Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
File:                     F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json)
Hash identifier:          8RgW16Tu/t2umfQFGC7qTtloD67j5JoIuGnEnXfmFdU=
Subject key identifier:   98:9B:5A:F2:DB:70:2E:78:05:70:A3:07:75:98:0A:79:30:44:4E:AA
Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
Certificate issuer:       /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Certificate serial:       544216FA57F9CAB6912A6B8A2157B0E5168751F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
Manifest number:          0146
Signing time:             Thu 30 Jan 2025 08:31:35 +0000
Manifest this update:     Thu 30 Jan 2025 08:26:35 +0000
Manifest next update:     Sun 02 Feb 2025 10:20:35 +0000
Files and hashes:         1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=)
                          2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=)
                          3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: GY1R+6XDdSgy31ALUQ06Td/X9BKQLZrHYuSKL5TuxyY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:42:16:fa:57:f9:ca:b6:91:2a:6b:8a:21:57:b0:e5:16:87:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
        Validity
            Not Before: Jan 30 08:26:35 2025 GMT
            Not After : Feb  2 10:20:35 2025 GMT
        Subject: CN=989B5AF2DB702E780570A30775980A7930444EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:ff:0e:d6:a4:ee:92:e1:f8:1e:0b:2f:51:
                    f8:6f:b3:22:00:f0:75:0b:48:52:ab:13:cc:48:53:
                    83:42:c6:e8:da:66:96:92:e0:d8:25:14:50:94:73:
                    dd:64:3f:55:f8:9a:e0:3e:e9:ce:54:42:bc:b2:c8:
                    d7:6f:b5:e6:bc:46:f0:8f:b9:45:c2:c3:cc:3e:46:
                    0c:35:89:f0:be:2a:73:6e:ee:b6:a5:17:6b:30:1e:
                    0d:96:b8:f6:bb:82:42:2c:6d:3d:fa:61:c0:fb:9a:
                    91:bc:c8:34:51:d9:a8:69:8e:ff:40:f3:1d:cc:a8:
                    17:24:6c:dd:09:7a:c4:f6:64:0b:88:7d:8e:d2:89:
                    c8:f9:4d:8c:72:c5:d5:33:d6:82:f6:cd:7b:36:75:
                    d1:da:9e:9a:8d:1f:f4:c5:12:b6:22:1d:55:9e:f9:
                    09:0e:06:f9:5a:ff:66:4b:46:fa:2b:b7:e9:b3:dc:
                    c7:81:57:e7:40:ef:58:83:27:1e:60:ac:03:89:fa:
                    dc:1c:10:c6:6f:e7:18:a2:e6:a4:5f:0a:6b:2c:cb:
                    c5:ca:b1:0d:a0:df:43:bf:7d:05:6a:b8:86:9c:e5:
                    99:7d:3a:65:d0:f7:1d:85:43:23:79:d6:59:dd:45:
                    78:30:23:ce:7a:eb:93:89:a3:60:27:1d:3a:d3:93:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:5A:F2:DB:70:2E:78:05:70:A3:07:75:98:0A:79:30:44:4E:AA
            X509v3 Authority Key Identifier:
                keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2c:c7:41:0a:da:58:14:69:64:66:08:ef:f1:7e:9b:5d:ee:
         c6:dc:c5:41:fb:6c:04:69:95:58:93:4d:75:ae:e5:8a:5b:72:
         86:16:01:5b:30:07:b9:b1:33:9e:3b:44:e3:81:55:da:24:3e:
         5c:5d:f5:b0:e2:89:9a:c6:db:f6:a4:63:f2:f8:21:b2:8c:38:
         da:73:40:60:56:60:11:92:2b:b0:33:b8:58:bb:35:23:0f:32:
         26:e8:a6:a9:b2:ae:18:1d:32:53:77:bb:c0:64:84:e0:4b:d3:
         25:d1:5f:5b:8b:25:82:b4:73:25:92:f0:e8:d3:55:73:d4:52:
         cd:6e:0c:b1:23:db:a3:6b:3c:44:ba:dd:75:de:4c:4d:8c:59:
         3f:4d:58:ce:8f:80:89:a0:8e:cb:aa:cb:07:5c:f2:f3:e4:0a:
         8e:4a:a7:32:b5:ae:d5:27:08:79:a2:45:0b:ea:53:fc:65:84:
         9a:ee:08:93:4e:66:6d:59:67:89:7d:53:51:40:01:d4:5d:c3:
         a5:08:e5:3c:76:0a:3e:c6:12:f4:98:1e:31:55:43:06:44:17:
         d7:77:32:9c:67:4d:44:9e:ec:16:a5:bd:84:0a:c4:50:63:e9:
         5f:02:f4:a7:de:ce:31:3a:6d:fa:55:ef:b8:23:69:9d:2a:9c:
         29:8d:db:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVEIW+lf5yraRKmuKIVew5RaHUfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB
NkMyQTg4ODAeFw0yNTAxMzAwODI2MzVaFw0yNTAyMDIxMDIwMzVaMDMxMTAvBgNV
BAMTKDk4OUI1QUYyREI3MDJFNzgwNTcwQTMwNzc1OTgwQTc5MzA0NDRFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYP8O1qTukuH4HgsvUfhvsyIA
8HULSFKrE8xIU4NCxujaZpaS4NglFFCUc91kP1X4muA+6c5UQryyyNdvtea8RvCP
uUXCw8w+Rgw1ifC+KnNu7ralF2swHg2WuPa7gkIsbT36YcD7mpG8yDRR2ahpjv9A
8x3MqBckbN0JesT2ZAuIfY7Sicj5TYxyxdUz1oL2zXs2ddHanpqNH/TFErYiHVWe
+QkOBvla/2ZLRvort+mz3MeBV+dA71iDJx5grAOJ+twcEMZv5xii5qRfCmssy8XK
sQ2g30O/fQVquIac5Zl9OmXQ9x2FQyN51lndRXgwI85665OJo2AnHTrTkzZtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmJta8ttwLngFcKMHdZgKeTBETqowHwYDVR0j
BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF
MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy
QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh
NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx
QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKcsx0EK2lgUaWRmCO/xfptd7sbcxUH7bARp
lViTTXWu5YpbcoYWAVswB7mxM547ROOBVdokPlxd9bDiiZrG2/akY/L4IbKMONpz
QGBWYBGSK7AzuFi7NSMPMibopqmyrhgdMlN3u8BkhOBL0yXRX1uLJYK0cyWS8OjT
VXPUUs1uDLEj26NrPES63XXeTE2MWT9NWM6PgImgjsuqywdc8vPkCo5KpzK1rtUn
CHmiRQvqU/xlhJruCJNOZm1ZZ4l9U1FAAdRdw6UI5Tx2Cj7GEvSYHjFVQwZEF9d3
MpxnTUSe7BalvYQKxFBj6V8C9KfezjE6bfpV77gjaZ0qnCmN29k=
-----END CERTIFICATE-----