Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File:                     A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier:          EW/UxN71iQppSfm2uU9bmWZeUoNodA16keWICXBnRR0=
Subject key identifier:   E1:67:ED:1F:8C:44:89:C6:D2:F8:EE:2C:3B:2E:5B:89:98:3C:A3:06
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer:       /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial:       50AA04BEB3AB97C810910FE1D0F1C2D50BC26456
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number:          0147
Signing time:             Thu 30 Jan 2025 16:31:31 +0000
Manifest this update:     Thu 30 Jan 2025 16:26:31 +0000
Manifest next update:     Sun 02 Feb 2025 18:11:31 +0000
Files and hashes:         1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: AYFmepTg2gL3gCeQGa1fHMgfyTKw6Kc7eBsaTQ8geQ4=)
                          2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:aa:04:be:b3:ab:97:c8:10:91:0f:e1:d0:f1:c2:d5:0b:c2:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
        Validity
            Not Before: Jan 30 16:26:31 2025 GMT
            Not After : Feb  2 18:11:31 2025 GMT
        Subject: CN=E167ED1F8C4489C6D2F8EE2C3B2E5B89983CA306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:ab:74:27:d3:91:40:8c:20:70:9b:30:d1:
                    23:4e:70:af:53:cc:a1:01:37:e8:9d:48:9e:a6:84:
                    c2:f2:5a:92:f5:cf:a8:2f:3a:70:51:b2:1d:01:25:
                    da:d9:21:90:63:c1:0f:91:cb:5e:ee:1c:2d:3f:5e:
                    9b:1f:9e:ce:ec:6b:65:13:6a:99:a6:f5:3d:52:d4:
                    9b:38:47:b4:ac:55:63:ba:1f:36:97:41:ab:cc:e7:
                    a2:bd:0d:a0:83:03:fc:88:95:ea:dc:ec:1e:34:95:
                    c3:2f:e6:d4:a5:c4:32:08:a8:82:98:d4:fe:e5:fa:
                    c9:cb:f8:3d:c4:8b:50:10:24:ec:54:8a:82:38:0f:
                    af:60:d4:01:54:b6:1f:cf:c0:d6:b2:09:22:aa:6d:
                    d3:59:c8:fc:8a:c3:b8:f5:87:aa:4f:ba:a4:a9:93:
                    c5:4a:ca:21:80:b5:4b:97:c3:b0:2f:ca:99:ce:18:
                    f0:6b:18:5a:6b:f5:52:5a:44:50:7d:b4:21:45:df:
                    f1:42:03:5a:ca:4c:65:8d:32:9d:30:e3:e0:c4:4d:
                    a5:8b:68:08:ce:36:72:73:cc:66:68:dd:ab:6d:4c:
                    60:68:97:79:15:0f:4a:53:8e:9c:10:eb:af:19:b1:
                    98:fd:65:bd:b6:ed:67:42:8a:ed:46:67:cb:83:c2:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:ED:1F:8C:44:89:C6:D2:F8:EE:2C:3B:2E:5B:89:98:3C:A3:06
            X509v3 Authority Key Identifier:
                keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:a9:ee:24:a2:39:ad:c3:7d:bc:b1:6a:b2:b6:dd:21:ed:
         91:25:2f:ce:a0:f6:99:2f:75:b2:bc:e6:8a:f9:9c:51:7f:d8:
         38:07:8d:21:b6:a3:34:84:32:ff:bb:b2:66:52:ce:cd:d3:81:
         04:78:54:d2:0e:78:94:bd:73:6f:b0:1f:cd:ef:f7:f9:7e:fc:
         80:66:bf:62:9e:51:bd:f4:a9:fc:18:9e:2d:30:fe:a9:56:96:
         63:8d:95:34:7f:3b:60:a2:69:58:93:39:31:8b:37:68:df:c6:
         f1:de:1c:56:6c:0f:04:02:7e:2e:18:1e:5f:ab:27:28:fa:f7:
         25:ec:88:af:c7:30:a1:e5:5a:76:35:b3:82:53:33:3c:49:9d:
         fb:2d:49:d7:97:67:c3:10:a9:e6:29:c0:d6:ad:c6:fe:9a:50:
         bf:14:c9:57:c0:89:ab:51:84:c3:60:74:90:2a:5e:21:02:31:
         b1:50:6a:35:ff:93:f5:6c:35:72:a2:dc:7a:4f:5e:b0:c8:a4:
         e0:69:d4:97:7e:7e:ae:e6:eb:92:be:b7:62:47:72:ef:94:ed:
         f4:25:50:78:74:d2:0d:2a:07:5b:b1:33:72:f6:fb:58:a3:be:
         27:9e:48:b1:ee:2f:3d:90:3a:01:d3:e3:1a:da:89:a7:1e:b2:
         06:2c:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----