Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
File:                     B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json)
Hash identifier:          D3ZRa2dfOx9OkM3QZZCbkYCE7TogJOu1raOqKiIBE+s=
Subject key identifier:   47:B8:03:63:99:83:D3:0E:EC:94:B2:E7:03:D3:3C:E1:1B:37:98:CD
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       4E6FC551AE0958F6925A24172BD674E7B01A2D1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
Manifest number:          01E0
Signing time:             Thu 30 Jan 2025 04:12:30 +0000
Manifest this update:     Thu 30 Jan 2025 04:07:30 +0000
Manifest next update:     Sun 02 Feb 2025 15:40:30 +0000
Files and hashes:         1: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: yFLtXZhv4icStZGluIXSTKiVb7PeS6C1hGZnyhQ1yqo=)
                          2: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=)
                          3: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: API3Ada5tfSzC5sy9FlsLG9n1gl7k17smogeDtv7Djw=)
                          4: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=)
                          5: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: as7KtFlD4iKysyXSKxxgu8y4XOhRCjKWFwK+lMzj6oQ=)
                          6: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6f:c5:51:ae:09:58:f6:92:5a:24:17:2b:d6:74:e7:b0:1a:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Jan 30 04:07:30 2025 GMT
            Not After : Feb  2 15:40:30 2025 GMT
        Subject: CN=47B803639983D30EEC94B2E703D33CE11B3798CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:95:69:69:45:13:b1:05:6a:86:66:21:a4:
                    a0:58:d3:a2:f6:a7:e6:85:58:3d:e5:1f:ec:6e:a2:
                    bf:01:a9:af:03:b8:e5:3b:d2:1d:81:f7:63:fe:31:
                    d2:4c:9f:95:0a:03:19:7d:d1:d0:7b:d3:83:bb:8c:
                    96:2b:e3:35:85:f2:1e:aa:91:5d:1d:61:8f:fd:20:
                    ca:bf:2b:aa:2f:e3:bb:49:27:76:55:b0:6f:b4:4f:
                    b0:e0:55:c2:97:ac:b4:46:74:e8:4c:1f:59:28:13:
                    ca:76:76:85:db:4b:0f:d5:fe:21:6b:d9:a2:5d:c0:
                    e8:45:ec:c5:ed:44:32:bc:c0:11:d2:ab:b3:35:c5:
                    0a:39:c1:e7:7c:ad:4b:7e:1b:de:50:1d:43:6f:0b:
                    94:2f:ca:f5:6b:e2:c4:44:dd:c7:10:61:b1:1e:b1:
                    bd:32:69:00:d3:09:2e:dd:a9:5e:33:7b:45:bc:a9:
                    c4:0d:97:3d:92:93:97:14:e3:15:46:40:35:fa:ac:
                    77:0a:ca:93:83:41:70:2a:33:79:80:63:00:d4:3c:
                    7e:93:51:a3:e9:56:24:06:a2:92:ea:52:b2:21:7d:
                    ec:af:00:33:66:37:18:ff:86:59:5e:66:08:44:2d:
                    94:42:53:f7:e6:ae:42:a0:06:2a:56:f7:9b:8d:fa:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:03:63:99:83:D3:0E:EC:94:B2:E7:03:D3:3C:E1:1B:37:98:CD
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:04:a2:ba:b0:54:2c:96:f9:84:74:6c:e1:07:c6:c8:41:26:
         2b:5b:f1:4a:7f:fc:cd:4f:a8:25:4f:60:75:bc:91:cd:75:53:
         18:fa:7b:72:0f:ab:ad:3c:08:0e:54:aa:4e:63:67:f3:b9:24:
         e5:8f:48:83:a9:d9:9d:11:0b:0c:56:4d:44:d8:42:5c:d2:39:
         b7:30:78:28:c4:5e:99:f9:bc:dc:e2:77:bb:19:ee:d1:88:ba:
         9c:51:f2:72:6f:16:fd:52:90:87:79:7d:21:f4:d1:74:37:fa:
         50:53:4d:16:f0:1a:fc:d9:53:5b:6b:14:f2:be:b6:a9:76:0a:
         e6:b0:71:15:4c:4c:36:2b:ac:80:eb:c4:bd:44:bc:e1:d0:bc:
         7d:6f:2c:79:b6:bd:98:85:b4:04:0d:6b:1f:25:da:d8:12:04:
         16:9f:ba:60:ea:9e:fb:12:fa:20:e0:ba:83:1e:1d:f7:a8:48:
         8c:e5:be:52:98:ab:2d:03:e4:23:d1:92:2e:aa:3d:75:87:9e:
         ae:c5:dc:f9:fa:fc:26:d7:07:44:7e:7b:9f:61:ca:87:25:9d:
         1b:cc:ff:14:3a:98:14:bf:73:aa:7f:5d:9d:65:b4:a9:74:4e:
         50:d6:c2:d5:a9:5f:9e:30:d6:18:2a:6b:44:7a:da:f2:e9:2e:
         f1:a3:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----