a:f4:62:d5:ff:f7:5f:01:97:
         59:88:19:3c:1f:63:b6:14:1a:fb:49:4c:dd:1d:68:37:7a:b1:
         e5:16:2b:7c:70:04:f1:3c:4b:6d:7d:71:9f:e5:43:70:e1:64:
         7f:ce:4d:ef:f4:3e:5a:2d:54:cc:fb:0f:c4:a9:b4:49:28:65:
         ed:ba:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----