Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
File:                     CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json)
Hash identifier:          K/+Gb0CO1GYZ/vGed9aZzXIivT0pMBjov1SYm9o+F9A=
Subject key identifier:   04:32:97:46:DB:5A:34:B2:DF:6F:3B:72:FC:15:8B:48:D1:36:5A:DA
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       4A2D5775C62B8C8552355575646040BFBD3F0BB2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
Manifest number:          02E8
Signing time:             Fri 31 Jan 2025 02:12:11 +0000
Manifest this update:     Fri 31 Jan 2025 02:07:11 +0000
Manifest next update:     Mon 03 Feb 2025 13:13:11 +0000
Files and hashes:         1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 9/Ce6FASHKcjI+4ab2yPwEqZG+V3f9BJX/trAXinF08=)
                          2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=)
                          3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: lVVEQRaIbonJY374bXa4Eau4fPAIIr1m4g0jH3SuIpk=)
                          4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:57:75:c6:2b:8c:85:52:35:55:75:64:60:40:bf:bd:3f:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Jan 31 02:07:11 2025 GMT
            Not After : Feb  3 13:13:11 2025 GMT
        Subject: CN=04329746DB5A34B2DF6F3B72FC158B48D1365ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:1e:a0:bb:33:11:57:d6:81:14:1f:ca:df:
                    de:14:02:c8:97:eb:89:83:05:04:24:32:8a:58:1c:
                    95:e6:7c:fa:94:03:d0:22:ea:49:f1:46:cf:b2:82:
                    f0:f7:03:f5:89:07:60:5f:c8:7c:6a:d8:b4:f6:79:
                    9a:f5:7d:c9:e1:91:cc:b2:aa:35:db:cd:0d:fe:a5:
                    56:76:9b:78:85:5c:e8:b6:04:68:3d:dc:15:e8:a4:
                    7b:13:82:8b:56:52:f7:ab:3e:db:a9:6d:fc:49:cc:
                    f7:57:f0:39:f3:d2:32:0d:28:2b:21:4c:18:74:9e:
                    e3:0d:e6:81:25:24:7c:c9:e1:ad:09:f3:ae:61:c3:
                    94:0d:f8:b6:88:93:84:30:2d:ab:20:d2:07:df:e5:
                    50:2c:1d:2f:e1:19:8f:6e:95:7f:05:51:ed:1c:ab:
                    33:98:64:a4:3b:0f:e3:a6:ee:c4:91:97:f7:d3:b1:
                    c2:97:26:e6:14:c6:dc:c5:be:26:7a:b8:24:3c:6a:
                    87:6a:09:19:fa:fb:cb:3d:7e:e3:a8:ca:b9:51:c0:
                    a6:4c:e5:7d:a8:bf:13:53:ea:0b:55:64:9b:e0:52:
                    dc:ca:b1:f9:75:90:68:d3:bf:6f:bd:79:7a:f2:9d:
                    60:96:eb:d2:93:99:2f:d6:4a:a2:8e:74:8e:87:6f:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:32:97:46:DB:5A:34:B2:DF:6F:3B:72:FC:15:8B:48:D1:36:5A:DA
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5c:17:34:a9:84:b0:09:63:f5:7a:da:c1:18:84:ac:07:eb:
         eb:26:4d:69:61:ec:c7:e1:19:c5:fd:75:65:23:5f:27:07:dc:
         86:2c:66:fc:ce:a8:31:a2:4e:9d:55:11:97:8e:12:9e:8a:38:
         09:c2:e6:90:b3:23:3a:7e:b5:51:f5:34:15:da:52:61:b1:41:
         2e:f3:5d:df:22:7c:c3:f5:79:02:1b:f6:c6:1e:99:3d:cf:6b:
         bb:53:f1:9c:16:d3:2a:4b:bd:93:19:e1:42:bc:0c:31:73:e8:
         42:20:e2:1b:5f:08:ed:13:20:0e:f2:cd:0f:8c:39:06:fe:35:
         75:d2:f7:07:00:99:c1:e5:c0:65:dd:5e:9d:8f:61:86:f9:7b:
         1f:19:09:95:4d:90:9a:df:de:c4:f8:ab:0d:e1:61:a6:c8:e4:
         42:d0:3a:39:96:84:f1:9f:64:61:d9:05:1a:72:d0:94:ab:8d:
         08:c6:b4:ff:02:65:6e:92:aa:37:98:85:18:e4:32:7c:ef:29:
         d7:2f:04:e3:e5:ba:c9:f2:bd:44:75:6e:f4:03:77:f9:da:a1:
         2e:83:50:da:c3:77:35:91:48:3d:02:b6:ad:d4:11:a9:a3:71:
         50:59:23:b9:cf:e4:cf:cf:53:e1:dd:4b:99:2b:26:a3:f7:d9:
         52:8e:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----