Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
File:                     3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json)
Hash identifier:          qw2dzOStB8I41vHnz1ZI/SVkW5ZBdLukVXSkGIzlY5g=
Subject key identifier:   4A:2C:0F:7E:F3:5F:E3:E6:8C:1E:7E:5C:55:66:96:41:D6:1C:B1:22
Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
Certificate issuer:       /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Certificate serial:       114372B350D8C2544AA0C1B9AC1D1F3A898A34AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
Manifest number:          016D
Signing time:             Fri 31 Jan 2025 04:03:55 +0000
Manifest this update:     Fri 31 Jan 2025 03:58:55 +0000
Manifest next update:     Mon 03 Feb 2025 08:27:55 +0000
Files and hashes:         1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: erYYtjYi5GWOc/eUnkDGilLMTkKwyuBMQnLT5ILzMRM=)
                          2: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=)
                          3: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=)
                          4: 3130332e33302e3139322e302f32332d3234203d3e20313530323537.roa (hash: NcX+WY03GcamnAjiYWsvkUsu3rYUAuUBqwJZYTrEuHg=)
                          5: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:43:72:b3:50:d8:c2:54:4a:a0:c1:b9:ac:1d:1f:3a:89:8a:34:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
        Validity
            Not Before: Jan 31 03:58:55 2025 GMT
            Not After : Feb  3 08:27:55 2025 GMT
        Subject: CN=4A2C0F7EF35FE3E68C1E7E5C55669641D61CB122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:c3:54:94:d6:75:38:a8:b4:01:8e:ef:d9:
                    9e:79:f7:39:d5:2c:0c:28:3e:ab:0e:1a:b0:0a:c3:
                    d1:b2:1c:99:01:4e:b6:a5:88:db:e3:cc:15:25:ea:
                    27:e2:6e:8c:a0:08:9f:c2:49:95:69:58:84:9a:9a:
                    f5:a6:76:ed:0e:45:50:ff:f2:d2:5e:37:90:75:f1:
                    c9:9b:3e:20:63:a4:13:0a:c9:d1:67:59:04:f3:c7:
                    fc:8f:bc:1d:19:69:18:d2:5f:2a:cd:e1:25:e1:93:
                    ac:68:68:7c:cc:12:89:1f:80:ed:5b:1c:6e:4f:a8:
                    e8:16:3e:71:26:9a:94:88:fa:48:14:6d:94:42:2c:
                    cd:d3:66:ea:04:dc:03:a1:6f:43:33:ae:4d:2c:85:
                    e8:f8:66:a1:a5:ca:cf:a9:30:d2:d8:e1:8c:da:f4:
                    2d:74:1b:9d:b3:4a:6e:7e:27:a0:b8:31:f0:37:04:
                    5b:04:d1:97:e9:df:6c:7a:77:84:9e:8a:da:21:4a:
                    7f:74:42:f0:4b:08:dd:6c:bc:0a:d9:50:81:ec:0b:
                    f5:23:b8:4d:ae:44:c0:4b:87:b2:f4:33:c2:72:2b:
                    eb:c9:85:0a:ca:2e:0d:c6:c3:77:1d:cf:63:84:af:
                    0e:5e:21:57:2f:3d:f2:3e:b2:eb:a2:15:88:ad:b2:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2C:0F:7E:F3:5F:E3:E6:8C:1E:7E:5C:55:66:96:41:D6:1C:B1:22
            X509v3 Authority Key Identifier:
                keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:b1:a1:9b:ec:f8:de:bb:e6:ec:52:6d:69:b3:54:65:d1:
         71:fb:11:71:f1:37:05:82:89:57:bd:27:39:46:9f:e2:13:c0:
         07:78:39:fa:08:e7:e3:ec:5a:b1:b6:05:54:1f:57:9f:92:fa:
         c1:90:e1:23:5b:1a:27:41:26:b4:bb:96:d1:48:12:6a:95:82:
         6a:1c:c5:19:cb:1d:95:e4:07:85:a0:b1:b6:16:a6:8f:a2:ee:
         ee:d4:28:47:d8:bd:a3:f4:86:d6:13:0b:bc:8d:dd:e3:64:70:
         b8:98:83:a9:4c:9c:98:b4:a5:44:0c:a1:09:88:32:c7:a7:b9:
         72:7b:28:22:2b:3f:57:30:57:4a:3b:9a:02:2e:18:83:00:cd:
         64:5c:01:4b:70:27:20:4e:ca:d9:57:83:aa:2b:ef:a6:ef:d5:
         04:08:df:d5:dd:b1:3c:63:2a:8e:fd:12:c9:23:1f:06:e8:c5:
         b5:e9:52:a8:ea:44:5e:0a:c3:02:58:44:18:63:74:da:d6:29:
         97:87:e2:b1:50:86:19:73:48:82:08:4f:a5:8c:4d:8f:f1:9c:
         cc:d2:86:44:c2:34:aa:d9:08:0d:28:d1:6e:c3:e4:d7:9b:04:
         d7:85:85:c8:de:f3:b8:a7:f6:af:82:39:09:6b:a9:4c:52:c4:
         25:be:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----