Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
File:                     687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json)
Hash identifier:          BBQ4zFR/7APQwllCe4scjMBsN1eoTXkZEIg+nhzvPZU=
Subject key identifier:   A5:77:CD:C2:E7:A7:9B:D8:87:E7:5D:F0:A9:2C:96:4A:C2:D2:3C:EB
Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C
Certificate issuer:       /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
Certificate serial:       1684533B15D76CBF0492B956F28AFD2A95624C47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
Manifest number:          0324
Signing time:             Thu 30 Jan 2025 17:01:28 +0000
Manifest this update:     Thu 30 Jan 2025 16:56:28 +0000
Manifest next update:     Mon 03 Feb 2025 03:50:28 +0000
Files and hashes:         1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: D+j9gD3vLi6bXx9z6jaLjm5KttsIwpY6f9DPmjEIfl4=)
                          2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: DS0hCq0koHOBoxtvccNH1QeGGPeh5jNq/29MUNxhn+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:84:53:3b:15:d7:6c:bf:04:92:b9:56:f2:8a:fd:2a:95:62:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
        Validity
            Not Before: Jan 30 16:56:28 2025 GMT
            Not After : Feb  3 03:50:28 2025 GMT
        Subject: CN=A577CDC2E7A79BD887E75DF0A92C964AC2D23CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:6e:37:d0:29:a8:3e:23:3d:31:f0:0e:4d:
                    77:0d:06:0d:e1:64:cd:9a:d3:9f:b3:63:9d:3d:ce:
                    5e:82:81:3c:34:7a:a1:2b:69:a2:3a:e1:fd:97:b7:
                    3e:31:a4:33:8f:fd:d5:1b:3f:86:6c:9c:9f:b4:ec:
                    26:dd:aa:db:07:f7:e2:e8:fd:b2:05:c1:5a:51:e7:
                    29:9b:25:94:5f:ec:17:a0:27:8b:23:fc:4d:c2:da:
                    1f:c8:31:43:08:db:46:d7:d8:68:7b:0b:3d:c2:49:
                    7f:41:71:17:59:1c:6f:26:29:25:6b:e1:bb:25:2c:
                    55:55:45:db:c4:07:60:24:ab:53:57:42:24:ea:a1:
                    d3:8e:ef:01:4d:85:3d:97:cf:c2:25:3c:36:ff:35:
                    4f:de:17:83:f3:71:84:12:eb:9f:fd:06:59:4d:47:
                    e4:3d:2a:b8:cb:fa:49:79:4e:6c:fd:af:3f:50:04:
                    e1:52:80:70:a7:c8:c5:7a:8f:b2:8e:9f:1f:0f:99:
                    9a:db:f2:25:33:69:fc:d7:ab:d3:a5:0f:f4:90:5c:
                    85:5d:33:b8:33:ae:89:cb:f6:c6:19:31:95:b9:9d:
                    97:85:d4:85:25:aa:1c:e2:71:71:f3:42:91:7c:4e:
                    fa:17:3f:3f:26:65:bc:01:0a:07:59:60:4c:5c:07:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:CD:C2:E7:A7:9B:D8:87:E7:5D:F0:A9:2C:96:4A:C2:D2:3C:EB
            X509v3 Authority Key Identifier:
                keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:03:26:94:61:1d:1f:a0:9b:b6:62:86:62:2c:bd:0f:7f:fc:
         3c:46:2f:e3:7f:e6:1b:d2:a7:d2:c1:f0:b3:7b:bf:b6:15:86:
         9f:36:de:aa:e1:9a:d6:f7:37:f8:40:2b:ee:5b:c3:52:6f:c9:
         2c:f3:d5:0b:09:9d:52:ee:c7:a5:43:1f:a1:5d:44:37:f9:c4:
         d6:7f:3f:19:f6:27:c6:d3:d1:1e:08:9c:d4:36:6d:d2:ca:92:
         63:eb:d4:9f:07:53:37:81:b8:f9:68:71:9b:3c:7f:70:2f:49:
         08:16:87:99:bc:81:82:83:98:bc:af:a2:13:b1:0e:a2:db:7e:
         84:d4:91:0a:09:01:e4:84:c5:26:3b:9b:ff:7c:41:e5:27:53:
         8b:13:6d:c5:6b:7a:4f:f2:6b:98:f7:0a:26:6d:0c:c3:a0:9b:
         70:c1:c5:d5:10:23:ee:d2:d9:11:f2:8a:d2:96:32:49:db:e5:
         87:77:32:2f:fa:7d:3c:51:da:e6:6e:c1:b1:a7:44:ae:73:f3:
         07:d7:4d:ef:ce:d1:0f:f4:f7:7b:2e:63:ca:0e:db:ba:1f:5f:
         e6:2f:0b:14:a1:56:72:61:7a:e5:7e:df:5e:18:b3:3a:ce:85:
         e3:34:83:6b:26:a5:49:5f:fe:c5:24:66:f4:02:2d:47:84:2d:
         1d:85:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----