Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
File:                     9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json)
Hash identifier:          o26up3eKYyc92bVETfnm2Xc/Xb47uV0KV06RHR28aps=
Subject key identifier:   F4:F8:BD:35:EF:7C:88:19:BC:32:67:C9:12:0A:B5:D6:69:C1:D9:04
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Certificate issuer:       /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial:       457F90E85EC576AEC1A1965D4CC1D8ECA0C94526
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
Manifest number:          033E
Signing time:             Thu 30 Jan 2025 22:21:54 +0000
Manifest this update:     Thu 30 Jan 2025 22:16:54 +0000
Manifest next update:     Sun 02 Feb 2025 23:48:54 +0000
Files and hashes:         1: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: VgauIJib/5YKcXTJMY5O4GwqNEjl+20ATgstQ4kaGk4=)
                          2: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: Ssv2eZbvx9q2HF9yBmPHiXg5F7RXJ5IV1vipTWA9H6o=)
                          3: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: G9ox5OGX9ph3CpSJjyMMSdSf0sUF3vkw0VigltAxMHY=)
                          4: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=)
                          5: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: LDlAmIkfBI44itLAHSw+oCtaKYJxkyaV9N6k7QGrffc=)
                          6: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:90:e8:5e:c5:76:ae:c1:a1:96:5d:4c:c1:d8:ec:a0:c9:45:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
        Validity
            Not Before: Jan 30 22:16:54 2025 GMT
            Not After : Feb  2 23:48:54 2025 GMT
        Subject: CN=F4F8BD35EF7C8819BC3267C9120AB5D669C1D904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:9f:31:bb:84:64:57:7d:0d:1a:78:d4:55:
                    4a:e5:b2:19:9a:b2:d4:21:be:39:c4:4f:fe:a2:0e:
                    77:b5:4b:c8:29:01:e7:ed:18:6b:30:c8:66:7a:5a:
                    bd:96:5d:cc:32:6f:fa:f3:66:79:6b:51:90:ff:e5:
                    65:9f:51:7e:71:c8:72:96:da:eb:eb:9a:b3:96:d5:
                    25:c7:1e:7f:f8:16:cc:98:a1:e4:7c:e2:9c:f8:e9:
                    b4:29:ee:18:c3:8d:ef:c5:16:2e:86:78:b3:51:48:
                    c2:c8:10:d1:33:6d:db:0c:1b:e2:e6:22:67:02:89:
                    70:a6:c7:67:7c:34:49:77:ef:c3:2f:61:6b:e3:45:
                    85:46:3d:9c:67:fa:3a:6f:95:a1:3b:1a:d5:28:c0:
                    22:bd:a1:55:b1:3f:70:e0:fe:d0:a3:64:e6:f7:0d:
                    0d:e5:97:7e:e4:7c:e8:93:4b:9f:e2:7f:61:6e:ec:
                    48:66:53:d2:c2:b8:a2:95:2c:29:30:82:79:c6:97:
                    31:e6:86:cc:f9:6d:a9:a0:7d:8d:fe:fd:e9:37:bb:
                    83:0a:ff:21:b7:c4:00:69:b7:06:18:21:42:32:8f:
                    85:31:13:b4:4b:52:59:1a:63:24:5b:4d:e3:58:6c:
                    51:17:7e:3a:e3:9b:7a:d9:44:2b:76:85:28:89:ca:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:BD:35:EF:7C:88:19:BC:32:67:C9:12:0A:B5:D6:69:C1:D9:04
            X509v3 Authority Key Identifier:
                keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:19:3a:11:2a:2a:e9:ea:f4:2a:4e:e7:7e:68:53:53:a5:
         23:37:73:db:e1:a2:f2:94:ac:56:95:e4:fc:f0:9a:f4:c0:d0:
         1e:b9:7c:02:d9:4e:1c:a1:45:92:27:bc:bc:d4:79:af:b6:4f:
         c0:38:99:06:1e:fb:ce:5e:d6:2d:d7:b0:77:1d:8b:77:24:85:
         3c:de:ee:50:9b:db:94:84:00:98:eb:35:5d:65:96:e2:82:68:
         ec:07:f0:5a:30:35:0e:d7:5c:67:a0:19:9a:5c:ee:d9:57:fc:
         37:d6:14:8f:b3:1b:3a:71:a0:50:15:87:38:40:b5:4c:18:f5:
         0b:65:fe:b7:41:83:f7:b1:48:ad:2f:f7:c2:91:84:d6:4b:dc:
         90:db:17:40:61:d6:01:93:5a:0f:e0:96:81:bb:5e:85:2e:34:
         d0:ff:67:69:64:ac:3f:70:ba:61:48:e6:40:39:8b:d4:05:b7:
         d8:02:63:62:ec:79:35:da:f2:d7:60:be:fa:af:0e:55:ee:7f:
         de:6f:ba:9f:29:5c:5c:43:4e:a5:67:d8:b2:bd:19:4e:13:2f:
         34:53:f7:be:b2:19:d7:9b:a8:31:c6:6f:8c:a4:a8:02:ee:35:
         d3:cd:05:2b:90:78:f5:d8:d4:75:68:7d:58:ee:29:cf:86:60:
         41:bd:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----