Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft
File:                     C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json)
Hash identifier:          sj6Ui7O2SYf6T01s3Ri5/Mb/3MYbwLt3etBXzPsbjBg=
Subject key identifier:   A1:55:BD:79:8B:02:79:A2:80:8E:A0:76:11:FB:DD:8E:AC:4D:24:2F
Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82
Certificate issuer:       /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582
Certificate serial:       2F6D368F057ACF37317CC7404A250E7D73FDF07E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft
Manifest number:          04A7
Signing time:             Thu 30 Jan 2025 11:01:08 +0000
Manifest this update:     Thu 30 Jan 2025 10:56:08 +0000
Manifest next update:     Sun 02 Feb 2025 22:36:08 +0000
Files and hashes:         1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: R9pSW2emtbEilMSKd1U5Hbx2BPyFQVA4MGShAXMMpdU=)
                          2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=)
                          3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:36:8f:05:7a:cf:37:31:7c:c7:40:4a:25:0e:7d:73:fd:f0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582
        Validity
            Not Before: Jan 30 10:56:08 2025 GMT
            Not After : Feb  2 22:36:08 2025 GMT
        Subject: CN=A155BD798B0279A2808EA07611FBDD8EAC4D242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:1d:ec:12:50:a3:41:ea:d1:30:65:44:97:
                    59:64:cd:8a:54:1c:b2:cb:e5:35:65:68:4b:85:d3:
                    fe:a9:ec:e0:c4:74:7d:35:39:b6:c6:91:40:df:7e:
                    aa:73:43:a8:2d:95:cb:c8:25:fb:f2:60:f4:bd:ed:
                    fb:45:c6:1d:3d:3a:9a:6a:9b:d6:3e:db:8c:8f:14:
                    fb:1c:aa:34:40:31:64:2c:f2:b0:58:e5:27:53:e5:
                    27:30:f7:6f:8d:d6:7e:81:e4:e7:8b:4b:c8:c7:03:
                    77:d8:2c:13:8a:e8:e7:55:b8:7f:5f:53:7b:10:70:
                    fc:33:30:64:b0:ee:96:ad:a5:bf:c2:20:86:5c:a0:
                    f1:cb:75:7f:53:7a:13:ca:ee:fe:2b:92:91:1d:f1:
                    77:1c:84:a6:7e:ec:0a:19:c5:9c:c8:e0:e8:5c:24:
                    57:34:31:2c:42:57:08:55:e2:d7:06:2b:ec:83:34:
                    4f:03:0a:5d:a6:b6:05:47:d4:2b:1f:25:d5:df:fa:
                    4a:fa:ef:c3:da:53:5b:d9:84:7f:81:06:78:f8:00:
                    89:9b:46:97:5e:91:d8:01:80:0f:7b:26:91:05:71:
                    8d:a8:91:c9:a8:2e:a8:a1:6d:8d:cc:aa:f7:a2:21:
                    95:10:d0:6e:0f:98:a4:37:ef:b8:c6:74:03:4a:6d:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:BD:79:8B:02:79:A2:80:8E:A0:76:11:FB:DD:8E:AC:4D:24:2F
            X509v3 Authority Key Identifier:
                keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:7a:b1:56:62:80:75:11:fe:17:47:65:1c:88:57:9f:f7:
         03:45:2a:6d:06:f4:06:3d:7b:57:ef:12:4e:1b:be:bf:ed:92:
         8b:a4:e6:d4:7d:2f:60:12:c1:6f:49:d3:f7:20:78:3b:ee:05:
         88:dc:ac:48:21:6a:d2:9c:5a:7f:0b:a0:fa:f7:d2:bc:d3:35:
         c8:58:98:f2:02:a9:30:09:24:38:e1:5b:03:51:ba:6b:93:ff:
         56:7a:4d:37:d0:bc:14:df:ce:3a:8e:52:d3:c2:54:ea:95:95:
         f5:08:4a:73:e2:b5:e4:26:02:82:e1:9b:b1:65:85:ad:46:58:
         84:36:4e:90:21:c4:e5:8a:a3:14:aa:d5:72:e3:5e:18:4d:fb:
         8e:49:32:31:48:17:ad:86:42:86:83:10:0e:bf:56:6e:ca:54:
         2b:1e:63:29:39:b8:f1:39:9d:0a:d9:8a:8c:fe:48:25:6d:0d:
         7d:79:81:cf:99:67:3a:4f:1b:46:c7:1e:ad:c3:4a:ba:64:72:
         ef:94:aa:2d:9a:4b:3b:78:62:7c:2d:22:b7:d1:70:be:4e:bf:
         b7:87:64:02:ae:3f:5e:ef:d8:ca:76:d9:d0:46:01:c7:b9:a0:
         dd:66:5e:c1:69:de:e0:a7:ad:9c:2a:7e:5e:57:88:22:bf:fe:
         db:1a:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----