Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
File:                     5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json)
Hash identifier:          dj+iTLrdWGTXFz5na6A7QLfyyhl0PD93jfEyHAcdi8g=
Subject key identifier:   6C:87:3F:3D:DE:54:4A:5D:86:84:4F:5E:B8:C8:55:39:3F:75:52:F2
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Certificate issuer:       /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial:       21537A4CA2C6C0C729A02B305D9E058BF95429F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
Manifest number:          01B9
Signing time:             Thu 30 Jan 2025 11:21:32 +0000
Manifest this update:     Thu 30 Jan 2025 11:16:32 +0000
Manifest next update:     Sun 02 Feb 2025 21:19:32 +0000
Files and hashes:         1: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=)
                          2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=)
                          3: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: cF2s7ZBfwHahsFKbCEkaaXh20UCEJTkdxSaWB8er9iE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:7a:4c:a2:c6:c0:c7:29:a0:2b:30:5d:9e:05:8b:f9:54:29:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
        Validity
            Not Before: Jan 30 11:16:32 2025 GMT
            Not After : Feb  2 21:19:32 2025 GMT
        Subject: CN=6C873F3DDE544A5D86844F5EB8C855393F7552F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:9f:96:8a:97:1a:a2:c8:19:35:16:6b:47:
                    0f:1b:f1:cd:4d:95:f3:4a:f2:f2:85:cd:f1:4b:36:
                    a8:28:34:05:a8:9f:78:fe:48:70:a3:4d:6e:44:29:
                    2b:95:5f:66:4b:f6:ee:88:7a:f5:6d:ac:68:47:4b:
                    da:f8:13:f6:d7:3b:24:42:6c:48:c0:a3:88:42:02:
                    02:dd:0e:98:1c:32:47:cb:ba:a6:3e:43:0e:6a:a5:
                    86:81:bb:94:d4:1e:00:e2:31:44:50:6b:df:dd:48:
                    6c:fa:1d:77:05:82:89:70:e7:66:49:1c:63:99:03:
                    57:d8:07:15:a6:19:85:e7:30:a8:20:13:6e:65:52:
                    4e:ab:6e:df:52:7f:d2:e0:a0:94:1d:64:03:cf:a7:
                    e8:e0:0d:b0:d5:19:19:d3:23:95:68:59:4c:d9:cd:
                    63:c0:fc:40:85:0d:b8:1c:98:ec:dd:dd:28:81:26:
                    a8:c4:c6:b2:e6:57:fe:1a:86:18:59:2f:b3:2e:7e:
                    22:a9:30:5b:49:49:9b:b6:bf:d6:0b:b2:d8:68:6b:
                    c0:5d:8a:9c:8d:5a:0e:4e:8f:2c:83:ff:63:72:ce:
                    58:dd:1f:44:a4:f4:60:7c:2d:0f:74:4f:8c:d1:a4:
                    9d:85:89:af:ca:a9:8b:8d:53:5a:12:1f:e0:75:79:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:3F:3D:DE:54:4A:5D:86:84:4F:5E:B8:C8:55:39:3F:75:52:F2
            X509v3 Authority Key Identifier:
                keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:0e:99:80:0f:a5:5a:1b:ee:1e:df:f7:74:b7:a9:d4:7c:
         5a:b4:e7:8b:85:92:c3:ce:5c:47:fc:80:89:71:78:f5:a3:1f:
         c3:80:16:31:81:c5:23:7a:1d:f5:7b:80:58:a1:42:e7:03:9f:
         ff:17:35:26:7b:c6:a0:fd:9a:a8:65:c9:af:89:b1:c6:72:7f:
         98:01:7e:b7:bd:d9:9e:3c:72:16:34:31:e4:8a:f5:4f:30:72:
         d5:1a:d1:f7:1a:c8:5a:37:34:2a:42:7f:a5:0e:9b:0f:62:d9:
         6e:d4:d1:a5:23:fb:3a:c7:b4:5e:d6:39:9e:49:ce:78:20:3a:
         7b:13:93:30:4b:f3:74:b7:2f:41:bc:36:ee:a2:09:0b:fc:74:
         46:bd:df:da:4b:17:b8:16:01:61:32:1e:41:81:cc:89:b5:57:
         36:75:39:0f:76:cf:70:dc:71:eb:43:87:4a:5a:73:fa:82:54:
         76:1d:f9:2a:90:81:2e:a1:91:62:bc:a5:67:93:cb:f9:2d:2e:
         0d:36:00:42:da:2e:14:43:d9:e0:39:5d:c0:1b:01:0e:8d:0f:
         7f:68:05:7a:95:6a:7f:5d:9d:2f:5a:00:aa:ab:22:2c:a5:f9:
         25:82:41:aa:72:1d:49:cc:e5:84:36:b3:27:e0:e9:be:d0:3f:
         1e:8a:f4:23
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIVN6TKLGwMcpoCswXZ4Fi/lUKfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF
Q0UzQjY2QzAeFw0yNTAxMzAxMTE2MzJaFw0yNTAyMDIyMTE5MzJaMDMxMTAvBgNV
BAMTKDZDODczRjNEREU1NDRBNUQ4Njg0NEY1RUI4Qzg1NTM5M0Y3NTUyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSp+WipcaosgZNRZrRw8b8c1N
lfNK8vKFzfFLNqgoNAWon3j+SHCjTW5EKSuVX2ZL9u6IevVtrGhHS9r4E/bXOyRC
bEjAo4hCAgLdDpgcMkfLuqY+Qw5qpYaBu5TUHgDiMURQa9/dSGz6HXcFgolw52ZJ
HGOZA1fYBxWmGYXnMKggE25lUk6rbt9Sf9LgoJQdZAPPp+jgDbDVGRnTI5VoWUzZ
zWPA/ECFDbgcmOzd3SiBJqjExrLmV/4ahhhZL7MufiKpMFtJSZu2v9YLsthoa8Bd
ipyNWg5OjyyD/2NyzljdH0Sk9GB8LQ90T4zRpJ2Fia/KqYuNU1oSH+B1eYqZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbIc/Pd5USl2GhE9euMhVOT91UvIwHwYDVR0j
BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC
NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz
QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj
M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD
M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAhfDpmAD6VaG+4e3/d0t6nUfFq054uFksPO
XEf8gIlxePWjH8OAFjGBxSN6HfV7gFihQucDn/8XNSZ7xqD9mqhlya+JscZyf5gB
fre92Z48chY0MeSK9U8wctUa0fcayFo3NCpCf6UOmw9i2W7U0aUj+zrHtF7WOZ5J
znggOnsTkzBL83S3L0G8Nu6iCQv8dEa939pLF7gWAWEyHkGBzIm1VzZ1OQ92z3Dc
cetDh0pac/qCVHYd+SqQgS6hkWK8pWeTy/ktLg02AELaLhRD2eA5XcAbAQ6ND39o
BXqVan9dnS9aAKqrIiyl+SWCQapyHUnM5YQ2syfg6b7QPx6K9CM=
-----END CERTIFICATE-----