Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft
File:                     B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json)
Hash identifier:          z3Ii0tSTDce412lKgt72fGEsmu5i/D4xYsBw+4A2qlA=
Subject key identifier:   D9:EA:B7:DD:79:0D:C9:9C:E7:D7:B2:A1:0E:C6:92:49:C9:69:74:65
Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
Certificate issuer:       /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Certificate serial:       12DC7753424AD0AD3FEB3C3044AF9A01F5A4BCEC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft
Manifest number:          0197
Signing time:             Thu 30 Jan 2025 23:01:58 +0000
Manifest this update:     Thu 30 Jan 2025 22:56:58 +0000
Manifest next update:     Mon 03 Feb 2025 07:50:58 +0000
Files and hashes:         1: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: amBLIpvbPTJ2SwThnpuVaEuuSlnP3Kkt0neaU6RKO+A=)
                          2: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: SLcrpmMGhS+iLPHlXSc6GQF6hzriCb0znzXu+cnHQhI=)
                          3: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: kjCPg8CNqMlAMRebUqHb4gpHFMec5lXxDxlOd53bN+M=)
                          4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: fMitGvSIMZKR/xojJDzG2iWApTg4bDt/1kqJnOfFiTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:dc:77:53:42:4a:d0:ad:3f:eb:3c:30:44:af:9a:01:f5:a4:bc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
        Validity
            Not Before: Jan 30 22:56:58 2025 GMT
            Not After : Feb  3 07:50:58 2025 GMT
        Subject: CN=D9EAB7DD790DC99CE7D7B2A10EC69249C9697465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:b6:3e:35:8c:fc:1c:2f:94:48:6f:c4:e0:
                    23:49:1b:5d:c0:26:4c:e3:4e:19:49:36:e6:59:eb:
                    bf:9e:f8:68:58:da:6c:e2:bd:f2:de:55:11:cb:1e:
                    c1:2a:41:4a:0e:75:60:31:ad:1f:a5:60:2a:62:00:
                    59:85:0e:4a:3d:d4:b9:ad:ab:00:80:32:72:31:2a:
                    9d:93:6a:c5:b6:88:a7:43:0e:b8:ad:af:fd:0d:4e:
                    d8:20:ea:87:fb:40:0f:ec:9e:75:5f:f2:37:67:0d:
                    28:91:47:76:12:b0:fe:08:1f:f5:dd:ee:e6:99:57:
                    05:b9:ca:37:bf:f6:5f:81:c6:9e:64:14:c6:b7:2e:
                    a3:42:80:fe:da:1f:6c:1b:0f:19:bf:28:41:2b:b7:
                    b1:26:f0:f3:41:03:ad:59:f9:a6:9e:7e:1d:47:d8:
                    fc:32:8d:18:88:f4:62:c6:85:15:6b:1e:d1:fc:b1:
                    6b:4e:ab:5f:4a:ab:bf:64:9b:f3:93:c9:54:e2:2a:
                    61:11:fb:fc:d0:6e:8a:7d:5e:b3:97:bc:f5:c3:6c:
                    f7:b1:fa:04:8c:9f:38:86:f4:72:e6:e8:cf:2c:66:
                    73:89:bd:2c:e9:fb:31:12:36:7e:26:9c:9d:11:75:
                    7a:c5:15:0e:dd:b7:fd:f9:c0:4d:22:72:47:0d:e8:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EA:B7:DD:79:0D:C9:9C:E7:D7:B2:A1:0E:C6:92:49:C9:69:74:65
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:96:57:71:8d:f8:61:01:8d:7e:2f:a4:2f:83:fe:55:b7:
         92:d0:0e:08:6e:b0:43:3d:5d:ad:ca:0a:ef:18:20:e9:17:81:
         fc:ae:04:e0:24:a7:0b:95:f6:4f:8a:28:47:52:ab:09:a7:59:
         80:cc:1a:3b:cf:d7:0c:c5:32:6d:19:9f:35:d6:cc:53:ae:43:
         5c:c3:a4:6a:1b:7f:be:d1:1e:ee:dd:47:cf:01:31:49:f3:be:
         25:09:d5:4c:56:05:2a:16:54:b2:fd:d1:b6:22:fd:8e:76:8e:
         01:32:f4:e6:0a:9f:1d:f5:e4:9b:e1:ad:ea:b0:9e:bd:3e:61:
         2f:cf:f0:04:a4:c0:0e:83:df:3d:2e:91:39:3b:07:cc:70:94:
         22:05:33:bb:c5:79:b7:0f:80:41:64:18:be:ed:7f:a7:1a:fc:
         07:e8:ff:d2:36:c8:28:74:d7:b4:da:88:16:a1:aa:72:d4:75:
         7e:9e:2d:26:61:c1:18:9f:b0:ba:8e:4f:39:7b:ae:67:fe:54:
         62:5b:bd:4f:d0:0a:63:f6:e5:e0:7c:ff:57:ab:84:d8:f1:d6:
         7d:e4:0b:b9:24:a8:4f:f4:88:37:12:0d:10:ac:ac:60:6b:e8:
         f1:59:bf:ec:92:13:e9:3c:85:ea:9b:e7:20:00:a5:66:51:2c:
         ec:0e:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----