Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft
File:                     DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json)
Hash identifier:          9OR/tWqPyf0uQra83ILBMkwn5+twX+kGPl8bk7eQs/g=
Subject key identifier:   A7:92:00:7F:D6:6F:4E:24:16:75:BE:13:4C:0B:B8:9B:80:28:40:7F
Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE
Certificate issuer:       /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE
Certificate serial:       418F5DCDB6141568EAB2BC47E73435B2448658DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft
Manifest number:          04A1
Signing time:             Fri 31 Jan 2025 09:10:54 +0000
Manifest this update:     Fri 31 Jan 2025 09:05:54 +0000
Manifest next update:     Mon 03 Feb 2025 17:46:54 +0000
Files and hashes:         1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: KIBNFpdbg6BRQCIPOHqspYOBoezcUYWgmcH91SlD2KY=)
                          2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: Y4VWHmgW9HZwKxSE/waNnU6ZuSrPKeVjHYVcm5B2tUE=)
                          3: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: SyhmyGyah4sdDHQ34C/62PDFkQi17XMYlJhDnxeQlDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8f:5d:cd:b6:14:15:68:ea:b2:bc:47:e7:34:35:b2:44:86:58:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE
        Validity
            Not Before: Jan 31 09:05:54 2025 GMT
            Not After : Feb  3 17:46:54 2025 GMT
        Subject: CN=A792007FD66F4E241675BE134C0BB89B8028407F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:1e:b8:39:fb:62:47:98:dc:ff:e7:6c:73:
                    9d:dd:f6:de:33:09:4b:a5:5d:2b:8f:16:2b:73:ac:
                    01:df:b6:8d:b5:cd:06:81:ac:78:a2:82:ed:0d:6c:
                    c6:22:48:c8:93:64:00:d3:3c:a7:79:e6:b0:bf:ad:
                    86:04:40:1e:d4:f4:56:e4:55:84:69:5e:50:3a:24:
                    54:05:7b:60:9e:41:a9:81:a7:1a:e7:09:1b:cf:86:
                    2a:a6:c0:e8:1d:51:3d:9c:7a:e9:9c:90:73:a1:25:
                    57:1a:6f:d5:93:99:8a:b8:70:9c:3a:89:16:e0:25:
                    d0:df:1f:07:2e:b8:5b:20:77:82:f3:81:53:3b:80:
                    ff:6f:57:e0:9c:44:f8:cf:ec:01:c9:fc:84:e1:63:
                    52:77:5d:db:81:56:b6:03:de:44:52:fc:51:e2:fa:
                    f3:17:40:36:33:c4:4c:8f:99:0b:99:b8:9d:9d:5a:
                    47:f9:cf:55:58:ee:64:30:f4:ee:c3:73:69:e1:17:
                    0b:b3:d5:ba:d2:82:87:63:44:62:a9:e7:f7:a7:8d:
                    c5:be:9f:0c:4f:d2:3f:3f:cc:b8:ac:e6:e8:b8:bd:
                    08:16:53:54:ed:a3:c0:e5:8c:1f:d4:f6:3d:10:99:
                    76:c2:fb:01:63:0f:dd:b4:11:7b:34:fa:3c:e9:07:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:92:00:7F:D6:6F:4E:24:16:75:BE:13:4C:0B:B8:9B:80:28:40:7F
            X509v3 Authority Key Identifier:
                keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:91:e9:0a:fb:c3:95:44:b5:97:fa:cb:38:41:2e:fd:74:
         7a:62:93:f1:8e:5b:c1:ba:a7:9d:89:8c:8c:6c:60:8e:03:e5:
         a6:86:8a:2d:e0:ec:23:12:1b:81:c0:56:57:d6:47:9a:33:d8:
         19:ae:18:cd:01:e4:b8:aa:cf:58:ca:db:c6:12:ae:ee:8f:5d:
         c1:f6:cb:b0:2f:f5:fc:39:cd:7d:56:aa:3c:56:ae:a2:98:01:
         c5:f8:05:aa:ef:97:93:b1:5f:71:99:11:6b:32:94:40:88:04:
         64:8e:69:6a:cb:e2:82:29:e2:f3:b3:56:7e:1d:4f:0b:2e:2a:
         e3:cb:a1:88:4f:a2:00:89:83:f6:cf:7e:2e:b4:dc:cb:4b:ed:
         5f:ff:15:8a:88:00:24:71:15:79:86:81:ff:e7:a7:81:86:21:
         d3:49:1e:6c:2b:75:0c:a6:cc:73:53:a3:a3:91:33:67:71:42:
         f7:64:16:8e:d7:87:63:4a:7a:cd:e6:26:40:51:1e:52:19:fe:
         c2:cd:45:ba:d0:3b:d9:59:8b:e4:a6:38:a3:d4:a1:c7:ac:50:
         04:ea:2b:ee:6e:75:54:ea:e9:bd:b5:10:0d:22:85:c1:d6:6e:
         69:4a:9c:0c:dc:cc:f7:d2:06:54:cf:3f:37:4c:40:61:b0:b8:
         1b:a9:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----