Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
File:                     30C39359651C33B59AC32BC46831980108960568.mft (raw, json)
Hash identifier:          2XVU1xkkOduCA+iZoRy9oaMRhot2IEZXISbcWr8vuVg=
Subject key identifier:   53:CC:87:99:61:5F:DA:06:42:6E:B4:32:C6:74:89:5C:B3:A8:14:81
Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
Certificate issuer:       /CN=30C39359651C33B59AC32BC46831980108960568
Certificate serial:       62D102082361FCF3A655FF887D15F31D57527A66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
Manifest number:          04A1
Signing time:             Thu 30 Jan 2025 11:32:04 +0000
Manifest this update:     Thu 30 Jan 2025 11:27:03 +0000
Manifest next update:     Sun 02 Feb 2025 22:18:03 +0000
Files and hashes:         1: 30C39359651C33B59AC32BC46831980108960568.crl (hash: 0Bix+31y/QnEqmNrDwk6nP30hGbqYbywtkIkW5Bk5QA=)
                          2: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: 8fikq9dFAzMj3+QK9K8dBiiRspRKPsD5Hsrp6SO4EzE=)
                          3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: sSXWhrWvqzQ+vxHJjhskTpislSGynAyGOv8jxoTDXpU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:02:08:23:61:fc:f3:a6:55:ff:88:7d:15:f3:1d:57:52:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C39359651C33B59AC32BC46831980108960568
        Validity
            Not Before: Jan 30 11:27:03 2025 GMT
            Not After : Feb  2 22:18:03 2025 GMT
        Subject: CN=53CC8799615FDA06426EB432C674895CB3A81481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:12:98:bd:16:fa:d7:e8:3e:f5:f4:56:68:
                    1e:f1:46:e0:e3:59:1b:78:6f:18:7e:95:a2:0e:26:
                    f6:72:71:9d:9c:03:4e:8c:4e:6b:55:db:3e:c3:2a:
                    0a:16:7f:68:d0:15:8a:8c:5e:d7:7e:f7:fb:ef:0a:
                    df:35:61:d5:68:50:10:79:3c:ae:13:4f:22:b2:5d:
                    b6:ff:c3:7d:6d:a0:60:a4:3b:1c:12:de:28:68:b4:
                    23:71:5a:3c:82:83:16:4f:98:63:58:e3:93:52:18:
                    0c:4e:25:a0:0e:b4:a4:cf:21:fc:fe:f7:59:e8:55:
                    f9:e3:0c:96:13:6f:d2:e3:dd:ee:38:62:df:1e:f3:
                    9e:fd:ab:dc:87:53:cd:68:77:e2:ad:46:c2:77:ce:
                    26:52:a3:4a:c0:f5:83:a5:ab:9c:07:66:52:fa:c0:
                    87:b9:90:be:aa:7d:83:38:d3:b9:aa:f5:59:fe:e3:
                    82:01:17:99:76:cd:d2:65:16:10:4a:72:22:34:bc:
                    97:dc:f0:29:57:ff:56:96:0b:33:ac:02:66:ac:f0:
                    b5:d9:28:f2:e8:0a:b0:5e:82:f1:fa:38:03:f6:42:
                    0c:2a:b3:1f:52:42:d9:de:7a:eb:56:a4:6c:12:51:
                    80:4b:f4:ba:cc:4e:a7:61:b4:b4:97:6b:0b:b5:bb:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:87:99:61:5F:DA:06:42:6E:B4:32:C6:74:89:5C:B3:A8:14:81
            X509v3 Authority Key Identifier:
                keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:01:a9:75:a6:3c:b1:4c:80:b1:dd:b7:c0:d0:ac:89:dd:
         bf:a0:09:7f:19:5f:2a:f7:ba:34:70:5c:6e:b6:f2:56:3b:9f:
         c7:bf:e2:d1:ff:e6:d5:c4:c1:e7:c8:60:d0:24:a9:80:04:3b:
         73:46:6a:99:3f:83:32:aa:90:35:c9:09:22:69:75:54:08:51:
         d3:6e:48:0b:a6:f1:13:61:66:e4:7d:04:28:c9:05:cd:6b:c7:
         ea:0f:f7:52:db:0f:11:90:7f:55:96:d0:1b:db:03:ca:8f:c1:
         c9:68:27:18:61:5f:a1:d6:0e:13:51:c9:b0:33:b8:83:1a:a4:
         66:d7:f8:20:ef:2b:90:42:2a:4e:ce:36:c7:ec:83:ba:7f:6c:
         e9:6d:6c:ec:31:d4:6f:65:c0:e7:68:b6:ed:c7:9c:db:40:e6:
         ba:2f:d9:1d:e0:96:42:64:f8:cf:c9:ce:b0:1d:e8:4d:04:77:
         98:05:6f:5d:bd:bd:05:cf:c9:f2:18:79:1f:92:3e:90:39:39:
         20:ad:dc:60:13:56:37:bd:b7:a3:62:c7:44:2e:2d:a5:f9:9b:
         d3:b9:f3:bc:b9:2b:19:a5:7f:4b:15:f4:1d:9a:ac:ac:64:48:
         2f:18:a9:b9:9e:75:02:c9:be:6d:1b:67:60:d1:cd:3d:a3:ea:
         68:ad:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----