Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
File:                     F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json)
Hash identifier:          UI/IAZnPxhNjaFfXCgx/kP77q7Hm/SaISzSk/1OhyA8=
Subject key identifier:   AF:8A:B4:6E:A1:F4:24:E4:96:27:A0:D6:84:7F:38:AC:1B:00:C1:3E
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       65C1A6A1B6FD7722A2F09FE0DBEB426E6D290291
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
Manifest number:          04A4
Signing time:             Wed 29 Jan 2025 15:01:57 +0000
Manifest this update:     Wed 29 Jan 2025 14:56:57 +0000
Manifest next update:     Sun 02 Feb 2025 02:24:57 +0000
Files and hashes:         1: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: qGPJ+XMPsIDxszHxtVxQgv1keGrpyfKPesLoUAaiQWU=)
                          2: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: 3JDp1i7KmRhBmPpe01SA4m6I5uhKv3MHTvB/tFy/FVk=)
                          3: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: SeGVAY1slIk2TaNYzAuvLycIqKZDFIcM4VA3PpPbZYA=)
                          4: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: wylMxeMtNXKVNCYbu4EPmPbcyL6mYo5BIShYUtgk0qc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c1:a6:a1:b6:fd:77:22:a2:f0:9f:e0:db:eb:42:6e:6d:29:02:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jan 29 14:56:57 2025 GMT
            Not After : Feb  2 02:24:57 2025 GMT
        Subject: CN=AF8AB46EA1F424E49627A0D6847F38AC1B00C13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:5c:b4:de:87:c4:32:58:5f:b2:65:ae:1f:
                    dc:55:3f:68:e0:a5:62:d1:ee:8d:7b:d8:ed:2d:f8:
                    1a:70:26:63:b3:13:09:ed:e6:81:7f:02:2e:86:02:
                    8f:56:d1:ca:81:aa:73:27:77:3d:6b:64:94:3d:98:
                    dd:d6:d2:58:4a:bf:c9:e1:d0:8f:a8:1a:c2:3f:d9:
                    dc:93:92:c0:03:68:c9:19:4c:04:30:9d:fd:a4:15:
                    97:6e:62:0d:55:56:62:a0:f6:df:7d:ae:06:5c:a0:
                    6a:d1:73:a2:98:b9:2c:1b:be:6a:71:cc:2c:c1:ce:
                    25:f0:c5:83:c6:4b:52:ac:5c:85:70:f8:b4:49:93:
                    84:88:fb:a1:05:a6:52:46:59:a1:55:30:ea:30:68:
                    c2:39:e4:d2:f9:b6:02:ed:af:80:18:76:00:b0:87:
                    d1:e8:aa:78:d7:17:f2:8a:1a:b0:1b:38:b0:ca:e2:
                    70:49:10:26:9e:b0:a3:eb:24:7b:7b:83:ed:d8:33:
                    bc:82:01:dc:d5:55:e5:6c:f0:8b:bb:7d:03:b7:c8:
                    62:3b:ae:43:33:11:9a:bd:2b:7e:40:cd:36:2d:85:
                    41:01:9d:6e:07:28:5f:90:38:ef:29:28:33:f9:c2:
                    ac:d5:e5:0a:d0:62:33:4f:43:48:3b:4b:10:7e:b1:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8A:B4:6E:A1:F4:24:E4:96:27:A0:D6:84:7F:38:AC:1B:00:C1:3E
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:a1:f1:f4:3c:8c:03:14:d1:22:03:55:9f:8e:7d:d5:65:
         49:fc:b9:98:b6:8b:60:ac:68:a2:42:55:83:fc:68:8d:fa:19:
         64:1f:cd:b2:31:37:d3:96:b0:56:08:d7:64:6e:3f:8c:e2:c7:
         1a:33:5e:bd:93:ba:58:8b:40:e1:65:a9:2a:0f:08:7d:dc:ed:
         ee:36:b4:46:a0:fb:6f:f1:3d:80:63:19:f9:fb:f4:28:ac:dd:
         22:35:b9:89:d4:03:d1:44:df:92:74:01:d8:24:f2:89:f8:51:
         60:e1:1a:cb:9e:45:37:84:e0:47:1a:2f:41:c5:e8:73:b0:68:
         6c:23:32:e6:cf:df:65:a3:c0:12:41:3c:7a:00:1d:02:f3:35:
         62:2b:75:27:5d:e1:82:a1:ed:59:1d:61:02:56:c6:4e:fb:71:
         c4:3e:fb:b8:9c:84:46:31:2b:ae:86:55:d7:7e:a4:a1:37:7b:
         d3:26:cb:12:c6:ac:47:a6:05:4b:55:eb:c1:4d:25:18:06:3d:
         af:10:2c:06:d3:19:fe:e9:70:f3:f6:fa:d8:d9:f2:4d:a8:2d:
         dc:57:5c:48:e7:e3:c2:b8:72:7c:cd:51:96:4b:ad:df:99:c9:
         62:38:ba:92:7d:f6:79:79:dd:b4:26:c0:53:f3:f4:11:8f:cc:
         4d:27:b8:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZcGmobb9dyKi8J/g2+tCbm0pApEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC
RkE5NzczMzAeFw0yNTAxMjkxNDU2NTdaFw0yNTAyMDIwMjI0NTdaMDMxMTAvBgNV
BAMTKEFGOEFCNDZFQTFGNDI0RTQ5NjI3QTBENjg0N0YzOEFDMUIwMEMxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJG1y03ofEMlhfsmWuH9xVP2jg
pWLR7o172O0t+BpwJmOzEwnt5oF/Ai6GAo9W0cqBqnMndz1rZJQ9mN3W0lhKv8nh
0I+oGsI/2dyTksADaMkZTAQwnf2kFZduYg1VVmKg9t99rgZcoGrRc6KYuSwbvmpx
zCzBziXwxYPGS1KsXIVw+LRJk4SI+6EFplJGWaFVMOowaMI55NL5tgLtr4AYdgCw
h9HoqnjXF/KKGrAbOLDK4nBJECaesKPrJHt7g+3YM7yCAdzVVeVs8Iu7fQO3yGI7
rkMzEZq9K35AzTYthUEBnW4HKF+QOO8pKDP5wqzV5QrQYjNPQ0g7SxB+sbg9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr4q0bqH0JOSWJ6DWhH84rBsAwT4wHwYDVR0j
BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF
QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5
NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw
MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4
QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH9RofH0PIwDFNEiA1Wfjn3VZUn8uZi2i2Cs
aKJCVYP8aI36GWQfzbIxN9OWsFYI12RuP4zixxozXr2TuliLQOFlqSoPCH3c7e42
tEag+2/xPYBjGfn79Cis3SI1uYnUA9FE35J0Adgk8on4UWDhGsueRTeE4EcaL0HF
6HOwaGwjMubP32WjwBJBPHoAHQLzNWIrdSdd4YKh7VkdYQJWxk77ccQ++7ichEYx
K66GVdd+pKE3e9MmyxLGrEemBUtV68FNJRgGPa8QLAbTGf7pcPP2+tjZ8k2oLdxX
XEjn48K4cnzNUZZLrd+ZyWI4upJ99nl53bQmwFPz9BGPzE0nuDY=
-----END CERTIFICATE-----