Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft
File:                     B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json)
Hash identifier:          MCj0Vgr922WXw2+18MYulao+XBBDt7WzojZD4epaU7Q=
Subject key identifier:   50:2D:BD:17:63:12:F4:58:84:EA:BB:48:8C:1A:3E:47:CE:06:E0:7A
Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38
Certificate issuer:       /CN=B891A45840F824B9F116CBEAA3574A68343F5538
Certificate serial:       4F481CF18282DCF8E150C3DFB393BBA224A30523
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft
Manifest number:          16
Signing time:             Fri 31 Jan 2025 01:22:04 +0000
Manifest this update:     Fri 31 Jan 2025 01:17:04 +0000
Manifest next update:     Mon 03 Feb 2025 03:28:04 +0000
Files and hashes:         1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: cMJACG+wJYTKnGt0rpeqO/b7Kbn+Qvg12TrUivh9cCk=)
                          2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: 8meh4qssPriL64kBvXs5YtBumf6ArWnflJaVktjo3Fo=)
                          3: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=)
                          4: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: MVe1XBEklCh/WNuKBmG+tsRD7YLtRM9LTm0ShY3PW5Q=)
                          5: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: 5UewkM1pAbLnP65YZLTVxzSYU/L1g1J84e5HTrwnd3M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:48:1c:f1:82:82:dc:f8:e1:50:c3:df:b3:93:bb:a2:24:a3:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538
        Validity
            Not Before: Jan 31 01:17:04 2025 GMT
            Not After : Feb  3 03:28:04 2025 GMT
        Subject: CN=502DBD176312F45884EABB488C1A3E47CE06E07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:07:c8:c5:1a:6f:c3:9c:7f:78:83:06:1d:
                    ea:44:ba:6a:2e:54:29:4b:fa:57:2f:e5:10:50:21:
                    fa:d5:97:8e:e0:82:96:c5:8e:2b:02:cb:00:35:94:
                    f9:61:f1:9d:3a:ad:3a:82:92:2f:04:df:69:25:d1:
                    a6:69:cd:76:04:55:eb:24:56:d3:1c:48:f6:a2:c4:
                    d9:4b:2c:3a:01:83:e4:72:4b:0c:6c:01:7c:f5:52:
                    e1:68:7b:09:8e:7a:91:f2:be:f4:1a:60:d8:6e:e6:
                    df:31:fb:40:e7:dd:2e:28:51:90:88:96:47:a0:b7:
                    0d:1a:68:73:d0:b1:13:83:ed:69:9e:43:bb:8c:53:
                    a8:55:68:b6:ad:ca:34:aa:9f:fb:5b:7c:9d:c6:c5:
                    07:57:df:86:ae:8a:6e:f8:86:18:66:7a:b2:e8:fc:
                    3d:3a:e7:0d:ef:ef:e1:39:94:b7:70:95:cd:35:84:
                    ee:bc:0a:b7:d5:70:ef:f0:07:b6:f6:0f:5a:2b:fa:
                    f2:e5:71:b6:0f:aa:9d:d6:bb:57:dd:6f:bc:8a:74:
                    72:ff:80:8c:13:da:5f:2d:eb:da:37:76:c6:a7:82:
                    98:3c:49:97:b1:9d:5d:00:02:94:b6:bc:29:79:7b:
                    5b:5d:af:af:00:30:7d:3a:a8:b9:84:c3:d9:d9:07:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:BD:17:63:12:F4:58:84:EA:BB:48:8C:1A:3E:47:CE:06:E0:7A
            X509v3 Authority Key Identifier:
                keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:47:5b:bb:19:a3:1e:e4:1c:8e:2f:46:cb:fc:e0:47:d7:
         d6:f1:e6:7a:33:e5:f2:51:6a:a1:f5:b3:8a:88:9e:6f:4c:2d:
         69:fa:c5:8c:f1:d7:ec:8b:97:c1:8b:d5:3e:4d:9a:ce:71:fe:
         3a:e4:4f:a4:52:47:fa:a0:fe:f4:2b:db:e8:33:3a:e3:76:64:
         16:6f:43:51:02:b0:ac:b2:cb:2b:9e:46:41:0d:e8:38:23:19:
         a7:89:c7:da:4e:05:55:1c:5f:9d:c3:b9:12:e1:c4:51:00:9e:
         4e:2e:ac:93:96:bb:fe:ad:75:63:dc:96:d6:89:26:5e:f9:ff:
         89:f3:32:5b:dd:8c:ca:dd:56:cb:f0:7e:9d:58:7a:aa:ec:e5:
         21:ad:d5:6c:eb:86:20:6d:9a:7c:62:f6:48:1e:82:04:71:ec:
         b5:91:f0:d0:2f:92:28:5d:6c:cb:d5:a7:25:cc:fd:d9:f2:d6:
         25:2b:ef:06:59:5b:f3:bf:8a:fb:ba:67:03:73:63:16:72:76:
         66:ed:f8:b1:91:01:4d:1f:25:61:9a:b1:ca:16:12:fc:4a:70:
         a8:41:13:7e:5f:54:24:1f:40:18:b9:b1:47:bd:3d:0f:60:97:
         5b:7a:b7:3b:b8:ca:e6:a3:38:fc:1f:0d:18:fd:3a:7c:a5:00:
         d5:f7:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----