Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
File:                     439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json)
Hash identifier:          b7B3bpHUgz7MwCP/ymh2hKXF0O/r3Rgp36FRiojcUZA=
Subject key identifier:   95:A2:E3:F9:BC:64:FB:32:E0:C9:80:94:C6:CE:22:A4:99:B1:21:D8
Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
Certificate issuer:       /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Certificate serial:       2653ED5D6D14927809326B88152E9730CBAC2789
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
Manifest number:          03EF
Signing time:             Thu 30 Jan 2025 14:50:40 +0000
Manifest this update:     Thu 30 Jan 2025 14:45:40 +0000
Manifest next update:     Sun 02 Feb 2025 17:12:40 +0000
Files and hashes:         1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=)
                          2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=)
                          3: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: B3JE2JBcKYXpcqBK9VJNI7bS8Frxzc3aB4Rngrq7smo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:53:ed:5d:6d:14:92:78:09:32:6b:88:15:2e:97:30:cb:ac:27:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
        Validity
            Not Before: Jan 30 14:45:40 2025 GMT
            Not After : Feb  2 17:12:40 2025 GMT
        Subject: CN=95A2E3F9BC64FB32E0C98094C6CE22A499B121D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:de:4c:69:37:a9:a2:8e:ca:ae:50:b8:8e:
                    13:d1:d1:43:2e:eb:7a:ea:ef:d2:f2:cc:7c:e1:74:
                    70:e3:64:59:84:27:d8:46:0e:95:15:0e:6f:56:7a:
                    06:1c:a4:4b:ea:9f:b4:71:d1:0f:55:ec:db:7d:a0:
                    1c:c2:b5:6a:20:2b:48:6d:f1:d6:82:a3:1c:3d:e2:
                    54:00:ad:4e:cb:9c:3e:da:eb:7d:01:41:57:ea:be:
                    bb:4d:fd:52:93:9e:3a:10:e2:be:27:f5:b1:2b:79:
                    56:30:95:bd:35:aa:2f:f2:6d:a8:0e:c9:fc:0c:2d:
                    6d:05:24:ac:59:b9:3b:5e:a4:1c:5c:31:79:5e:28:
                    0a:b1:ad:0a:38:a1:b2:ff:cf:1e:77:59:6f:98:60:
                    3e:f7:8b:d1:a2:8f:b4:ee:b3:d8:2b:b2:fc:cf:a2:
                    20:bf:18:f0:3c:79:a0:bd:1c:fe:6b:00:6d:a2:a2:
                    22:08:5c:d6:6c:da:0d:67:18:19:ca:f3:75:d0:d3:
                    9b:8a:36:74:32:63:78:83:88:d6:37:06:fe:bd:44:
                    14:57:79:ef:f8:86:60:01:bf:c1:29:40:ac:3d:1b:
                    eb:9c:de:54:a1:16:db:aa:f7:9c:fe:6f:eb:30:c5:
                    ad:49:0c:f0:51:2d:ae:54:d0:bd:f9:0c:94:71:47:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:E3:F9:BC:64:FB:32:E0:C9:80:94:C6:CE:22:A4:99:B1:21:D8
            X509v3 Authority Key Identifier:
                keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:03:1e:b9:4d:1c:62:1b:93:d2:87:14:7e:39:13:79:39:93:
         a1:e9:32:68:1d:c7:ba:68:6d:a3:dd:b5:2f:08:a3:a2:57:a3:
         a8:ab:77:ec:60:1f:84:59:80:3e:e5:b6:fd:5a:b7:2d:00:2e:
         88:8f:86:08:e8:3c:99:e9:59:ec:a9:41:7f:f5:4b:1b:1f:9b:
         f3:24:71:73:50:aa:09:e5:f8:da:d0:6e:d5:7d:75:a6:cd:d2:
         30:c5:3a:31:d7:80:45:ed:be:07:d3:f2:cf:bc:0b:63:4f:e6:
         92:41:e6:b3:bf:df:1f:8d:2e:f4:58:21:e3:02:25:ab:2c:00:
         e3:02:c1:9b:b6:70:16:5c:1e:10:89:8b:89:89:6a:07:c2:20:
         4b:30:0e:4d:b8:d8:16:41:86:dc:fd:2a:82:c5:40:e6:d7:5c:
         76:73:e6:00:3b:c3:3f:6b:06:9f:f5:e1:9f:c2:d4:ee:f5:dd:
         2c:cd:bc:fb:28:3d:2b:11:0a:78:2e:c9:57:01:85:f4:81:ab:
         89:d1:f5:59:30:d7:fb:ae:6f:f1:6e:49:12:72:9d:ec:4f:cb:
         d0:75:a2:55:1c:30:6b:00:a8:6c:ad:40:ef:32:d7:fb:a9:64:
         bd:b5:38:c8:b3:16:b8:2e:b1:4e:28:2a:32:a8:69:a6:c9:18:
         67:f4:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----