Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
File:                     C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json)
Hash identifier:          AMn0FD7dVQUOimP1tauRmaKEw2isCaXu3uaDQ26XMas=
Subject key identifier:   8B:86:54:73:23:50:EE:AC:74:F8:43:B2:AA:94:53:85:D5:8B:5F:91
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Certificate issuer:       /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial:       5B863B81BB5324CA0CDE770AB2F9D7E1C2081F75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
Manifest number:          04B0
Signing time:             Thu 30 Jan 2025 14:11:59 +0000
Manifest this update:     Thu 30 Jan 2025 14:06:59 +0000
Manifest next update:     Sun 02 Feb 2025 20:39:59 +0000
Files and hashes:         1: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=)
                          2: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=)
                          3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=)
                          4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=)
                          5: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: /rnkFQA0NNYFc4jUxJbkHThVg3n0MfvQpGMv6ImUd0o=)
                          6: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=)
                          7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: mGafxLeKPnG7Eg+GZ3Uvf1Rg2MZjFuXySA60etRq29k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:86:3b:81:bb:53:24:ca:0c:de:77:0a:b2:f9:d7:e1:c2:08:1f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
        Validity
            Not Before: Jan 30 14:06:59 2025 GMT
            Not After : Feb  2 20:39:59 2025 GMT
        Subject: CN=8B8654732350EEAC74F843B2AA945385D58B5F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:de:e6:90:81:52:a2:0d:8a:7c:e2:cc:c8:
                    b3:c8:c3:e8:5f:7a:6c:63:b0:60:e7:5f:bf:07:88:
                    00:6f:01:96:ef:ea:4a:d8:71:8f:bb:3b:93:90:1d:
                    a2:f3:26:44:52:fd:b5:a6:bb:6f:6b:f6:48:65:b3:
                    bf:04:7e:f7:b5:f0:b1:33:c8:29:32:71:c3:6b:4d:
                    36:1b:68:c2:7e:ed:81:78:ed:0a:b7:00:f3:5e:26:
                    51:07:eb:3b:aa:55:c2:2f:09:bc:c1:1e:48:7e:12:
                    93:05:01:b3:ea:58:58:38:f0:d4:dd:13:84:16:60:
                    55:a9:67:66:ff:a4:b1:bc:90:13:e2:05:41:76:fd:
                    fb:54:bc:20:42:aa:9a:d5:8d:b7:1c:0d:79:3b:97:
                    71:c2:be:04:6b:14:8a:83:6a:e1:4c:0e:b2:fb:e0:
                    e1:cc:f6:4a:a2:d7:e5:15:fe:e5:d9:d6:46:c6:29:
                    3e:30:82:b5:5d:e7:ff:5c:db:8b:f8:14:90:79:ce:
                    6d:b1:88:dc:38:7d:08:1f:df:b7:1b:63:cd:40:f6:
                    ad:66:94:98:e6:d8:b9:ea:82:1e:95:f8:ed:f4:32:
                    6f:55:06:cf:55:e0:48:7d:10:c7:0b:34:0f:51:98:
                    34:59:28:cf:a9:54:dc:06:a1:e2:4f:ad:b9:29:c3:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:54:73:23:50:EE:AC:74:F8:43:B2:AA:94:53:85:D5:8B:5F:91
            X509v3 Authority Key Identifier:
                keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:f3:9b:a7:b2:31:a6:7d:7a:d9:61:aa:e4:6c:66:8f:30:
         f7:05:c4:dc:6c:23:71:8c:f0:ab:d8:71:72:ce:21:d4:df:75:
         85:2c:6e:1c:7a:45:bb:46:8a:2f:01:a9:1a:eb:45:9a:8c:61:
         bc:54:75:c3:15:0e:73:43:71:5d:94:b7:30:96:11:83:b0:3c:
         32:42:2d:e2:ce:8f:47:35:1c:b6:68:dd:03:c0:9b:12:31:8e:
         50:94:bf:64:8e:13:fd:27:13:a0:7a:f2:eb:00:ce:e1:f3:9f:
         5d:f9:29:5e:95:2c:95:bc:3a:a9:f4:50:cb:55:c2:15:bd:e0:
         d1:98:f6:a5:5e:4d:c9:b2:47:57:38:41:a5:f0:d4:13:73:a1:
         43:4a:87:9f:bb:c7:08:6b:93:88:7e:fd:ec:38:87:bd:b5:6b:
         09:90:39:a1:bc:b8:ec:c1:b3:6a:79:c2:92:53:b6:3f:52:95:
         ca:9d:e9:8c:49:03:60:94:48:49:d8:eb:11:f3:32:88:5d:54:
         ee:77:87:a2:fa:a0:95:4d:d8:df:12:91:e7:e1:41:49:50:99:
         bb:29:2d:7e:3f:6d:a5:65:c8:ec:c2:98:ee:e5:5b:a9:db:4c:
         fc:38:8a:09:70:96:63:d2:f1:c5:e7:75:39:e9:13:c8:bf:70:
         06:a4:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----