Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
File:                     5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json)
Hash identifier:          9MAWqIERATLPZ41vhv7m3z1wZp3AInnvMGS4DXjda4c=
Subject key identifier:   2A:65:1B:47:1C:97:DA:96:77:5D:86:40:BB:8F:C7:D0:55:78:25:65
Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB
Certificate issuer:       /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
Certificate serial:       7CDEE2BEC675EDBC2EEE306738C4DBB26F6926B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
Manifest number:          74
Signing time:             Thu 30 Jan 2025 19:01:02 +0000
Manifest this update:     Thu 30 Jan 2025 18:56:02 +0000
Manifest next update:     Mon 03 Feb 2025 05:42:02 +0000
Files and hashes:         1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: ABqsMeXfL8j7jSTQPe5p6pryIp+gFqsnjqoUXOdJcq8=)
                          2: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: DE2KWI5Ytplkm/KqPpcUn5g6DIVgl3omTHoBbiJEolw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:de:e2:be:c6:75:ed:bc:2e:ee:30:67:38:c4:db:b2:6f:69:26:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
        Validity
            Not Before: Jan 30 18:56:02 2025 GMT
            Not After : Feb  3 05:42:02 2025 GMT
        Subject: CN=2A651B471C97DA96775D8640BB8FC7D055782565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:32:c2:1c:e5:5a:3b:56:7f:eb:82:c4:15:
                    1b:fb:22:de:11:58:36:96:df:83:5b:b5:22:ca:9b:
                    e0:cb:a3:ba:dd:a7:9e:6c:36:b5:31:d2:35:d0:09:
                    12:ff:8f:fb:9c:91:37:23:73:f0:5a:84:4c:0f:3d:
                    a1:76:f0:f7:9e:fb:a5:fe:a4:ef:e5:fc:9e:5a:85:
                    ba:7e:bd:80:cc:a6:c5:d4:7c:19:d5:31:6a:21:51:
                    f7:9e:de:df:13:33:4f:79:6c:dc:ba:6e:95:0b:75:
                    3e:2a:77:2b:71:78:03:f5:42:75:8b:65:e4:ca:43:
                    5c:9f:3a:3e:c3:0b:10:74:88:c2:28:eb:7c:3d:a9:
                    83:58:fd:7c:67:07:97:1c:d8:13:d5:73:66:70:64:
                    5d:c9:71:af:94:a4:1c:41:a9:e6:2a:7c:d5:3e:d7:
                    9d:b2:a4:b5:2a:c2:18:92:09:d5:43:91:d0:d1:db:
                    6b:b5:91:8f:a5:12:b5:36:62:e9:f0:27:9b:d8:ac:
                    df:f5:07:35:45:14:7a:2c:98:2b:c9:88:99:22:03:
                    e6:79:ab:ed:d4:cc:f2:52:e8:78:d9:96:e2:30:42:
                    81:97:89:a0:a6:bf:fe:00:c1:87:b3:c0:cd:db:00:
                    0d:46:02:7a:f7:e5:bf:9c:71:4e:01:48:4e:aa:b0:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:1B:47:1C:97:DA:96:77:5D:86:40:BB:8F:C7:D0:55:78:25:65
            X509v3 Authority Key Identifier:
                keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:1e:c5:59:17:27:bd:94:ac:ce:90:74:db:b2:59:c5:81:
         6f:82:cc:a8:62:1d:43:e3:e6:f9:36:52:90:1f:23:9c:3a:04:
         82:4b:e5:8e:49:9c:43:63:94:87:fd:23:51:69:0e:2d:86:01:
         5b:be:be:87:36:92:a3:09:a2:b2:07:dc:34:14:35:d5:df:a5:
         80:13:2a:52:6b:08:70:06:af:45:43:a9:83:a0:e6:1f:16:a3:
         95:5b:62:58:ab:7c:b8:ba:65:f7:88:9d:34:f4:71:d9:9a:15:
         ab:29:20:22:da:e1:1c:a6:ac:3f:bb:58:7f:0b:27:d3:f6:19:
         49:87:9e:6a:e4:07:e0:71:73:08:ce:1f:33:2f:e1:47:7a:54:
         de:72:8e:6a:bd:e8:21:3f:4a:be:c0:6e:06:76:9a:17:97:0c:
         b0:c0:be:22:ed:03:dd:78:13:10:e1:f9:65:18:8e:2d:23:e7:
         c9:13:6c:97:b4:45:10:17:fb:2c:42:4f:6e:46:a1:72:5a:bb:
         1c:7d:b2:53:11:3c:b7:3d:65:c1:4a:e4:11:9e:32:53:58:da:
         c9:cc:3f:ba:58:88:45:c5:9b:95:6b:4c:67:94:1f:0b:a1:5e:
         22:6d:e6:51:e6:0c:35:14:70:90:84:97:38:88:2d:ff:2f:8f:
         06:46:3f:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfN7ivsZ17bwu7jBnOMTbsm9pJrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE
NEE5ODRFQjAeFw0yNTAxMzAxODU2MDJaFw0yNTAyMDMwNTQyMDJaMDMxMTAvBgNV
BAMTKDJBNjUxQjQ3MUM5N0RBOTY3NzVEODY0MEJCOEZDN0QwNTU3ODI1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThjLCHOVaO1Z/64LEFRv7It4R
WDaW34NbtSLKm+DLo7rdp55sNrUx0jXQCRL/j/uckTcjc/BahEwPPaF28Pee+6X+
pO/l/J5ahbp+vYDMpsXUfBnVMWohUfee3t8TM095bNy6bpULdT4qdytxeAP1QnWL
ZeTKQ1yfOj7DCxB0iMIo63w9qYNY/XxnB5cc2BPVc2ZwZF3Jca+UpBxBqeYqfNU+
152ypLUqwhiSCdVDkdDR22u1kY+lErU2YunwJ5vYrN/1BzVFFHosmCvJiJkiA+Z5
q+3UzPJS6HjZluIwQoGXiaCmv/4AwYezwM3bAA1GAnr35b+ccU4BSE6qsDqVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKmUbRxyX2pZ3XYZAu4/H0FV4JWUwHwYDVR0j
BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG
QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5
ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3
YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw
M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJzGHsVZFye9lKzOkHTbslnFgW+CzKhiHUPj
5vk2UpAfI5w6BIJL5Y5JnENjlIf9I1FpDi2GAVu+voc2kqMJorIH3DQUNdXfpYAT
KlJrCHAGr0VDqYOg5h8Wo5VbYlirfLi6ZfeInTT0cdmaFaspICLa4RymrD+7WH8L
J9P2GUmHnmrkB+BxcwjOHzMv4Ud6VN5yjmq96CE/Sr7AbgZ2mheXDLDAviLtA914
ExDh+WUYji0j58kTbJe0RRAX+yxCT25GoXJauxx9slMRPLc9ZcFK5BGeMlNY2snM
P7pYiEXFm5VrTGeUHwuhXiJt5lHmDDUUcJCElziILf8vjwZGP/k=
-----END CERTIFICATE-----