Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft
File:                     99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json)
Hash identifier:          zgIvhtt04TDuwxnf+boz/uHi6PNwMKLNVxHrc2e9qms=
Subject key identifier:   DF:7D:C0:7E:6A:E8:82:43:BD:CD:70:27:FA:50:9C:BF:55:8F:82:8C
Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC
Certificate issuer:       /CN=99F644C407D1C8C133A923CC84619FC228E767AC
Certificate serial:       3AE739FCD33D1BAC52000712A9A2F23E02AB6776
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft
Manifest number:          021F
Signing time:             Thu 30 Jan 2025 11:21:23 +0000
Manifest this update:     Thu 30 Jan 2025 11:16:23 +0000
Manifest next update:     Sun 02 Feb 2025 17:34:23 +0000
Files and hashes:         1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: A7MLMixWF2CjxzKsC2Md5bWob9r0+ouHpUvVIqmVqLw=)
                          2: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: NQqnfA9Ut84+Rk9bWmhfObDjlEe5RMFY0EQoSDZHbks=)
                          3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: ll5+Eoysy8XpiM0nraFXO1sEZ22G9cLIqmWZw25BjG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e7:39:fc:d3:3d:1b:ac:52:00:07:12:a9:a2:f2:3e:02:ab:67:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC
        Validity
            Not Before: Jan 30 11:16:23 2025 GMT
            Not After : Feb  2 17:34:23 2025 GMT
        Subject: CN=DF7DC07E6AE88243BDCD7027FA509CBF558F828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:f0:d4:18:2d:84:48:a5:50:93:e5:29:2a:
                    38:0f:b2:af:4b:f2:86:ea:ec:fb:44:74:4b:f4:b6:
                    87:7a:29:e0:09:c8:7d:84:00:6f:0d:a6:9e:cb:e8:
                    5c:95:5b:cc:e2:4f:59:3a:40:a1:01:70:af:52:e1:
                    53:50:bc:f1:25:4c:9e:0d:44:4c:0b:c1:41:e8:80:
                    cf:85:f4:ae:ba:cd:88:dd:44:f0:5a:5e:5f:20:b2:
                    7b:f0:10:1f:9b:22:81:bf:46:d6:a6:5f:8f:ec:e4:
                    6a:e6:43:90:15:d9:6f:e2:dc:82:f7:e1:32:4c:2c:
                    c7:7c:33:62:c3:a6:23:89:cd:39:0f:ba:63:a2:dd:
                    7a:72:fd:e8:45:f3:b2:45:62:10:bf:2d:45:17:8f:
                    5d:21:f9:59:a9:cb:91:21:9b:44:66:9c:47:3e:93:
                    df:f6:f7:e6:30:52:c2:4e:1e:af:f2:52:f0:67:65:
                    6e:ca:98:9a:93:5e:8f:6b:14:28:0d:48:fb:c1:89:
                    91:0b:d8:52:ef:34:50:2a:61:52:21:6d:ed:65:4e:
                    c9:f5:69:35:9b:55:89:86:2d:3b:75:f2:82:f1:da:
                    ed:fe:6a:e4:75:bf:b6:63:ef:ed:cf:67:fa:c8:49:
                    e0:d1:6e:93:e0:0c:71:b4:b1:39:99:1b:be:1d:cc:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:C0:7E:6A:E8:82:43:BD:CD:70:27:FA:50:9C:BF:55:8F:82:8C
            X509v3 Authority Key Identifier:
                keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:70:05:6d:bf:d1:52:50:61:74:dc:24:29:fc:d8:4f:d6:98:
         6f:18:7c:e4:31:2f:00:fb:a6:3f:6f:63:f9:1f:a3:76:e3:23:
         88:e1:e4:27:36:e8:fd:5e:10:0b:fb:23:60:88:42:56:ca:c1:
         13:ee:e4:65:e0:56:7f:bb:bd:e7:b2:39:89:7b:87:74:f7:a6:
         d2:bb:5d:9c:2c:dc:1e:62:f0:2d:c0:d6:d7:2b:40:30:d0:27:
         02:c1:93:46:ee:66:30:45:a2:63:f3:a6:ad:ff:5a:6a:bb:b4:
         90:71:ea:2d:c3:61:6a:b7:41:b1:76:ea:32:95:40:a6:2f:88:
         b9:d0:dc:e6:87:98:2a:76:1a:fa:27:64:07:a1:a7:67:9a:d4:
         dd:cb:3f:17:19:c5:5f:94:bc:5c:8d:d2:cf:c8:89:47:11:ed:
         91:f6:a2:e9:f6:65:1d:9f:19:3b:a6:6d:d2:ac:ec:e7:53:4f:
         3e:35:f9:82:a1:68:0c:94:50:c3:01:fa:40:69:6d:b9:71:bc:
         a6:02:18:51:38:c4:34:72:f7:1d:51:4a:a0:de:b5:fc:bf:b9:
         08:fb:46:ca:5a:a3:cc:aa:29:d2:2c:9f:6a:89:3a:45:b6:a8:
         00:fc:ac:ba:e6:8d:8e:33:d8:a1:83:cc:42:0b:52:8b:fc:d2:
         d9:99:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----