Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
File:                     389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json)
Hash identifier:          8sjmjOoYnYwMKVfb4bv1X3xGV/wJp9T38XvlyK+r/YA=
Subject key identifier:   4F:CC:47:2E:D2:5B:D6:9C:2E:66:68:5B:96:15:96:BE:5D:5E:EF:0D
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       306E51DAE62A69BFF8671F5A3CDFF91019C286E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
Manifest number:          04A6
Signing time:             Thu 30 Jan 2025 22:32:05 +0000
Manifest this update:     Thu 30 Jan 2025 22:27:05 +0000
Manifest next update:     Mon 03 Feb 2025 03:39:05 +0000
Files and hashes:         1: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: 7gyXsXhXbz+5Y778CqurXCGCsFoCA1QhjfVs/TUp3oQ=)
                          2: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: RLA5v8yF4e17cdMyc+jBJiRoyRBUmmNSOOt7J7Mky1c=)
                          3: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: eHRe7UN4yHEuP/bcxvXuiWUL1Jq+AhWRZYK0EAkak0g=)
                          4: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: xiXqHT30gah4SfdCSJA1bqssFdqa9R1vtVtP0INDihk=)
                          5: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: KUcP7h07thnbz4HgYEXRhyo/VKL71mkoKsjlqNyH3oE=)
                          6: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=)
                          7: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: +5ArSDkm8nFNY2pJsCcc5rpBFK1QZi3XeCjPa44v8Qg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:51:da:e6:2a:69:bf:f8:67:1f:5a:3c:df:f9:10:19:c2:86:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Jan 30 22:27:05 2025 GMT
            Not After : Feb  3 03:39:05 2025 GMT
        Subject: CN=4FCC472ED25BD69C2E66685B961596BE5D5EEF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:da:a2:8f:32:a7:06:d5:7d:34:e1:d1:f7:
                    a0:55:b6:39:9d:e8:4e:7d:3c:24:63:1d:00:24:a6:
                    ff:06:cb:78:d2:ab:30:e5:15:55:8d:9b:bd:28:90:
                    0e:db:8e:2b:48:e0:9a:2b:08:45:b2:4f:01:34:21:
                    77:61:73:b7:fc:e9:85:5a:2e:1d:24:5a:87:3b:6f:
                    bf:7d:49:91:73:5a:ef:6d:3b:e2:67:76:a8:93:ee:
                    43:7a:aa:7f:e3:a2:e4:7d:b8:2c:66:9e:99:cf:1d:
                    a1:fe:34:e7:dd:1b:18:4f:9d:85:17:d6:d6:e2:66:
                    e9:a4:3c:ad:d5:2e:f0:33:da:bf:e4:95:31:b4:ad:
                    28:73:ab:f3:f5:5e:7c:0d:b2:46:9d:b0:77:44:c5:
                    c5:73:93:74:5b:69:2f:18:1d:96:00:be:9a:fa:62:
                    b9:3e:9d:b2:fa:43:c1:fa:a1:b5:4a:7f:4d:85:c6:
                    21:49:8a:1e:b9:08:8e:7c:1d:e7:d3:6e:ae:46:7e:
                    18:e9:0c:d4:32:cd:16:7f:50:34:56:4a:ef:67:9c:
                    d1:4e:49:7c:94:bd:4d:a4:2b:f1:db:10:ed:27:d9:
                    a4:b3:f9:ff:16:94:25:a1:3a:ba:cb:0e:5a:50:99:
                    3c:af:0b:9c:6f:44:8f:02:fb:45:23:50:2e:98:ff:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:47:2E:D2:5B:D6:9C:2E:66:68:5B:96:15:96:BE:5D:5E:EF:0D
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:04:12:f9:61:a1:f1:d4:f0:f6:f8:61:d8:10:89:8b:90:
         aa:80:dd:d3:89:0f:70:52:84:1e:e8:92:20:bd:4f:e0:27:88:
         ae:87:1b:8d:da:9b:76:77:4b:c4:8c:04:e6:89:20:eb:93:b0:
         84:e0:eb:0f:79:92:5c:c6:56:4f:f4:d8:37:d2:16:fd:fc:7f:
         0a:06:3c:42:38:c2:9b:72:35:6a:37:4b:d3:f2:f8:8d:d5:88:
         99:a7:17:aa:cb:60:b7:0a:7a:c6:85:1c:0e:92:e2:29:62:31:
         f2:ed:00:cb:76:c9:d4:76:b9:ed:28:3d:ca:f2:1b:7d:22:f9:
         82:1d:6d:e1:df:f9:02:db:8d:de:df:26:9b:77:9f:19:56:0a:
         24:af:ed:e3:1b:1d:2e:f5:d0:79:05:43:0c:e3:2b:4b:9e:8d:
         7b:ec:b9:62:a9:b2:09:71:de:cd:ee:31:84:8c:7a:2e:b0:8d:
         98:99:c7:01:17:94:7b:d6:2d:f6:3e:ae:94:8a:33:8e:84:59:
         87:a2:d7:14:d7:6d:af:18:5e:3e:7e:fd:79:bf:ab:09:87:65:
         8b:89:ef:73:e9:96:55:cf:f5:6e:a5:c4:f3:82:da:04:f8:9a:
         06:5b:7b:90:65:74:ce:dc:3c:da:8e:2f:e4:da:fa:ef:2e:9f:
         d5:94:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----