Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft
File:                     5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json)
Hash identifier:          qIBY2VJo21MyYjpVZK03iwOQ1oVP4TmNacCo2IVwpXU=
Subject key identifier:   06:8A:F6:C9:F4:14:39:C2:4F:96:24:F3:E1:22:DE:D2:55:60:E0:14
Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
Certificate issuer:       /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Certificate serial:       3893B344ACF002962CD61E4B1F327FD10DD4BE62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft
Manifest number:          0148
Signing time:             Thu 30 Jan 2025 15:41:19 +0000
Manifest this update:     Thu 30 Jan 2025 15:36:19 +0000
Manifest next update:     Sun 02 Feb 2025 17:06:19 +0000
Files and hashes:         1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=)
                          2: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: qkvEKh7CKZ4s9Cb4KyGHHIWtwUQUWxF72XV8d57GFj8=)
                          3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:93:b3:44:ac:f0:02:96:2c:d6:1e:4b:1f:32:7f:d1:0d:d4:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
        Validity
            Not Before: Jan 30 15:36:19 2025 GMT
            Not After : Feb  2 17:06:19 2025 GMT
        Subject: CN=068AF6C9F41439C24F9624F3E122DED25560E014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:3a:90:6c:f8:1d:41:e6:fe:8a:fc:6e:4b:
                    87:a5:87:86:04:2f:aa:f5:94:9a:30:9c:fb:44:80:
                    3e:a2:58:21:ea:bf:cf:73:98:56:b2:f8:bf:81:42:
                    82:f6:c0:2f:d8:37:6a:a4:17:2e:d2:b1:5b:4a:50:
                    38:0f:fc:b6:5d:6b:d2:ec:27:ae:ec:78:5d:77:9d:
                    96:fc:69:01:1b:2c:6d:17:39:9c:b6:ea:64:79:21:
                    d6:d7:7c:e5:99:ac:3f:6c:d7:5b:d6:9c:0a:99:ab:
                    a2:ae:4a:e0:04:a9:9e:0c:af:a1:92:dd:3e:42:3e:
                    1a:58:67:47:69:4e:14:e9:51:79:1a:09:3c:d6:47:
                    43:b1:5d:b0:c0:62:0d:51:c8:1e:c8:d8:59:75:e4:
                    87:8c:86:8d:27:a8:de:b7:be:bf:42:9c:96:37:91:
                    34:18:b1:03:79:30:6e:ca:44:0e:bd:be:be:fc:67:
                    c5:e0:fb:81:bd:61:63:86:5f:21:3e:49:33:a2:42:
                    77:7a:46:5a:1f:72:8f:00:91:de:92:ba:46:5b:3a:
                    9c:50:d4:66:d2:13:32:a4:70:2f:fd:8d:23:91:46:
                    dc:f8:0f:0a:25:41:7f:d0:a7:02:97:b7:79:b4:3d:
                    8c:70:de:7b:66:c3:0c:2a:f1:fe:54:83:2a:b2:6b:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:F6:C9:F4:14:39:C2:4F:96:24:F3:E1:22:DE:D2:55:60:E0:14
            X509v3 Authority Key Identifier:
                keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:59:f1:67:5f:23:43:f0:2c:e9:5d:5c:54:e7:cb:fa:ca:cb:
         85:63:7a:a9:0b:a4:ca:86:c9:11:f0:ea:83:5c:64:a7:ec:bc:
         f4:44:f2:b7:8d:00:b6:47:84:d9:f0:75:db:48:5f:98:95:86:
         ea:9e:e1:5d:4e:f0:8a:99:6f:d6:1f:7d:39:91:f6:4b:5b:b2:
         39:b9:f8:fe:67:95:16:2d:31:fd:0b:14:b7:e4:65:74:5c:42:
         a3:66:86:fc:e3:c6:ef:56:54:cb:03:53:8e:57:0b:23:26:9f:
         1f:a6:8b:16:6f:75:46:f6:9b:06:b2:de:4c:d2:52:ec:4e:2d:
         04:77:5c:aa:d6:5f:b7:37:6d:04:7a:b1:d5:e3:76:29:8b:63:
         e5:4e:4b:e4:e0:d5:a1:bf:13:ca:6a:2c:82:bf:20:6f:93:93:
         d6:40:bc:c1:14:6d:bb:dc:79:ae:ba:e1:f4:e0:23:42:c2:c1:
         7a:6d:e5:60:51:65:69:ef:ec:9e:5c:3a:27:0f:aa:5a:48:b8:
         1c:05:fb:5b:9f:8e:2b:52:39:57:14:64:4d:12:ae:9f:be:35:
         e3:8a:51:07:a2:ea:18:09:1d:6f:f7:44:a7:b7:39:80:fd:67:
         ef:2f:f0:1e:82:3f:83:69:0a:f0:ad:b9:93:bf:e9:4c:22:33:
         ab:75:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----