Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
File:                     F503463BC571123F80B94A358280E0D0F9750C09.mft (raw, json)
Hash identifier:          cj2oc0EU6dGBYdvUkBKzA0RIbtzDJvKIwDaeeF5T4a0=
Subject key identifier:   2D:5B:39:E9:8D:30:1B:C8:0A:F6:19:4F:3B:F3:26:46:82:6D:D2:44
Authority key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
Certificate issuer:       /CN=F503463BC571123F80B94A358280E0D0F9750C09
Certificate serial:       34BD3375DCE87C1D0E31B689E503A72EB6FE92CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
Manifest number:          031E
Signing time:             Fri 31 Jan 2025 01:21:38 +0000
Manifest this update:     Fri 31 Jan 2025 01:16:38 +0000
Manifest next update:     Mon 03 Feb 2025 01:40:38 +0000
Files and hashes:         1: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (hash: akqqZo93M6It89eZVGv/jmXFYWn+pubxvH+Vy+anDPM=)
                          2: F503463BC571123F80B94A358280E0D0F9750C09.crl (hash: 6nW3tLFtlgTbBDdBKzu8LK9FvX2AaXisHc5A9nK6D8k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bd:33:75:dc:e8:7c:1d:0e:31:b6:89:e5:03:a7:2e:b6:fe:92:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F503463BC571123F80B94A358280E0D0F9750C09
        Validity
            Not Before: Jan 31 01:16:38 2025 GMT
            Not After : Feb  3 01:40:38 2025 GMT
        Subject: CN=2D5B39E98D301BC80AF6194F3BF32646826DD244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:0b:4f:b8:0a:35:33:e4:82:26:40:a9:44:
                    e0:e3:1f:dc:a2:34:a1:d3:4b:19:ce:68:81:a9:b7:
                    d6:1e:b2:44:1b:2d:f5:a4:53:78:0b:df:8e:a4:0d:
                    c9:2f:a9:cd:93:01:37:02:86:fa:9a:32:be:de:c0:
                    6f:68:57:d9:e1:e2:4b:a6:15:35:5d:df:c0:1a:37:
                    62:37:81:86:ae:60:bb:f1:89:41:23:71:43:92:ed:
                    f8:b0:43:9a:4c:d2:e0:4d:48:90:3f:b7:58:fb:17:
                    ca:2c:17:7e:b1:c6:cb:10:4d:e8:38:a7:55:dc:af:
                    1f:bf:4e:c8:97:1f:3c:04:c0:8a:df:74:83:49:a9:
                    18:52:47:ec:0f:67:89:a1:60:d7:f8:73:c3:92:4c:
                    48:6a:f9:e6:2f:08:bd:db:da:22:9e:9d:8a:38:0d:
                    7b:1c:9f:0d:16:7c:06:5c:a1:55:70:bf:47:b6:c1:
                    5e:9f:bb:16:fc:47:51:19:53:12:a2:f7:11:30:ff:
                    5a:77:42:e8:90:01:cd:ce:27:6a:c5:ae:7a:1f:17:
                    47:5c:02:9e:81:03:30:04:8c:f6:af:25:13:c0:90:
                    89:a5:ee:62:7d:b5:9e:57:c5:1e:d9:83:26:63:ad:
                    84:fd:63:11:30:de:bb:70:63:ad:eb:be:b7:ba:72:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5B:39:E9:8D:30:1B:C8:0A:F6:19:4F:3B:F3:26:46:82:6D:D2:44
            X509v3 Authority Key Identifier:
                keyid:F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:5e:ee:2f:58:38:e0:02:c9:89:27:b5:5d:0b:3a:eb:5b:
         8c:b8:a9:cb:61:3d:25:ae:18:02:55:8c:06:2f:91:b9:16:61:
         18:3d:2d:eb:a5:4c:53:24:ed:49:f3:01:89:87:ee:ce:3a:9f:
         95:99:b5:2b:20:22:3e:01:0c:12:5f:ef:8e:85:95:fb:46:bc:
         01:c4:8b:f8:60:1b:55:32:c7:25:82:94:fa:21:99:2c:73:5f:
         33:22:75:00:ef:56:5f:62:0b:8b:06:a3:b4:ab:84:86:6a:1c:
         34:8e:d5:08:0e:f6:5c:38:fe:66:9c:d9:e3:2f:78:ac:b9:72:
         fe:2d:d3:0e:db:97:3d:34:a6:4d:78:fb:56:a3:ea:fb:bd:5f:
         47:3f:a1:a3:c9:d9:41:4d:a1:fc:34:6c:99:fa:3a:26:6e:89:
         a6:56:fa:21:7a:c8:0f:92:31:f8:0b:cd:d0:a1:1d:db:2f:a3:
         17:5a:ed:d4:26:d8:e1:fe:54:94:80:3d:c4:5e:b8:d2:d7:b7:
         9b:ee:c1:8f:4b:8f:f3:c2:81:bf:b5:11:1f:80:73:27:3d:99:
         33:c3:d6:91:a1:6d:51:6f:06:50:a3:82:e6:ef:6c:76:78:ea:
         6b:b8:8d:a4:9b:17:14:25:80:8e:cb:40:53:8b:3e:4b:c6:5d:
         73:e9:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----