Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
File:                     CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json)
Hash identifier:          Ri8Vs3plEb3ETr3mxU0SEMiAiO6ngIkncXgIC51i0lo=
Subject key identifier:   A7:F2:21:B9:C1:7E:6C:97:9F:C1:BA:5A:00:F0:22:D8:64:C2:E1:10
Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
Certificate issuer:       /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Certificate serial:       708FC466090437E67DEDB06CF1A07D30AE299759
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
Manifest number:          04A1
Signing time:             Thu 30 Jan 2025 06:51:04 +0000
Manifest this update:     Thu 30 Jan 2025 06:46:04 +0000
Manifest next update:     Sun 02 Feb 2025 16:36:04 +0000
Files and hashes:         1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: +wADgBbGHlnAaJF9ne9rrntz6G0qBIbnlfj6NpTrwJg=)
                          2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: 7JmeiZ7mfVDojHIvrTXQ6U4zkcndZVcrVsaQl4d5SVU=)
                          3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: czpyfmW5qXUOgmdTX+fLvnr7WIFjh3STKQ+hvn+zqQg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8f:c4:66:09:04:37:e6:7d:ed:b0:6c:f1:a0:7d:30:ae:29:97:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
        Validity
            Not Before: Jan 30 06:46:04 2025 GMT
            Not After : Feb  2 16:36:04 2025 GMT
        Subject: CN=A7F221B9C17E6C979FC1BA5A00F022D864C2E110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:88:7b:86:e9:a3:96:50:b2:37:30:1d:84:
                    54:b6:6c:f5:77:6c:da:2c:7e:48:41:67:9b:bc:82:
                    03:fe:f6:8c:da:56:cc:d9:5e:6d:6e:7b:d7:c0:19:
                    c7:0c:fa:57:32:d5:4f:d5:e8:48:94:ee:39:15:2d:
                    ed:1b:e6:d0:b5:4d:d1:cb:e7:61:ed:07:8c:ef:14:
                    b8:9e:6c:85:60:19:6f:95:27:57:19:c4:4a:2a:70:
                    43:75:a6:75:c3:bc:b0:c3:4f:74:9d:f8:48:c9:41:
                    f3:4f:95:43:e5:1d:7e:80:17:60:88:e6:f9:8a:bd:
                    d1:f7:36:12:11:e3:a2:d6:bb:ea:94:3b:8d:8e:f1:
                    ab:75:39:28:20:1f:c2:c5:cb:7c:1d:b2:01:85:82:
                    b8:39:56:ec:34:2e:92:f5:2b:62:c8:62:e0:81:64:
                    ae:24:a2:33:6d:b9:05:29:4b:a5:f3:3d:d8:32:5c:
                    ac:37:fd:14:07:1a:00:44:8d:83:d4:d6:5d:da:b6:
                    76:bb:74:ae:75:a9:c8:a3:2e:29:58:8b:ca:15:fc:
                    8e:c8:27:7f:eb:1a:1e:9f:4e:7a:68:8d:60:2e:cf:
                    a5:7f:43:87:ec:fc:90:79:c3:7c:6d:05:f8:5f:08:
                    c1:a4:d4:ff:6e:b7:41:08:94:7d:ef:71:9b:14:58:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:21:B9:C1:7E:6C:97:9F:C1:BA:5A:00:F0:22:D8:64:C2:E1:10
            X509v3 Authority Key Identifier:
                keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:56:0e:b5:4c:79:b2:93:bf:a2:fb:90:fe:e3:a6:eb:57:13:
         48:47:9c:d3:29:88:cc:af:c3:72:fa:dd:37:0e:47:fc:87:c3:
         44:f4:0c:0a:21:ac:ee:b0:02:0f:07:1e:3d:19:a1:29:d6:20:
         1f:51:73:fd:e8:8b:c1:a6:ec:ce:1f:ae:ee:ec:45:f8:dd:d0:
         dd:91:35:f8:6b:76:f1:b9:c2:1a:03:1e:c5:10:d5:6d:f6:8a:
         fd:c4:36:77:bf:e5:e0:d2:3d:f9:60:75:ae:ab:4b:ca:c3:00:
         82:48:e3:84:bb:12:b2:6e:6b:d4:72:ef:b4:7b:ec:7b:bb:66:
         38:8a:38:bf:18:33:4a:16:7a:ef:c7:d4:a2:e2:99:11:2b:b2:
         ea:86:84:23:8c:c1:97:97:8b:63:91:ed:2d:25:8a:4e:7c:5d:
         61:ea:8f:59:5d:5b:56:b0:1c:47:fe:e0:c7:b9:f3:ba:c2:24:
         6b:af:01:70:1d:69:36:0e:3e:9a:1c:f2:bc:a8:fe:c0:ba:e2:
         40:fc:13:26:8f:2a:6a:c1:29:0c:ec:9d:d7:d8:6c:de:17:f0:
         ec:de:3d:5a:c1:b5:8e:b5:00:97:3d:11:28:eb:b2:d0:b2:67:
         42:82:4e:d6:32:b7:ca:a2:37:61:84:6a:bb:9d:3b:46:c2:c9:
         ca:4b:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----