Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
File:                     35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json)
Hash identifier:          WjjmMAjbp/r0UE7dZcat8fMTZS0MoS/13UsdHnVSBP4=
Subject key identifier:   2F:2B:A7:E4:77:EF:16:79:08:EA:10:A6:96:74:90:C0:C6:2B:92:B6
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Certificate issuer:       /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial:       0920A6D55B5A4F225EB801C7E37F2ACEEEB82B20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
Manifest number:          0138
Signing time:             Wed 29 Jan 2025 20:32:09 +0000
Manifest this update:     Wed 29 Jan 2025 20:27:09 +0000
Manifest next update:     Sun 02 Feb 2025 00:47:09 +0000
Files and hashes:         1: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=)
                          2: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=)
                          3: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=)
                          4: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=)
                          5: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=)
                          6: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: n0TKhMePTTD63YsYxIEmSpeeJ+9Aj/kUlhgl3C/0JQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:20:a6:d5:5b:5a:4f:22:5e:b8:01:c7:e3:7f:2a:ce:ee:b8:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
        Validity
            Not Before: Jan 29 20:27:09 2025 GMT
            Not After : Feb  2 00:47:09 2025 GMT
        Subject: CN=2F2BA7E477EF167908EA10A6967490C0C62B92B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:e2:94:60:a2:e2:48:6e:b8:b6:87:e9:a7:
                    9c:6d:01:6c:d3:34:e7:4f:ef:b4:6b:0a:21:58:ff:
                    7a:4f:20:5d:53:ca:0e:c4:4d:18:42:e0:41:57:af:
                    8f:68:7f:72:e1:33:b2:8e:05:34:a6:86:66:d0:ab:
                    99:78:ea:c0:64:e3:48:d9:ea:d4:af:1c:70:c9:4f:
                    14:aa:b3:b5:eb:ad:f4:df:d8:12:38:0a:c4:e2:72:
                    3e:05:64:b1:90:0a:86:cc:4d:ad:03:7e:28:d9:0e:
                    e6:46:85:ad:ca:0e:06:00:8d:2c:bc:39:15:69:e1:
                    fc:c5:fc:59:f9:20:e0:84:b5:1c:f9:f9:56:14:26:
                    af:32:0e:1a:33:28:db:6f:7d:d6:ad:37:fc:3c:ed:
                    ab:6f:9b:da:b3:5f:93:bd:8b:c1:65:c3:2e:d8:93:
                    48:a3:48:8c:d7:e3:76:47:6c:3e:fe:6e:20:8d:11:
                    61:fb:4b:c6:79:2b:67:2d:5f:7e:29:16:ce:ea:6b:
                    95:2f:64:36:1f:fc:8b:da:a1:71:1d:29:28:fa:fa:
                    e8:f0:68:c2:ff:2b:d2:43:81:f5:7c:d0:45:58:ca:
                    db:d9:f9:40:d8:a1:ec:3c:f8:b1:d5:5e:af:03:8e:
                    1d:15:60:af:4d:09:5a:f8:37:aa:a5:b7:f6:c3:8d:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:A7:E4:77:EF:16:79:08:EA:10:A6:96:74:90:C0:C6:2B:92:B6
            X509v3 Authority Key Identifier:
                keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:16:42:4d:e0:71:0b:41:4f:6d:4f:61:b4:59:4b:11:d8:
         9f:98:5a:87:fa:f5:ea:df:cf:60:35:42:80:48:a4:0a:e5:b0:
         50:af:0a:8c:9c:a0:13:16:fd:5c:6b:d5:78:5d:10:66:79:5d:
         f1:22:70:5f:87:e3:50:3e:99:3b:1e:b7:da:9b:40:92:69:f4:
         6b:d7:72:45:3b:7c:22:18:e0:57:36:fa:ff:3c:bf:41:f9:80:
         04:e5:74:83:76:d3:a7:d0:09:e6:1f:0c:71:f5:ea:e2:6b:dc:
         d5:7e:85:e6:3a:79:fe:f7:0b:ac:6e:b4:ac:b4:ab:e3:b8:a7:
         41:ab:c6:8e:de:36:65:6e:05:70:a7:e5:3b:03:e6:05:22:f8:
         38:95:a5:3d:4f:62:21:1d:e6:16:eb:1f:6f:d1:55:ac:ea:4e:
         25:a1:1a:30:d9:74:1f:2f:1f:d4:c2:56:c4:37:46:05:92:54:
         db:2d:86:c8:bf:8d:00:15:64:f8:fd:6f:70:46:bf:11:12:cb:
         a2:73:1f:d7:0c:6c:fd:59:f5:fa:38:ed:0b:47:e5:70:51:30:
         58:90:3c:09:e1:a3:8d:39:3f:9b:8a:15:61:eb:64:ea:4f:e3:
         e9:af:10:10:84:58:6b:f0:1b:c7:e4:7e:7e:e3:80:79:10:94:
         7d:af:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----