Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
File:                     B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json)
Hash identifier:          4BZAqSRG4Omx49XVUkMNLF7SWqUY6l/od8/OWX/rCjE=
Subject key identifier:   BD:2B:82:4F:99:EE:B1:05:8C:A6:28:A5:EB:7C:F8:B0:1A:CC:21:B8
Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
Certificate issuer:       /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Certificate serial:       2BA1FEAE187A07A458F34A2EB486D14FC85110FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
Manifest number:          04A3
Signing time:             Wed 29 Jan 2025 19:41:08 +0000
Manifest this update:     Wed 29 Jan 2025 19:36:08 +0000
Manifest next update:     Sun 02 Feb 2025 04:54:08 +0000
Files and hashes:         1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: wfWC+ycDbBgiMnfXUHrjUsiNKV5QHT/mbo8k1l2H63w=)
                          2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk=)
                          3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: LUrbWnhsnE7NpPeckWhjPA7R1fwCnzq5fpnH5qqwIBs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:fe:ae:18:7a:07:a4:58:f3:4a:2e:b4:86:d1:4f:c8:51:10:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
        Validity
            Not Before: Jan 29 19:36:08 2025 GMT
            Not After : Feb  2 04:54:08 2025 GMT
        Subject: CN=BD2B824F99EEB1058CA628A5EB7CF8B01ACC21B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:b8:9c:25:9c:92:8e:d0:cd:30:ba:e7:64:
                    e7:c5:28:67:2a:22:2e:4d:33:06:c3:73:40:f2:0a:
                    9e:a0:de:4d:c4:18:d7:9f:23:57:30:06:4d:fc:49:
                    7b:77:8a:f6:f1:15:df:01:72:df:e9:40:c0:aa:8b:
                    44:3a:92:1e:4a:88:19:80:3b:01:3d:dc:21:84:85:
                    67:8a:20:d0:10:ed:a6:21:dc:3d:b2:ee:e7:e8:8b:
                    c4:ac:c1:8d:34:4b:69:77:0c:84:49:3b:2c:22:d8:
                    26:ef:d9:7a:5e:8a:c6:2a:dd:11:91:97:91:1c:86:
                    c5:65:bf:10:a6:db:fe:79:43:93:0c:75:be:3e:cd:
                    d0:d9:5f:cc:9a:1c:3d:2a:40:89:67:33:b1:30:c3:
                    42:c2:c5:f4:05:ed:da:e0:3b:70:5e:78:08:56:7e:
                    9d:6b:4a:a0:62:58:53:2b:a0:b2:0c:ce:00:b9:2f:
                    ae:69:dc:f5:15:8a:02:57:a0:64:01:0c:54:ac:37:
                    20:85:69:c0:28:c8:75:ea:62:62:49:ad:79:8b:e5:
                    96:60:ce:85:39:60:4b:97:8a:f0:fe:7f:fe:b7:5b:
                    75:65:e5:41:ad:c8:11:97:39:67:db:b8:05:17:0e:
                    27:41:f6:ac:e5:86:e0:12:3b:6a:bd:c1:68:e8:31:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:82:4F:99:EE:B1:05:8C:A6:28:A5:EB:7C:F8:B0:1A:CC:21:B8
            X509v3 Authority Key Identifier:
                keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:32:b1:8b:58:0a:cb:cb:da:0a:e5:c9:ab:52:13:0c:86:
         fb:a2:d7:9b:77:ab:91:72:72:8d:e9:8b:db:c5:3d:ef:c1:8d:
         e0:f6:97:f0:2a:26:91:7f:dc:9d:b0:cb:a4:9f:ab:e9:29:ab:
         ed:73:74:ab:52:25:43:4e:7e:7f:6a:24:6a:56:c1:d5:bb:60:
         fd:8c:e6:78:b8:fa:a3:89:ee:58:95:52:87:cf:8a:b5:8b:0c:
         43:d8:a0:91:b7:21:48:a4:70:3f:9f:a3:e1:ff:6b:00:5a:b1:
         a2:35:98:01:f0:43:bd:dc:45:2f:99:c4:bd:21:d3:e3:51:95:
         8d:e2:3f:44:9d:b4:e2:dc:b4:7c:73:05:86:e5:61:6e:97:97:
         d9:ca:0f:ab:bb:40:6e:c2:ef:e8:39:2e:a0:70:94:da:04:b7:
         25:38:b7:62:d7:94:6e:b7:68:bf:ac:45:da:5b:3b:0c:ce:74:
         0a:18:a0:3d:94:c7:6b:b8:bc:05:3b:3c:99:50:fd:45:7f:3f:
         71:fa:f6:6b:b0:a3:00:60:29:47:fd:8f:2b:d7:f5:6c:b4:29:
         fc:3f:c3:e1:54:88:8b:6f:25:2c:b6:0e:92:46:65:76:39:f1:
         69:10:b7:95:92:ef:3d:b9:d7:33:53:a8:83:76:83:cb:68:34:
         0f:31:1b:08
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK6H+rhh6B6RY80outIbRT8hREPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1
REU1Q0ZDQzAeFw0yNTAxMjkxOTM2MDhaFw0yNTAyMDIwNDU0MDhaMDMxMTAvBgNV
BAMTKEJEMkI4MjRGOTlFRUIxMDU4Q0E2MjhBNUVCN0NGOEIwMUFDQzIxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAbicJZySjtDNMLrnZOfFKGcq
Ii5NMwbDc0DyCp6g3k3EGNefI1cwBk38SXt3ivbxFd8Bct/pQMCqi0Q6kh5KiBmA
OwE93CGEhWeKINAQ7aYh3D2y7ufoi8SswY00S2l3DIRJOywi2Cbv2XpeisYq3RGR
l5EchsVlvxCm2/55Q5MMdb4+zdDZX8yaHD0qQIlnM7Eww0LCxfQF7drgO3BeeAhW
fp1rSqBiWFMroLIMzgC5L65p3PUVigJXoGQBDFSsNyCFacAoyHXqYmJJrXmL5ZZg
zoU5YEuXivD+f/63W3Vl5UGtyBGXOWfbuAUXDidB9qzlhuASO2q9wWjoMdZbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvSuCT5nusQWMpiil63z4sBrMIbgwHwYDVR0j
BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4
N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1
Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi
MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD
OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADGzMrGLWArLy9oK5cmrUhMMhvui15t3q5Fy
co3pi9vFPe/BjeD2l/AqJpF/3J2wy6Sfq+kpq+1zdKtSJUNOfn9qJGpWwdW7YP2M
5ni4+qOJ7liVUofPirWLDEPYoJG3IUikcD+fo+H/awBasaI1mAHwQ73cRS+ZxL0h
0+NRlY3iP0SdtOLctHxzBYblYW6Xl9nKD6u7QG7C7+g5LqBwlNoEtyU4t2LXlG63
aL+sRdpbOwzOdAoYoD2Ux2u4vAU7PJlQ/UV/P3H69muwowBgKUf9jyvX9Wy0Kfw/
w+FUiItvJSy2DpJGZXY58WkQt5WS7z251zNTqIN2g8toNA8xGwg=
-----END CERTIFICATE-----