Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft
File:                     157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json)
Hash identifier:          L9CqB3AGBZ9BAGu5QGyiuBKOZIs3Fen1z7/uI2bd83g=
Subject key identifier:   63:1A:9E:62:F4:C7:47:F3:D8:68:5F:AA:98:9A:5E:FF:8D:70:F8:CF
Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7
Certificate issuer:       /CN=157E8817E413B3A8B2866190AD82151E868B1FA7
Certificate serial:       3064CB454610DF8862E7E0C61251C2895CE70DE6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft
Manifest number:          0191
Signing time:             Wed 29 Jan 2025 17:52:08 +0000
Manifest this update:     Wed 29 Jan 2025 17:47:08 +0000
Manifest next update:     Sun 02 Feb 2025 04:41:08 +0000
Files and hashes:         1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: +plvagJTEWEKvn5SZaftcn0qBGmFNqSMLPgdfy0xJAc=)
                          2: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: wrVTmYAatpcz1+w7gxzlbX20pZ67kgoJOH/z8RCmJRs=)
                          3: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:64:cb:45:46:10:df:88:62:e7:e0:c6:12:51:c2:89:5c:e7:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7
        Validity
            Not Before: Jan 29 17:47:08 2025 GMT
            Not After : Feb  2 04:41:08 2025 GMT
        Subject: CN=631A9E62F4C747F3D8685FAA989A5EFF8D70F8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:ec:61:8e:c7:21:9a:10:fb:cd:3c:f7:24:
                    43:ea:d3:18:ae:ad:cb:e4:28:e5:51:64:64:60:8c:
                    3a:92:d0:3a:ec:37:84:58:ef:0c:38:4d:97:17:70:
                    eb:1c:0e:4f:a5:b5:6c:0f:1e:bf:93:a7:e5:4c:28:
                    92:1e:42:e5:7a:62:49:1d:fd:f2:ad:4a:cd:01:de:
                    04:e4:9a:be:2e:7a:cd:8d:87:b2:54:fd:b9:76:ba:
                    5d:03:65:90:60:af:9c:4f:27:7e:05:6e:06:e5:98:
                    77:5c:2c:75:c6:f9:4a:29:c3:42:90:21:89:23:45:
                    71:0c:8b:a0:f7:5a:a4:fc:07:6c:4c:3c:5b:22:32:
                    c1:7d:67:79:9e:ea:b3:b2:a7:64:b9:f0:98:76:32:
                    99:e0:3a:e1:8d:e4:c2:9b:a4:b9:49:43:04:65:dc:
                    af:df:02:47:c2:64:d2:22:fd:2e:5c:64:b3:2c:8d:
                    71:f5:c9:82:35:ce:1a:1c:ec:af:1e:ae:c1:0a:70:
                    a9:d8:1c:7e:fa:b8:ed:9b:69:8f:ca:ee:28:b9:90:
                    61:b1:21:63:0d:c7:4a:1a:1b:53:4d:49:09:2a:7b:
                    ee:ff:47:e4:cc:4a:7c:ea:52:7d:9b:b8:3d:5f:9a:
                    0e:a3:9d:36:07:8c:62:aa:a5:03:d0:e4:6c:ab:fe:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:9E:62:F4:C7:47:F3:D8:68:5F:AA:98:9A:5E:FF:8D:70:F8:CF
            X509v3 Authority Key Identifier:
                keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:ca:7a:71:da:16:54:c2:52:e7:46:1a:a1:02:7c:0b:33:
         81:b4:64:c3:cb:7a:5b:d1:6c:8b:ae:0b:14:3e:b1:fe:e7:85:
         0c:8e:7d:83:bd:d2:ae:71:b6:85:cc:77:11:4e:aa:40:a7:92:
         ee:60:3e:36:99:bd:4e:97:89:6b:ef:ec:35:c0:30:7a:c6:d9:
         78:a1:a8:f6:9f:19:be:40:fc:6d:eb:d9:85:46:5a:94:5e:e4:
         e3:8c:7b:cf:f2:64:86:3a:f7:9a:ab:16:34:70:d4:8e:95:df:
         e2:0d:04:ed:ad:70:49:f6:71:ae:3f:8a:47:09:29:19:d4:28:
         3d:66:f1:5b:d8:22:6a:56:90:94:f1:b1:87:de:0b:18:4a:3e:
         12:d2:dd:45:65:d3:ee:86:41:27:18:72:1a:eb:36:24:c3:09:
         f6:d2:ef:35:0a:22:7d:5a:bb:b3:c0:cf:ee:f8:be:a6:1e:10:
         56:32:2d:be:48:29:fe:93:15:ac:81:53:c2:17:43:6f:29:04:
         41:19:18:5d:cc:73:78:bf:1f:7f:50:5a:e1:2a:e1:93:7d:05:
         f2:b9:0d:86:0b:a5:09:b0:91:04:30:8a:7c:6f:51:d6:fe:f0:
         e3:32:71:a4:c6:77:c6:5a:27:ea:a5:0b:9c:ea:bd:4d:6a:fd:
         2f:25:f0:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMGTLRUYQ34hi5+DGElHCiVznDeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4
NjhCMUZBNzAeFw0yNTAxMjkxNzQ3MDhaFw0yNTAyMDIwNDQxMDhaMDMxMTAvBgNV
BAMTKDYzMUE5RTYyRjRDNzQ3RjNEODY4NUZBQTk4OUE1RUZGOEQ3MEY4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeOxhjschmhD7zTz3JEPq0xiu
rcvkKOVRZGRgjDqS0DrsN4RY7ww4TZcXcOscDk+ltWwPHr+Tp+VMKJIeQuV6Ykkd
/fKtSs0B3gTkmr4ues2Nh7JU/bl2ul0DZZBgr5xPJ34FbgblmHdcLHXG+Uopw0KQ
IYkjRXEMi6D3WqT8B2xMPFsiMsF9Z3me6rOyp2S58Jh2MpngOuGN5MKbpLlJQwRl
3K/fAkfCZNIi/S5cZLMsjXH1yYI1zhoc7K8ersEKcKnYHH76uO2baY/K7ii5kGGx
IWMNx0oaG1NNSQkqe+7/R+TMSnzqUn2buD1fmg6jnTYHjGKqpQPQ5Gyr/sTDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYxqeYvTHR/PYaF+qmJpe/41w+M8wHwYDVR0j
BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0
MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC
MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj
NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1
MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADb4ynpx2hZUwlLnRhqhAnwLM4G0ZMPLelvR
bIuuCxQ+sf7nhQyOfYO90q5xtoXMdxFOqkCnku5gPjaZvU6XiWvv7DXAMHrG2Xih
qPafGb5A/G3r2YVGWpRe5OOMe8/yZIY695qrFjRw1I6V3+INBO2tcEn2ca4/ikcJ
KRnUKD1m8VvYImpWkJTxsYfeCxhKPhLS3UVl0+6GQScYchrrNiTDCfbS7zUKIn1a
u7PAz+74vqYeEFYyLb5IKf6TFayBU8IXQ28pBEEZGF3Mc3i/H39QWuEq4ZN9BfK5
DYYLpQmwkQQwinxvUdb+8OMycaTGd8ZaJ+qlC5zqvU1q/S8l8HU=
-----END CERTIFICATE-----