Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
File:                     FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json)
Hash identifier:          RYp5wNdb+TJrj+9Ku8AvP828mxuclAycOecTtCpBMBU=
Subject key identifier:   CC:61:EB:D5:86:8D:13:86:97:4C:9C:8F:32:73:C0:E5:8C:80:31:BA
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Certificate issuer:       /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial:       2DFD701311528C4EC6752B728A0677A9DD61D0D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
Manifest number:          0168
Signing time:             Thu 30 Jan 2025 17:50:41 +0000
Manifest this update:     Thu 30 Jan 2025 17:45:41 +0000
Manifest next update:     Sun 02 Feb 2025 21:17:41 +0000
Files and hashes:         1: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: RjVxvxxbyDiQSv718+JovDu9zNSEKhSMEBDdXzJXwvE=)
                          2: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: 1ehZa8kiIaw8D304gf+OVchXMX7d34z3cr5k207/OrY=)
                          3: 3130332e35352e32392e302f32342d3234203d3e20313439333134.roa (hash: sRa1nQRwMq2SdKXmWPoNTC7jHzNAd1RDfN7lVB2hLEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fd:70:13:11:52:8c:4e:c6:75:2b:72:8a:06:77:a9:dd:61:d0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
        Validity
            Not Before: Jan 30 17:45:41 2025 GMT
            Not After : Feb  2 21:17:41 2025 GMT
        Subject: CN=CC61EBD5868D1386974C9C8F3273C0E58C8031BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:a8:be:15:8f:0e:59:5b:9e:e7:05:76:c8:
                    25:ce:e8:b5:6e:ae:4f:86:3b:5b:35:ed:9a:85:0e:
                    70:e9:d1:ed:9e:d7:87:50:74:c1:25:1e:58:80:2c:
                    4f:26:30:95:da:e3:8d:1b:a8:0b:07:fa:ef:01:e7:
                    8f:16:f4:19:c6:b0:9f:ac:b9:13:b1:1e:69:a6:58:
                    74:64:75:70:b7:d6:db:f0:bc:a0:6b:e8:83:6b:76:
                    06:52:c0:f1:8f:57:fd:71:0e:c6:9d:7f:de:82:76:
                    eb:74:10:7f:71:c5:3e:85:1b:11:d4:d9:57:15:75:
                    91:81:eb:b4:1a:5f:5b:59:0f:27:e6:e6:f4:e2:1e:
                    be:8b:74:ad:ab:aa:1b:27:18:63:a3:8a:8a:19:a7:
                    e8:d4:67:bb:a2:70:23:df:be:d6:2d:1f:f7:da:cb:
                    e2:aa:fe:58:6d:ab:c5:48:54:ff:95:f3:09:67:a5:
                    13:83:03:7d:51:0f:f5:e2:58:fc:9e:f5:a1:16:1e:
                    51:fd:d7:3b:7a:98:3c:82:a6:5e:a7:ca:46:aa:08:
                    0f:22:f7:72:c5:46:41:ae:33:c5:d9:3c:a8:f9:ad:
                    92:c2:74:4f:82:43:60:73:32:09:9f:54:0a:a0:86:
                    c2:01:ba:ca:ca:d4:42:2f:43:e0:49:db:cf:c4:d7:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:EB:D5:86:8D:13:86:97:4C:9C:8F:32:73:C0:E5:8C:80:31:BA
            X509v3 Authority Key Identifier:
                keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:20:51:24:ba:13:9a:95:de:37:f0:63:6c:3d:44:bc:af:fd:
         2d:38:6c:43:da:55:97:e8:24:a3:fb:44:a2:85:10:0f:6a:fc:
         f0:e0:f2:ab:f5:b8:65:ef:10:57:12:39:3b:e3:a4:66:94:89:
         fb:65:ce:23:b5:fa:66:71:65:d4:53:3f:87:ea:f8:7a:4d:e6:
         01:30:8e:1a:85:77:5e:67:b5:53:c6:da:db:cd:a4:58:43:cc:
         64:86:da:a3:7b:ed:fe:fe:3b:5a:fd:e2:15:42:d4:ec:93:4f:
         e1:fb:7b:4a:0a:db:b2:83:d0:63:cf:fc:e4:53:de:e6:31:36:
         19:e6:a9:d6:7c:7d:38:84:91:f4:65:7e:55:67:5e:57:55:87:
         84:f2:a6:b1:09:69:87:0b:f9:c3:11:76:a2:46:7f:cc:a1:10:
         33:3c:c0:4b:fd:9b:dd:b3:2e:bf:2e:bb:f0:4b:90:71:88:09:
         49:6e:af:92:a5:ef:be:d9:e9:35:43:02:46:d9:3f:23:54:5b:
         91:b8:80:fb:6a:c2:b8:0a:1c:ca:2c:fd:3f:7e:ac:18:7d:9b:
         c6:48:dc:c0:f0:35:6d:27:04:9a:80:fc:a9:07:be:7c:e4:81:
         8f:09:3f:de:c8:33:d4:6e:25:09:c9:06:bf:c9:38:5e:08:72:
         5c:cb:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----