Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft
File:                     4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json)
Hash identifier:          dyeHfd94HK6W/s18vQWwc/Zk9LH9vsSi2bC1yfcNm9w=
Subject key identifier:   2A:19:30:5F:66:95:3D:4B:04:79:36:7A:8A:4C:09:E9:73:F5:9B:62
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Certificate issuer:       /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial:       1828D825537CF145DA5264C24E3703CA6BF6A699
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft
Manifest number:          04AF
Signing time:             Thu 30 Jan 2025 23:30:01 +0000
Manifest this update:     Thu 30 Jan 2025 23:25:01 +0000
Manifest next update:     Mon 03 Feb 2025 08:10:01 +0000
Files and hashes:         1: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: y8ADkM9INdo4B5YpCY3N+ofggmxgoMYRUDnTX9TJFJg=)
                          2: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: ZMeuRsHtVSwXmTeOlP2EBAn6yOUfUCueHpz1hHvcg+E=)
                          3: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: GHFVJFyaZzq42gzfUx33TEad0K7kCUzHXty0JbKe2WQ=)
                          4: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=)
                          5: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=)
                          6: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 8llNfwrUTFXUaOZxOG2FdVdGooONQqY0triO7boP8ZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:28:d8:25:53:7c:f1:45:da:52:64:c2:4e:37:03:ca:6b:f6:a6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
        Validity
            Not Before: Jan 30 23:25:01 2025 GMT
            Not After : Feb  3 08:10:01 2025 GMT
        Subject: CN=2A19305F66953D4B0479367A8A4C09E973F59B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:b2:6a:62:aa:b5:77:d0:e7:4b:82:82:2d:
                    93:55:fc:ed:b2:76:ea:73:00:21:4b:0b:dd:94:a1:
                    4d:21:b4:36:36:e0:24:5e:06:bf:cf:d5:0a:53:36:
                    56:e9:c5:56:9f:26:bb:2c:d2:ed:59:1a:76:6a:eb:
                    08:65:02:46:c7:93:c7:af:6f:73:d9:ee:23:7b:aa:
                    02:3d:1f:5f:0f:9b:a8:1e:cf:bc:ab:00:e4:e5:9f:
                    97:ae:14:dc:db:44:92:54:b5:98:25:04:bf:d5:0b:
                    c6:06:86:85:04:01:28:4e:c0:70:53:ed:d3:d3:33:
                    99:fa:12:32:62:47:79:2f:c9:f1:af:cc:90:d2:9a:
                    d7:9a:e4:e9:9d:c7:a8:62:e1:fd:6a:b4:3c:94:cf:
                    79:d8:fe:6b:fe:87:0d:b1:6c:14:a2:27:ba:ff:3c:
                    dc:89:39:14:54:d4:22:d0:c3:9e:dd:4a:a8:6a:96:
                    b6:17:7f:19:94:99:f4:4e:49:ed:26:e2:08:d7:75:
                    4f:4f:59:48:ec:3d:be:4e:43:a8:70:97:f4:a9:9f:
                    75:a3:4f:32:c7:28:f4:df:e5:8d:c7:69:33:41:11:
                    ca:20:d9:14:68:d9:78:26:5a:4a:8a:74:a0:28:31:
                    25:4d:e5:3d:e0:74:a4:61:d3:0b:2e:9d:33:0d:85:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:30:5F:66:95:3D:4B:04:79:36:7A:8A:4C:09:E9:73:F5:9B:62
            X509v3 Authority Key Identifier:
                keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:f2:05:db:4d:fe:46:f3:a1:91:de:97:06:e4:92:d6:7c:
         70:1d:0d:40:6f:1c:b0:7f:be:4e:d7:60:34:ad:e8:7a:ef:27:
         bc:7c:2c:8a:25:76:fd:37:47:53:c4:03:67:68:13:b7:37:48:
         20:a0:c9:a2:0f:4e:d0:a5:42:e1:d3:d2:9c:76:7f:5c:0c:b3:
         8e:2c:39:c4:17:11:52:ad:f1:02:8c:6c:0e:ae:28:9d:76:ec:
         90:02:d2:99:37:13:3e:35:9a:92:15:a4:0a:45:63:d4:38:db:
         9c:1a:2e:bb:90:1e:f0:69:5b:44:02:0e:2c:a8:06:a3:68:c9:
         11:bf:84:ee:71:82:9c:14:20:33:53:60:d9:49:3c:62:7f:ee:
         e3:c9:21:cb:81:81:db:f0:52:85:ba:ce:e6:25:33:5b:34:5d:
         a8:01:27:f2:f7:ab:24:90:c7:24:6b:30:1d:fc:0f:64:c4:3c:
         a4:76:06:09:ad:bc:62:00:34:5b:77:61:b7:e1:32:48:dd:9c:
         58:ee:8e:b1:3e:d6:8a:5a:66:85:27:7a:2f:eb:dd:c2:fc:3c:
         96:ab:64:03:fd:f8:79:50:4e:11:43:a2:f4:37:a3:3e:48:d6:
         3e:62:e4:b0:22:91:54:e3:73:03:47:85:c7:8a:26:51:81:b1:
         d7:12:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----