Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
File:                     18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json)
Hash identifier:          zAD5UoEG5R3xOkN9uPLnL6CrsWnvlTqWxDN5htY1xeM=
Subject key identifier:   55:12:F5:9C:9E:0B:FA:30:1D:83:FF:27:E4:56:51:CC:3B:ED:15:63
Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
Certificate issuer:       /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Certificate serial:       6A43492908A3F30A4F65F0231308C0833E086A45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
Manifest number:          04AA
Signing time:             Thu 30 Jan 2025 11:01:53 +0000
Manifest this update:     Thu 30 Jan 2025 10:56:53 +0000
Manifest next update:     Sun 02 Feb 2025 20:17:53 +0000
Files and hashes:         1: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: XC4DJTC5TXfJiRmf88bzdSttttfS17ZVr5eZVV+CORQ=)
                          2: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: UstTiYAWRY3Cy+bDYUqZ/arOiMdslwlVWqwEWaGFovA=)
                          3: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: NCFMTB+6CHYXkcepHvjhz7TzV8Mxuk6TBlwx3WylIcU=)
                          4: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: fIAZJQRdc8KtDMugJm1HvAiImbOSq132x0qDhsfcvRU=)
                          5: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: IGeKM8to2Ny8NvLy3FGC0xihSE2djxZWmQBRzQO4Xso=)
                          6: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: 0fpof/Xi9yHslCngFyOxsm3BGmq7hOc9WgdHP1lT/Wk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:43:49:29:08:a3:f3:0a:4f:65:f0:23:13:08:c0:83:3e:08:6a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
        Validity
            Not Before: Jan 30 10:56:53 2025 GMT
            Not After : Feb  2 20:17:53 2025 GMT
        Subject: CN=5512F59C9E0BFA301D83FF27E45651CC3BED1563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:1e:07:a2:03:78:d1:82:25:5d:49:6a:13:
                    b7:ee:e1:4a:af:0c:f0:01:93:2a:d9:c3:23:61:93:
                    77:e1:21:2d:05:11:ac:0c:5e:9a:6b:b0:0d:20:87:
                    81:f9:ed:c3:0d:8f:58:68:ad:9f:3f:6d:72:5d:b2:
                    1d:d0:22:57:81:d3:fe:44:7f:c6:2a:26:d6:72:99:
                    99:68:e0:90:b5:44:7d:f9:60:23:49:86:2f:b5:e4:
                    7a:cb:42:d7:b7:a4:e9:1f:47:9e:46:2f:1f:d7:65:
                    8f:0b:cc:95:d5:cd:28:fc:c2:ba:c5:c3:78:fc:2f:
                    62:e1:e5:76:0d:78:b5:2c:cb:19:13:3c:65:66:6c:
                    c4:f9:a3:67:05:e4:ea:38:1f:cc:b5:85:b0:e0:9c:
                    9b:1d:3c:92:a1:a8:a9:e2:e5:a6:ad:73:0b:7d:51:
                    34:41:0d:3f:b3:07:8f:7b:6f:8a:df:25:86:20:5b:
                    89:d1:0e:43:73:aa:3f:f0:c1:bd:c3:08:23:e3:3e:
                    00:19:eb:46:c8:19:83:65:56:e7:14:20:9c:5d:7d:
                    47:3c:81:64:5b:ff:f7:58:28:aa:17:1a:c6:1c:aa:
                    80:49:ae:72:de:5e:eb:ea:a6:5a:49:23:b5:ff:56:
                    1f:cd:c2:0c:a2:1e:ec:25:42:70:5c:9c:d5:8b:d8:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:F5:9C:9E:0B:FA:30:1D:83:FF:27:E4:56:51:CC:3B:ED:15:63
            X509v3 Authority Key Identifier:
                keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:42:ce:10:46:13:2c:64:25:ff:9c:2c:71:76:e5:16:4b:
         64:d6:80:4e:c9:42:ce:12:52:81:d2:6b:37:7e:ea:f3:e2:bb:
         1c:b4:46:02:7d:96:c0:e6:ba:48:d8:c4:78:f4:f3:6d:9d:a1:
         58:1b:b8:cf:e4:4e:46:d8:49:5d:9b:2d:a3:99:4b:99:5a:4c:
         7a:b2:e3:c6:2f:f5:5a:07:62:d8:8d:1d:99:e4:73:6c:bc:b2:
         54:b6:64:50:56:e6:74:c2:55:de:f5:dc:c0:e6:c0:f5:94:f7:
         31:4a:04:3f:01:af:7f:43:4b:90:4b:7c:ab:85:95:fe:fb:b4:
         e4:a9:7f:67:cd:81:50:8b:71:16:82:e0:b6:d7:08:4c:65:a9:
         f2:bd:e5:97:92:14:9f:ea:5c:a1:30:5d:f0:50:9d:03:c1:ef:
         af:67:16:72:58:e2:de:7e:81:a6:42:25:bb:ae:d9:3e:a1:1d:
         20:e1:fc:29:dc:1c:b3:18:1e:a0:07:75:ef:53:17:66:cf:cf:
         3e:dc:c1:70:39:b5:f3:0e:d6:e1:c1:c3:5f:86:bd:27:a7:ad:
         02:79:75:da:81:3b:23:38:cb:51:15:09:9b:1c:dc:1f:cf:ad:
         e0:f5:4e:39:0b:f4:7d:ad:74:66:1d:94:cb:e3:bc:b8:1d:15:
         57:2c:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----