Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
File:                     4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json)
Hash identifier:          mQlO7YsiPzffLoyvV02eDbFK7GJdv0cff32Dy200isw=
Subject key identifier:   DA:BA:2A:F9:F7:AF:EC:EA:03:50:AA:EC:2C:20:37:04:F9:09:3B:1C
Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B
Certificate issuer:       /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
Certificate serial:       56A0BE632A0CE8BA28CB63FE490C25280A9BFBBE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
Manifest number:          CF
Signing time:             Fri 31 Jan 2025 08:22:16 +0000
Manifest this update:     Fri 31 Jan 2025 08:17:16 +0000
Manifest next update:     Mon 03 Feb 2025 14:37:16 +0000
Files and hashes:         1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: 5CN2KzT2ySfy6DMNu804dCdUhzlM1gPQuR1OSu/BzHU=)
                          2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=)
                          3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:be:63:2a:0c:e8:ba:28:cb:63:fe:49:0c:25:28:0a:9b:fb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
        Validity
            Not Before: Jan 31 08:17:16 2025 GMT
            Not After : Feb  3 14:37:16 2025 GMT
        Subject: CN=DABA2AF9F7AFECEA0350AAEC2C203704F9093B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:d5:40:4f:12:f4:0e:33:79:d2:61:e6:23:
                    12:e1:94:b7:f7:82:8a:c9:0c:cc:fe:59:7b:d7:27:
                    af:bd:13:65:12:76:69:01:c7:c5:33:98:23:83:7c:
                    d7:8a:4d:c7:92:90:f6:9f:26:e8:04:ce:05:d9:24:
                    d2:2d:82:91:62:b8:5a:2c:e8:a6:d0:3d:6f:f4:72:
                    e9:b2:60:87:cc:cc:54:a1:46:6a:ef:39:43:96:cc:
                    b0:cc:f2:96:fe:4e:e8:b5:60:87:26:51:01:b0:f2:
                    77:10:1c:07:4e:96:eb:07:5d:65:9e:e7:a9:7d:95:
                    5b:f1:db:b2:97:b0:b8:cf:af:8c:47:9a:96:2f:ec:
                    62:96:e3:9d:e4:44:3e:bc:56:70:68:b7:c7:31:73:
                    98:59:3e:46:98:68:9b:81:c2:cf:cc:7f:88:d2:2c:
                    e1:ca:43:c1:48:b8:9f:6c:26:28:70:89:88:d2:01:
                    eb:27:33:5d:06:18:88:dc:33:85:cc:e0:21:cb:38:
                    1e:7e:7d:a0:74:9a:52:03:6f:97:a7:02:e0:01:73:
                    50:bc:df:79:fc:18:63:33:a2:00:10:05:d1:02:07:
                    43:64:0a:5c:fc:ba:0d:4d:90:ca:21:1e:a6:c0:96:
                    20:90:bf:8c:f0:51:7d:c4:8b:d8:6d:ff:52:ff:fc:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BA:2A:F9:F7:AF:EC:EA:03:50:AA:EC:2C:20:37:04:F9:09:3B:1C
            X509v3 Authority Key Identifier:
                keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a5:58:76:7c:a8:4e:63:40:c9:64:e9:28:99:28:d8:69:e8:
         58:61:c8:e6:39:79:fa:da:1f:a8:6d:78:47:14:7f:71:f1:68:
         a0:0f:fc:2f:02:2d:04:2d:a7:b0:f6:2b:db:e4:15:11:46:d3:
         d1:43:61:04:90:99:56:ac:10:de:62:c9:93:03:78:96:21:53:
         54:68:71:94:8a:80:4c:84:4a:fc:22:26:54:e1:da:1e:7f:ea:
         f6:d1:6c:6b:81:fa:41:11:d6:d5:03:bc:57:b3:12:0b:5e:22:
         f4:b4:78:f6:c9:d6:83:00:18:2d:b0:9e:05:76:b7:6e:30:3f:
         97:65:11:84:a3:13:8f:54:dc:06:cb:cf:20:ed:0a:b4:9b:ff:
         f1:74:49:c7:9d:03:7c:39:38:54:67:68:7a:9d:e0:1c:e4:c7:
         5a:2f:e7:93:7c:21:51:34:60:9a:63:e9:49:b6:b8:55:37:8d:
         1f:b5:00:ab:d9:0a:b0:8d:3e:02:25:c5:a8:61:fb:d0:ab:7f:
         68:09:91:3c:21:78:90:b3:37:29:06:14:ca:f2:f6:8e:96:48:
         71:4c:b9:54:a3:79:27:77:5c:f4:61:dc:7f:79:78:20:72:b2:
         0c:87:b9:cc:b6:fc:97:82:45:3d:a1:17:d3:4a:7e:3d:0a:dc:
         f2:b3:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----