Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
File:                     41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json)
Hash identifier:          P0mREsA8n2G8fdcKMnhbgQQGnQphCO3wGGwRhKnAVmo=
Subject key identifier:   72:5E:8D:95:85:18:B7:ED:73:A4:DD:D1:EA:8F:B4:21:D5:1C:1B:0E
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Certificate issuer:       /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial:       0A852466BFF27037B213105F0FCE3CF3ABFD4EA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
Manifest number:          013F
Signing time:             Thu 30 Jan 2025 00:31:07 +0000
Manifest this update:     Thu 30 Jan 2025 00:26:07 +0000
Manifest next update:     Sun 02 Feb 2025 08:26:07 +0000
Files and hashes:         1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: eG3L50RlSnDUuOVwkVlYnQebEQc3JXkDObYN4u0w6z8=)
                          2: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: d7FeXU5bTqlWuBAXal7D7M2ULjAxWTnXb++FAluKR9I=)
                          3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: Y9d4RL5lwPJKIYYz/S5GmByBdyf8v8c66+665Lm4cNc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:85:24:66:bf:f2:70:37:b2:13:10:5f:0f:ce:3c:f3:ab:fd:4e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
        Validity
            Not Before: Jan 30 00:26:07 2025 GMT
            Not After : Feb  2 08:26:07 2025 GMT
        Subject: CN=725E8D958518B7ED73A4DDD1EA8FB421D51C1B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2a:d0:06:e5:cd:0c:1f:60:ba:75:94:c4:44:
                    f3:47:07:7f:35:46:0a:f1:97:0a:17:18:90:e4:77:
                    65:b3:94:a4:66:01:1e:df:07:78:68:5f:b7:00:a6:
                    50:81:e7:a6:cf:bd:4f:07:0c:04:df:7a:75:64:43:
                    63:7f:15:c3:46:73:d6:9b:b9:82:62:ae:1f:79:80:
                    9d:5e:28:f7:e1:48:41:c3:f6:2f:0e:82:c6:99:34:
                    11:32:12:09:fb:05:0a:91:fd:ce:87:3a:74:30:0b:
                    cf:72:11:52:88:6d:16:42:25:d9:77:64:23:9c:44:
                    8b:8a:af:0d:30:7c:e4:e4:eb:e2:1a:bf:60:cb:7a:
                    3b:64:4c:8f:3d:a3:dc:8c:ca:50:b2:da:a4:5d:34:
                    da:26:a9:5f:ec:ed:ff:ba:6d:e2:97:5f:17:be:a8:
                    23:16:99:fd:4d:f6:89:85:d7:4e:51:cb:7e:d4:31:
                    2d:2d:22:e0:8f:49:80:02:08:ab:7c:c6:1b:01:b3:
                    f3:6e:12:64:e9:2c:0c:8d:af:b6:a2:83:33:74:02:
                    7b:26:ea:8c:30:b5:f0:f9:5d:7e:b9:e4:3a:1c:fe:
                    c4:d4:22:07:e5:75:c7:46:fd:a4:af:cc:3e:9c:59:
                    f7:88:fb:bf:75:bf:9f:e2:97:e2:34:81:10:9f:97:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5E:8D:95:85:18:B7:ED:73:A4:DD:D1:EA:8F:B4:21:D5:1C:1B:0E
            X509v3 Authority Key Identifier:
                keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:38:0e:bd:9a:08:16:fb:03:5a:8b:68:8a:fc:10:22:0b:
         26:d4:ba:b3:bd:bc:76:2c:cf:21:ff:aa:12:13:76:e7:1d:af:
         81:58:0c:af:5b:e6:b6:3f:da:96:9e:5e:26:8d:a6:98:27:0a:
         f3:10:cd:ad:7f:7f:07:2f:31:5d:33:77:b4:6e:30:6a:19:35:
         a4:88:af:ce:2a:ad:9e:16:64:e0:4f:e6:85:36:d6:56:9e:ef:
         a8:42:f8:7e:8e:85:89:83:d2:09:f1:1f:e6:e7:86:11:0c:ac:
         0e:24:a3:d7:e8:d2:c9:f2:ea:f1:5c:78:31:b3:b2:f2:82:f7:
         f1:9d:6e:20:6d:3e:d1:07:2f:bf:10:40:4c:c0:d4:69:2b:d1:
         96:96:67:6f:b4:88:1b:9e:4c:cf:a1:56:db:9e:d7:bc:48:b8:
         f0:a4:b9:71:8c:13:87:4e:ed:e5:b5:d2:33:48:9a:df:fd:3c:
         f4:89:cf:7a:8d:87:e3:44:98:c1:da:9a:c7:e4:35:b9:14:41:
         c8:e7:35:b0:bf:43:d2:06:64:c8:fa:3c:a8:7e:bf:3e:18:37:
         3d:47:3e:4d:a6:23:61:39:a3:68:f4:b8:a9:d5:5a:36:2b:bb:
         0c:ec:26:fb:a2:3a:12:67:10:85:f3:d7:21:40:2c:ef:4c:e1:
         63:24:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----