Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
File:                     EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json)
Hash identifier:          +nvxvkkzMZfTdtFcZH/wJOIMYeVEefQUN3vnuguu7k8=
Subject key identifier:   D0:B6:0B:50:62:E1:69:6F:F1:BC:E3:9F:26:21:B7:86:05:C5:35:5F
Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68
Certificate issuer:       /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
Certificate serial:       3B0B9821786F24244C95C7512B2E9499C263174B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
Manifest number:          0170
Signing time:             Wed 29 Jan 2025 16:50:43 +0000
Manifest this update:     Wed 29 Jan 2025 16:45:43 +0000
Manifest next update:     Sun 02 Feb 2025 02:34:43 +0000
Files and hashes:         1: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: mtQXKOxRlts0ZAsIz4hn4ut5VaY++jflg+c7hJMJSkA=)
                          2: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=)
                          3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=)
                          4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:98:21:78:6f:24:24:4c:95:c7:51:2b:2e:94:99:c2:63:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
        Validity
            Not Before: Jan 29 16:45:43 2025 GMT
            Not After : Feb  2 02:34:43 2025 GMT
        Subject: CN=D0B60B5062E1696FF1BCE39F2621B78605C5355F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:e5:b7:2d:b7:3d:63:cd:3d:76:ac:75:54:
                    eb:b8:19:5b:b0:c2:f0:1c:7a:6e:72:ad:5e:48:af:
                    27:f2:76:87:99:d0:50:4d:36:96:30:0e:b6:ed:1f:
                    a9:bc:4d:3d:57:46:5f:4c:13:4a:1f:ce:01:b1:5c:
                    22:97:62:95:0d:39:b0:e5:ac:7a:58:7b:b3:4f:ef:
                    ad:aa:46:14:68:0b:3f:e9:82:38:bf:8e:fc:3b:4c:
                    c1:23:24:97:50:84:29:eb:2a:19:79:ec:c1:5b:f3:
                    2d:1d:a4:9e:7c:ad:af:d4:28:59:a5:03:07:62:5b:
                    61:32:ae:d8:42:70:91:ee:93:61:62:28:ab:f1:e5:
                    bd:d0:fe:68:b6:40:5b:dc:c5:cc:7d:bc:19:74:db:
                    5d:5e:01:b5:be:9c:f8:e8:fe:e4:1a:2a:e7:c1:be:
                    a0:01:6f:2c:72:a9:e7:19:aa:6c:91:40:cb:c5:20:
                    55:69:c2:8d:4d:b2:95:1d:d1:c4:c0:34:c1:52:27:
                    41:57:61:81:bf:be:a9:c5:47:20:57:3e:a7:be:58:
                    03:4b:d1:e8:75:d4:73:a4:1e:08:ca:eb:15:79:62:
                    f9:15:da:2a:b7:30:b0:09:33:e1:aa:92:f2:0b:a7:
                    c3:99:6a:48:48:19:60:a9:8c:88:1c:9d:f7:a4:5b:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:0B:50:62:E1:69:6F:F1:BC:E3:9F:26:21:B7:86:05:C5:35:5F
            X509v3 Authority Key Identifier:
                keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:ea:65:27:73:8a:5e:b1:21:01:8b:39:f4:fa:46:be:3e:
         e8:ab:fe:dd:c1:94:80:19:09:72:2b:02:38:f8:0f:44:e5:64:
         69:8f:e2:4d:ab:8d:37:4c:aa:46:39:89:49:0a:1b:65:88:43:
         cb:79:69:36:d0:48:cc:45:24:38:40:f1:5e:52:20:92:61:2b:
         04:7d:36:c9:c0:83:3c:33:9d:de:0e:de:6e:28:7e:04:2e:a6:
         73:eb:ec:32:13:a3:f9:8e:55:a7:73:55:6c:a7:09:af:83:aa:
         a5:a3:a7:e4:a7:98:6c:d7:22:51:77:b4:45:87:0c:7f:5d:8e:
         27:a5:a0:93:75:d2:06:b5:a0:ec:16:af:95:20:6c:74:7e:9a:
         88:42:3d:68:2a:93:d4:2d:c7:48:e1:fc:80:18:cc:8d:ce:c3:
         5e:b4:43:cb:74:c0:40:4f:b3:0a:08:38:59:5b:ce:71:7c:26:
         ba:92:ae:82:24:fb:60:be:7b:6f:d0:b7:7b:27:d5:4d:09:8f:
         d8:47:df:1b:18:24:e2:43:c8:e1:4b:d9:11:cb:fc:1a:a3:b4:
         95:44:a8:2c:52:eb:3a:d2:a3:15:be:15:b8:e9:51:bf:0c:41:
         6c:e4:d1:ab:f9:da:85:d3:a8:d8:d2:3f:ef:ed:1f:31:a7:75:
         16:56:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----