Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
File:                     A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json)
Hash identifier:          ElC6ayaetrjDyL5Nud/6b8QPa5j963liP7gZzgD2ph0=
Subject key identifier:   DB:15:AE:A9:62:14:26:4F:77:0C:6F:DA:2C:42:B2:BB:AE:19:73:D9
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Certificate issuer:       /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial:       259B56A3B6EC02BFBFE5A7116C006E913C5E1707
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
Manifest number:          022C
Signing time:             Thu 30 Jan 2025 07:51:05 +0000
Manifest this update:     Thu 30 Jan 2025 07:46:05 +0000
Manifest next update:     Sun 02 Feb 2025 09:36:05 +0000
Files and hashes:         1: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=)
                          2: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: V6goRYSJG1u+bAL374mGMuCXn+RL7QQNfuBjfig1y2s=)
                          3: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=)
                          4: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=)
                          5: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=)
                          6: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=)
                          7: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9b:56:a3:b6:ec:02:bf:bf:e5:a7:11:6c:00:6e:91:3c:5e:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
        Validity
            Not Before: Jan 30 07:46:05 2025 GMT
            Not After : Feb  2 09:36:05 2025 GMT
        Subject: CN=DB15AEA96214264F770C6FDA2C42B2BBAE1973D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:51:8b:7a:72:d3:78:8b:70:65:d0:47:c1:
                    59:57:45:a3:bc:19:d7:61:28:27:89:65:0a:02:e9:
                    98:fa:5a:82:73:ea:f0:3f:6c:76:de:05:f3:b8:97:
                    c5:dd:80:8d:85:ae:bf:04:ca:30:12:85:6e:8c:13:
                    04:18:cf:61:69:d5:ae:d9:b8:fc:3d:0d:d3:57:a3:
                    19:29:01:7d:03:a3:3a:a7:55:f6:e3:18:1f:19:73:
                    62:64:d0:d1:40:ab:27:57:72:59:1e:19:f0:d3:39:
                    28:8e:2a:ae:57:96:fd:4e:e3:bb:66:73:aa:3a:fc:
                    97:39:08:26:a0:40:b7:06:3e:92:a3:17:8f:6a:4e:
                    08:59:cb:2e:fe:2b:6a:bd:0c:87:b2:8f:5c:09:40:
                    eb:44:e6:8f:3f:4d:7b:47:c4:fb:87:d9:a3:be:08:
                    32:4a:3b:12:6c:67:7f:c4:cc:ef:e8:ee:6b:80:bc:
                    8f:9c:13:48:19:15:43:de:af:df:df:cb:9b:e6:7c:
                    5e:15:fc:32:a8:20:99:99:a1:9b:10:0a:0f:3c:57:
                    11:db:8b:e9:d5:d7:56:9c:3a:96:6c:32:11:17:f4:
                    cf:5b:53:5d:03:e7:b3:62:68:e2:2b:a5:19:2a:3b:
                    b1:ba:cf:ac:b3:27:ff:1d:72:87:31:02:f2:bf:2f:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:AE:A9:62:14:26:4F:77:0C:6F:DA:2C:42:B2:BB:AE:19:73:D9
            X509v3 Authority Key Identifier:
                keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:d2:3d:b2:43:76:b2:3f:33:2b:98:3d:3e:9f:f6:4c:94:
         73:20:35:db:9a:b3:b8:7c:10:dc:35:92:c6:4a:bf:93:85:ed:
         c4:b4:12:c4:34:cf:ce:df:07:13:bc:44:6e:a1:6a:89:96:84:
         2b:bb:d7:96:87:a3:cf:e8:6f:52:2f:7d:6b:71:61:d4:88:d7:
         71:45:c4:0b:c7:5b:dd:e6:fb:23:75:c3:04:16:64:1c:93:d7:
         fd:e9:1a:3f:84:73:0f:23:85:e5:2a:0b:87:1d:b6:41:d0:0d:
         84:4c:51:4b:e1:94:9c:73:5e:2c:1d:c7:ba:4a:f4:10:d4:04:
         65:bb:ab:8a:7a:bb:79:80:2d:c8:7b:b8:ee:34:1e:7b:d5:15:
         d3:7d:68:aa:de:2c:f2:52:57:7d:60:24:8e:11:55:55:24:09:
         2d:86:66:c4:37:cc:47:c3:c9:b2:05:86:a8:ac:b6:c2:e8:58:
         84:cc:6e:b2:96:9a:f4:2b:81:a6:42:23:62:3a:9f:44:1b:d3:
         08:5a:e4:70:08:0e:70:89:6c:8e:a8:73:66:b0:ac:0d:1d:44:
         a9:ac:de:5a:15:43:51:6e:af:13:99:ee:cb:58:0b:df:ea:79:
         c4:cc:b6:29:07:4c:85:92:9f:4a:61:fb:b9:10:9f:6b:76:c4:
         9a:27:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----