Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
File:                     D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json)
Hash identifier:          a/p1FPVMPb9D5C8h7gySHl2QuaYuIgYObTf05r6TKUk=
Subject key identifier:   D1:2A:F6:9B:40:0F:1B:3F:25:8C:E9:1D:37:C8:D7:D1:8A:B6:AF:53
Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE
Certificate issuer:       /CN=D2EA420344F486935839E03DF1B3C237F295C2DE
Certificate serial:       5356CA1D7628BE0454F025CC99F87411FE600B82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
Manifest number:          0473
Signing time:             Wed 29 Jan 2025 09:31:41 +0000
Manifest this update:     Wed 29 Jan 2025 09:26:41 +0000
Manifest next update:     Sat 01 Feb 2025 20:45:41 +0000
Files and hashes:         1: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: t2JkAO4RGOdwgjllPAyKujK/HVSkrKZfup0TzzlD7iQ=)
                          2: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: A/B47ST58PHF/gswGR/EgrSTIEZSCSNDRWd/rUZngzo=)
                          3: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: lMm04bbrV0DrDR/LfrROVfPhtdVsje7cFfAvFrg0iac=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:ca:1d:76:28:be:04:54:f0:25:cc:99:f8:74:11:fe:60:0b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE
        Validity
            Not Before: Jan 29 09:26:41 2025 GMT
            Not After : Feb  1 20:45:41 2025 GMT
        Subject: CN=D12AF69B400F1B3F258CE91D37C8D7D18AB6AF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:32:b6:43:83:51:fb:71:ea:62:6b:0b:87:
                    07:39:cc:b0:b4:39:19:3e:a9:4c:c7:a7:c5:b0:7f:
                    7d:f3:03:11:b3:54:b5:46:1a:a1:bd:3e:fc:bc:0d:
                    5a:6f:f9:13:d8:7d:8f:04:83:ef:41:0c:e0:7e:e2:
                    da:59:20:8b:7f:0c:72:57:be:14:39:1a:1d:ed:3c:
                    50:93:6e:c8:9c:3d:28:dc:2f:98:20:8a:55:49:3a:
                    46:a2:77:af:eb:fc:0c:2f:b3:76:7f:62:06:6c:02:
                    f5:ba:62:93:00:b1:9d:d7:0f:f0:5b:f4:4a:ac:22:
                    62:d1:1c:40:6c:86:74:ad:04:ea:ab:d2:e6:9d:94:
                    56:9b:0d:e4:73:fc:47:af:1a:57:29:40:94:f8:45:
                    17:9b:ae:49:1d:39:24:40:6b:f8:79:af:f0:c2:97:
                    26:d4:4c:fe:73:61:bb:73:0a:a1:9d:b1:fa:bb:15:
                    3a:b4:31:7e:79:3d:86:ad:30:8c:15:f5:0f:16:d8:
                    40:58:7d:65:68:96:9c:31:31:e0:2d:9e:84:56:15:
                    43:2c:a5:c7:94:4d:1e:c7:83:08:59:b4:ca:52:e8:
                    9a:eb:9f:f8:b2:46:b5:35:56:14:09:1f:f9:a4:70:
                    71:6e:c5:ec:57:51:9a:63:53:a9:31:82:cc:f5:f4:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2A:F6:9B:40:0F:1B:3F:25:8C:E9:1D:37:C8:D7:D1:8A:B6:AF:53
            X509v3 Authority Key Identifier:
                keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:db:b6:ee:5b:68:a1:f0:bc:5c:40:f0:8e:94:e9:d1:7b:
         48:76:31:c0:50:e2:0e:67:07:49:4f:8c:54:e0:d9:c6:e8:1b:
         e9:5b:a6:c4:39:cb:0c:c1:7b:83:a1:e6:95:b9:9c:a2:7e:5e:
         6a:2d:62:26:bb:d6:45:53:0b:55:35:ce:f0:26:db:62:0d:f8:
         b5:10:5c:c2:5f:b6:fd:ba:8b:1d:cc:26:37:e7:76:8f:19:ac:
         53:3e:71:ab:1e:36:2e:81:95:b3:e3:a5:e5:3d:f1:1a:a8:9b:
         29:33:4f:3e:f3:21:d9:42:16:a3:d7:59:a6:30:fa:1a:ba:24:
         f6:8f:68:0f:ed:34:25:60:02:bd:0d:de:86:49:65:f5:bb:30:
         5f:c4:3a:73:a6:c3:f3:21:45:6b:1d:87:49:5b:7e:63:46:a9:
         3d:cf:52:37:6a:56:53:97:70:6d:a2:4e:02:06:74:77:13:85:
         9a:7d:d1:82:13:67:9a:01:c5:ac:d1:7f:a5:83:a7:75:bf:8a:
         b1:a0:7d:36:2a:1f:18:e1:2a:00:56:82:d1:58:bb:6b:92:d4:
         a8:23:d8:9c:92:e1:fb:a1:2e:ca:af:35:67:ff:94:7e:4f:f6:
         92:db:6e:e1:b1:20:ba:b5:63:c5:ac:82:be:e8:48:f2:79:31:
         7b:5d:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----