Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
File:                     D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json)
Hash identifier:          h8KV7ctC5mzeobwX5yL8dmqlKp1P5yEvBF8GsKKz1Ps=
Subject key identifier:   63:5C:4E:08:87:DB:67:77:86:40:25:8E:B3:CD:61:CE:E3:BD:1A:3C
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Certificate issuer:       /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial:       331122459BF41C6606DD6E03C6FCCB40AD355C50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
Manifest number:          017C
Signing time:             Thu 30 Jan 2025 22:50:42 +0000
Manifest this update:     Thu 30 Jan 2025 22:45:42 +0000
Manifest next update:     Mon 03 Feb 2025 07:22:42 +0000
Files and hashes:         1: 3130332e34312e3234392e302f32342d3234203d3e20313530313835.roa (hash: 0OUd/Zg+yT+4oJZ+fL/edbyxgI+htZWm1nN6sa7eDd8=)
                          2: 3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa (hash: hyAN4VQBFL+6Qsple8qWz9PJHI/XwPa18Yzm8J6FcRc=)
                          3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: MMtQ2W2DwndSpOBhSTnI69pL5q7EqQAKJyvOarBxjF0=)
                          4: 3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa (hash: yOggfaLQy1wCP6EJKYlVmjOsMKIKCDzmwTOVDFv19+I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:11:22:45:9b:f4:1c:66:06:dd:6e:03:c6:fc:cb:40:ad:35:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
        Validity
            Not Before: Jan 30 22:45:42 2025 GMT
            Not After : Feb  3 07:22:42 2025 GMT
        Subject: CN=635C4E0887DB67778640258EB3CD61CEE3BD1A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:97:5e:16:f1:3a:8c:82:14:13:9c:64:21:
                    0e:e7:57:ed:93:92:a2:82:44:d3:fc:cb:e7:2a:16:
                    45:a1:f6:a9:70:9b:c6:cd:63:b0:c8:c6:04:47:11:
                    11:9f:80:aa:bd:1a:9f:b8:97:00:b0:68:00:3c:0d:
                    e3:1f:fc:ad:f8:b0:99:de:e6:e9:f3:5f:1a:bb:03:
                    ae:89:6c:d6:4a:10:a2:09:7b:62:10:f6:0e:c1:90:
                    d2:13:86:74:42:74:c7:1c:21:10:96:f5:47:e3:17:
                    48:10:b5:db:cf:1b:0d:19:04:52:c4:e2:0c:cb:84:
                    66:25:86:cc:ed:f6:7a:07:65:c4:bd:a5:82:9a:7f:
                    b8:32:df:b5:f6:b8:5a:02:37:fe:ec:40:c4:c8:8c:
                    77:d6:3e:58:62:2b:b9:5d:bf:41:b1:b2:8e:1b:4c:
                    c7:e3:85:0d:bd:00:19:69:5a:ae:c7:1d:01:65:8d:
                    d1:a6:26:c5:46:db:1e:2e:9a:20:b7:ea:d5:96:26:
                    d1:01:fb:0a:22:36:c9:df:1b:93:c8:a3:5a:cc:cf:
                    3f:90:7a:18:1a:43:6c:60:8f:4c:16:8c:08:30:eb:
                    78:92:7f:4b:c6:e7:6d:e6:5d:27:68:55:d6:a9:b3:
                    b8:c6:c8:75:49:b8:d7:83:74:80:07:a7:43:1e:ec:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:4E:08:87:DB:67:77:86:40:25:8E:B3:CD:61:CE:E3:BD:1A:3C
            X509v3 Authority Key Identifier:
                keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:08:ee:e4:a9:91:bc:3a:ba:ea:80:f7:8a:0b:c6:79:0b:
         99:88:99:bd:33:4d:98:b4:21:5e:9a:84:33:47:86:75:58:c6:
         09:88:85:27:23:69:8a:1b:43:4b:f3:6a:8d:6d:14:1d:2f:df:
         77:bb:05:da:4a:17:ec:ac:ab:ce:ef:c2:24:fb:dd:d5:74:0d:
         ea:da:d7:ed:ab:ea:b8:74:96:93:3f:72:31:c1:67:bf:05:1f:
         2f:93:6f:4a:10:ef:1a:19:96:f5:3e:1b:a8:4e:aa:6e:cf:73:
         bf:a6:e7:6a:14:b2:6a:57:85:e8:35:bf:39:79:bc:e5:34:fa:
         0f:68:61:ad:ab:0d:cb:da:e7:45:f6:89:21:d7:f1:f6:85:c6:
         21:d7:6f:7f:21:5a:6d:a1:60:a2:ee:78:91:e3:27:81:f7:cb:
         08:57:d5:79:90:1c:b2:1b:8f:63:12:79:6f:bb:01:9b:7d:e4:
         36:fd:fd:1e:3c:2c:c2:46:47:28:90:80:0b:dd:2f:6f:b6:e3:
         b8:f8:b8:21:41:a8:ef:17:a3:46:27:ad:d3:bb:75:a4:16:51:
         30:f1:e2:c5:1f:fa:69:36:93:4e:b9:d2:7c:5a:4a:35:0c:99:
         83:4a:c4:12:bb:51:75:09:e5:5a:98:86:ad:a9:62:e5:46:58:
         4a:8f:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----