Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft
File:                     4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json)
Hash identifier:          zRpkLLRj42cgttq7K1OTKeo4CObnKWmKrB/6FFyg9T8=
Subject key identifier:   ED:9C:32:56:7D:B3:01:71:B9:EE:52:03:E2:8B:3C:EF:91:8D:1E:20
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Certificate issuer:       /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial:       56CF5C30F37A6A7E55222569A06D53F094F66E51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft
Manifest number:          01F4
Signing time:             Wed 29 Jan 2025 14:40:55 +0000
Manifest this update:     Wed 29 Jan 2025 14:35:55 +0000
Manifest next update:     Sat 01 Feb 2025 20:15:55 +0000
Files and hashes:         1: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: PxQIpqbQq2jLhpu3Xowhx5fys0b4IY/JPo7Tka0HdFo=)
                          2: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 8Rg4KVnY/32fl4fG4uMRblRtiju0uviBp14XLoqECcw=)
                          3: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: pNJsYwkRdnZuqtO3zI11TG+nWFbGxHsNXIFA5E9dRfc=)
                          4: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: 4O8b726/lpcYZIzCbq+BOqW7rrh6L+bwyN5I34NP9Oc=)
                          5: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: rlZNRe9QwPDxRgCp5O054ihVTvOafRmbaG0Hj+9kO5Q=)
                          6: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: /oNKkVvACpGRwEaHQtz+NrUuOBWsbNWp6QRHeV0MPMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cf:5c:30:f3:7a:6a:7e:55:22:25:69:a0:6d:53:f0:94:f6:6e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
        Validity
            Not Before: Jan 29 14:35:55 2025 GMT
            Not After : Feb  1 20:15:55 2025 GMT
        Subject: CN=ED9C32567DB30171B9EE5203E28B3CEF918D1E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:50:c5:0a:18:62:e2:d3:7b:08:56:1c:20:
                    73:db:92:17:ac:29:5e:df:75:71:f0:63:a0:8f:fe:
                    85:e2:21:5c:93:fc:ff:45:38:67:e6:8a:ba:77:f6:
                    04:8f:00:4d:82:d7:34:a3:f4:10:76:8b:06:f5:73:
                    a2:64:5c:c9:b3:2a:bf:8b:55:31:bc:e0:24:32:36:
                    68:fb:6c:69:a9:66:bf:31:1b:7b:ad:63:7e:d8:6b:
                    4d:1e:da:ad:e6:28:b8:ae:52:71:67:46:32:e2:a7:
                    86:3d:f0:28:63:9f:87:4e:0a:09:1b:0f:c1:04:f1:
                    a0:ae:e9:77:58:6c:b0:6c:43:0a:a9:43:97:94:99:
                    e3:bc:a5:c9:99:c9:61:a6:7c:74:06:18:57:05:55:
                    b3:db:06:cf:9c:c3:fe:00:cc:0e:93:af:da:a3:b5:
                    fd:3f:ac:49:10:5e:1d:81:f3:80:4e:bd:4f:77:56:
                    c6:4a:dd:34:50:73:10:85:4b:e0:c5:41:cd:e7:90:
                    f5:d0:1c:b6:7b:e4:a7:da:4e:77:5a:7a:a7:cd:52:
                    8d:93:6a:23:ec:2f:8e:b6:2c:34:43:29:00:08:bf:
                    f9:e9:24:3c:0e:8a:c1:fe:dd:0b:71:94:44:6f:c0:
                    a1:ea:cf:a6:ca:01:a2:83:e1:9a:bd:50:f7:4e:f4:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:32:56:7D:B3:01:71:B9:EE:52:03:E2:8B:3C:EF:91:8D:1E:20
            X509v3 Authority Key Identifier:
                keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:58:46:17:1c:9a:1f:d7:4e:61:12:30:d5:e5:fd:e7:0b:14:
         9b:00:b8:a8:ae:6b:21:b0:69:12:22:62:2b:dd:db:91:a2:9c:
         a0:00:aa:1f:51:63:ae:76:5e:ac:0b:c3:15:4d:2f:c5:2a:42:
         64:27:a8:c8:d3:1c:7e:fe:a7:da:90:2c:f8:37:ec:42:97:9b:
         6a:91:6f:77:ae:e5:53:ef:4b:8c:3d:91:8d:fd:f2:75:a1:c3:
         dd:81:5d:c2:93:9a:70:67:17:65:2b:5a:d7:18:c6:2f:04:7c:
         50:aa:92:b2:95:a0:45:1c:12:cb:0f:0b:0b:1f:a7:a2:b8:05:
         3f:c7:cb:08:4c:25:0d:2a:48:8a:6a:ee:ad:85:a5:8e:93:a4:
         b2:8c:6a:09:1a:78:71:f7:db:fe:97:38:92:9d:b3:f6:c7:3a:
         fd:0d:de:6a:b4:d0:50:c0:51:19:31:60:f1:a7:72:32:d4:7c:
         c8:28:87:ee:37:40:42:42:5c:c2:82:ab:7a:7e:06:53:8c:26:
         9b:b4:98:a7:d6:99:31:d7:5a:f6:fb:10:1b:88:c2:df:33:c8:
         c7:9a:be:a1:89:74:ae:f9:9d:eb:1e:34:b5:c5:15:75:c1:63:
         ea:e5:2a:57:69:62:51:6e:ee:fd:0b:a4:a2:2b:a7:e5:31:ff:
         6b:a6:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----