Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
File:                     9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json)
Hash identifier:          MJmMfH9hkLAGnTGDeUrNKgjFNQeXOaX2/SdBo2pAL+c=
Subject key identifier:   2D:85:F7:E6:01:61:84:64:97:B4:14:1C:4F:D9:9F:7D:79:64:C6:20
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       31BE597451A8D9AE0A58EE959CC868E21F0D2051
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
Manifest number:          0515
Signing time:             Thu 30 Jan 2025 15:51:34 +0000
Manifest this update:     Thu 30 Jan 2025 15:46:34 +0000
Manifest next update:     Sun 02 Feb 2025 19:13:34 +0000
Files and hashes:         1: AS137342.roa (hash: CMk60fE5UdVZv/MxL6/n0+3Rya8vaHN7xLAuSG2v4iA=)
                          2: AS137379.roa (hash: Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=)
                          3: AS59281.roa (hash: 3OoTAmlO4zWNGL/bSRhl8jP1S0EccRMZ9zeQlEN9DAw=)
                          4: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: hiWwZcQvkrv7FR+qNUXVXlNyBcNpC9X81eQt2Tz5QqM=)
                          5: AS56242.roa (hash: tSzKKpcbE6bo3w9bV3TVhMwcF8jKEriX5Wm0rnvAgIg=)
                          6: AS38511.roa (hash: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:be:59:74:51:a8:d9:ae:0a:58:ee:95:9c:c8:68:e2:1f:0d:20:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Jan 30 15:46:34 2025 GMT
            Not After : Feb  2 19:13:34 2025 GMT
        Subject: CN=2D85F7E60161846497B4141C4FD99F7D7964C620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:13:47:bf:50:18:26:df:98:5b:b1:9d:e5:
                    6d:ea:b2:59:f6:c6:8f:6e:45:58:b7:aa:96:7e:ca:
                    ff:ee:94:ff:e9:37:fb:0d:aa:56:a3:01:16:32:ac:
                    43:78:9f:8e:83:cb:10:1c:5a:c4:69:fb:08:00:cd:
                    bd:4c:93:ee:6a:53:4a:07:64:7c:14:f0:83:c2:dd:
                    13:85:f1:2a:5c:9c:1c:7c:91:13:9a:df:58:e2:e9:
                    6f:a0:97:e1:8c:03:ce:1c:c3:9a:a7:af:d5:7d:64:
                    37:76:b2:04:17:c7:6f:40:e2:f7:ae:ca:13:b9:26:
                    d2:c8:f1:e9:b7:e0:80:16:15:da:04:2c:b1:8d:c4:
                    01:e9:56:89:b0:86:91:0c:21:c6:93:b7:0f:40:88:
                    e2:cd:8a:8f:ee:e9:15:4d:7b:28:2d:c3:f2:11:ab:
                    4f:f7:85:53:8c:00:cb:20:c8:bd:ec:c8:e6:de:55:
                    78:7f:a5:33:5b:50:79:68:34:72:6a:3c:88:3a:0e:
                    87:bf:86:32:7e:1a:5f:97:20:b5:b8:c5:11:20:75:
                    4e:ac:0f:fc:76:7a:ad:b0:6e:e9:a9:97:45:52:33:
                    a4:92:e5:49:29:3a:8b:a2:d2:a0:f3:20:5b:36:36:
                    08:f1:d8:f9:53:ba:93:a1:39:74:93:43:33:00:d5:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:85:F7:E6:01:61:84:64:97:B4:14:1C:4F:D9:9F:7D:79:64:C6:20
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:98:4a:4c:5e:83:ba:bc:12:f3:28:85:22:5d:cd:26:cb:
         0e:eb:fd:e8:4f:c3:52:ab:19:c3:f8:4c:32:43:68:30:0d:b5:
         05:6a:9f:d1:15:17:18:90:96:6d:e2:d0:ea:a7:55:ee:26:25:
         7f:9c:fe:03:26:b0:72:06:37:97:c7:cb:12:d4:37:72:b6:fa:
         20:3a:fb:fc:9d:07:37:56:fc:53:78:79:c2:66:ba:8b:7b:4a:
         d3:41:51:7b:ae:ec:55:8f:ab:29:dd:ab:9c:a5:2d:89:d5:4b:
         2b:69:a1:52:4b:69:1c:ad:25:b5:8d:b0:a0:e1:a0:8c:9c:7f:
         13:4e:b3:6d:4d:42:18:ae:46:54:e1:22:e3:de:4a:93:43:0f:
         e0:6c:bc:2c:b0:59:c6:2d:94:ae:e4:e1:b4:01:74:8c:c5:8d:
         3f:af:d4:3b:ed:08:96:3f:f3:0c:b2:26:9a:46:c6:73:c9:a7:
         c9:f7:a0:e2:e0:e2:ad:e3:0f:28:e7:34:8b:c4:29:26:bc:7c:
         9e:cf:a2:d9:b1:8c:ee:b3:1d:b7:b3:ce:25:93:a2:73:12:3d:
         9f:e3:c3:13:57:43:ee:a5:f9:06:d1:0d:4a:06:41:b8:87:5f:
         b5:3d:e2:1a:ab:72:7d:50:3f:f0:7c:8e:fa:89:f2:02:35:f6:
         e3:19:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----