Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
File:                     AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json)
Hash identifier:          pvqaSDDfRQtKMK+54mmTH7giCJXYIudg0rcLfRKA59Y=
Subject key identifier:   2E:84:B9:BF:08:D6:D3:7E:19:50:72:E3:21:28:08:A4:6E:3A:E4:02
Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
Certificate issuer:       /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Certificate serial:       7BB3F48E266842F570F312E71688F7BD5329ABAB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
Manifest number:          0138
Signing time:             Thu 30 Jan 2025 02:01:03 +0000
Manifest this update:     Thu 30 Jan 2025 01:56:03 +0000
Manifest next update:     Sun 02 Feb 2025 06:15:03 +0000
Files and hashes:         1: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=)
                          2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: hSSwh94i1uIA/pumjk/OpcD40WvCxtwvrVz2uIMn+PE=)
                          3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b3:f4:8e:26:68:42:f5:70:f3:12:e7:16:88:f7:bd:53:29:ab:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
        Validity
            Not Before: Jan 30 01:56:03 2025 GMT
            Not After : Feb  2 06:15:03 2025 GMT
        Subject: CN=2E84B9BF08D6D37E195072E3212808A46E3AE402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8d:0c:2f:0e:e0:6c:b8:d3:7e:21:4e:40:63:
                    a4:26:3b:1a:f6:ca:62:0d:c7:96:7f:4b:9d:bf:7f:
                    62:53:7d:14:e1:66:78:d5:08:64:35:67:9a:0f:20:
                    9e:24:d9:90:85:02:76:aa:92:4c:b1:01:ce:b2:56:
                    2d:24:e4:f0:db:60:92:b1:9c:db:ed:b3:42:58:ce:
                    b1:65:6e:46:d1:1a:7f:84:e8:df:4b:c8:46:06:6e:
                    e5:93:86:56:d2:07:e1:72:46:9c:32:92:c2:cc:0b:
                    92:1b:d5:d9:2e:da:59:10:7f:2f:64:2b:c0:7b:27:
                    62:db:96:6a:75:85:76:b6:7d:52:44:2c:ca:e4:b8:
                    a7:e8:d7:2a:f7:3b:f9:aa:a6:5e:53:e8:e7:ee:6e:
                    80:39:9c:83:c0:ea:35:f1:7e:76:8c:66:b1:c8:37:
                    d1:57:d3:9f:a6:f1:17:fe:c2:ff:5f:ed:e2:27:6a:
                    31:f1:d3:22:02:5c:80:98:21:bd:ee:a9:0c:d8:76:
                    74:b4:0b:77:e5:b1:57:71:56:25:ee:f3:ae:57:48:
                    e2:8f:9a:fd:e0:01:cf:0c:0e:9f:01:c9:89:3e:13:
                    3c:23:66:ca:32:5e:bd:b5:ab:8e:6f:2f:02:75:28:
                    38:cd:9a:97:e5:ed:00:4a:37:c0:1d:06:4c:12:eb:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:84:B9:BF:08:D6:D3:7E:19:50:72:E3:21:28:08:A4:6E:3A:E4:02
            X509v3 Authority Key Identifier:
                keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:bb:17:30:0d:0f:ed:69:27:20:10:ef:86:8e:da:aa:bf:
         bd:b4:33:24:d0:29:a2:b2:0f:cf:e1:e9:bf:a8:a8:35:9b:bd:
         93:e9:0f:98:41:f0:35:78:74:7d:b8:4f:34:ed:b9:b8:ac:13:
         ae:d3:3b:4a:51:27:c0:3d:a9:5f:f4:54:b6:5f:89:77:f1:f3:
         78:13:33:a4:c0:ff:e1:e7:b2:e1:c5:82:10:c2:3f:e7:0b:f1:
         3e:b3:79:70:a0:3c:69:85:97:16:63:b8:9c:0a:aa:ce:1f:d6:
         81:89:a1:02:6f:10:7e:51:de:df:6a:e5:7c:64:33:16:2a:4e:
         38:91:70:75:22:89:f9:33:6f:84:44:47:3e:c5:cc:a4:5a:db:
         15:d2:6b:b4:e1:43:35:e9:de:32:8a:4e:5a:f3:df:9e:6b:5c:
         d9:9a:e4:57:2b:7b:d6:0a:b1:de:c6:e9:9a:6c:58:39:44:5a:
         bd:30:54:3a:81:ac:15:82:ae:72:9e:f9:10:4e:de:e7:1a:03:
         e9:cb:f4:70:df:48:e9:1e:08:f8:a7:9f:97:09:06:05:49:9d:
         8b:4c:2e:6e:25:ad:df:d6:b4:11:a2:44:e0:18:85:4f:30:9a:
         0e:dd:68:fa:8f:02:5e:dd:e2:e6:75:36:64:f9:a5:78:5d:4c:
         ee:0c:9e:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe7P0jiZoQvVw8xLnFoj3vVMpq6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC
QTczRkVGMjAeFw0yNTAxMzAwMTU2MDNaFw0yNTAyMDIwNjE1MDNaMDMxMTAvBgNV
BAMTKDJFODRCOUJGMDhENkQzN0UxOTUwNzJFMzIxMjgwOEE0NkUzQUU0MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwjQwvDuBsuNN+IU5AY6QmOxr2
ymINx5Z/S52/f2JTfRThZnjVCGQ1Z5oPIJ4k2ZCFAnaqkkyxAc6yVi0k5PDbYJKx
nNvts0JYzrFlbkbRGn+E6N9LyEYGbuWThlbSB+FyRpwyksLMC5Ib1dku2lkQfy9k
K8B7J2Lblmp1hXa2fVJELMrkuKfo1yr3O/mqpl5T6OfuboA5nIPA6jXxfnaMZrHI
N9FX05+m8Rf+wv9f7eInajHx0yICXICYIb3uqQzYdnS0C3flsVdxViXu865XSOKP
mv3gAc8MDp8ByYk+EzwjZsoyXr21q45vLwJ1KDjNmpfl7QBKN8AdBkwS652DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULoS5vwjW034ZUHLjISgIpG465AIwHwYDVR0j
BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz
NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz
RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm
NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4
QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALJFuxcwDQ/taScgEO+Gjtqqv720MyTQKaKy
D8/h6b+oqDWbvZPpD5hB8DV4dH24TzTtubisE67TO0pRJ8A9qV/0VLZfiXfx83gT
M6TA/+HnsuHFghDCP+cL8T6zeXCgPGmFlxZjuJwKqs4f1oGJoQJvEH5R3t9q5Xxk
MxYqTjiRcHUiifkzb4RERz7FzKRa2xXSa7ThQzXp3jKKTlrz355rXNma5Fcre9YK
sd7G6ZpsWDlEWr0wVDqBrBWCrnKe+RBO3ucaA+nL9HDfSOkeCPinn5cJBgVJnYtM
Lm4lrd/WtBGiROAYhU8wmg7daPqPAl7d4uZ1NmT5pXhdTO4Mnmk=
-----END CERTIFICATE-----