Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
File:                     139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json)
Hash identifier:          vIoJ98Tx9+dLqmIJQIyuZAm2LKgqAYE19CbUm6qzqCo=
Subject key identifier:   32:9A:3D:07:B9:63:E7:7F:6F:DF:60:38:22:F8:11:0F:C3:D8:6D:81
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Certificate issuer:       /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial:       5440DB0F15AD5579C26B06B518C75944178E2FA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
Manifest number:          0229
Signing time:             Fri 28 Mar 2025 08:22:17 +0000
Manifest this update:     Fri 28 Mar 2025 08:17:17 +0000
Manifest next update:     Mon 31 Mar 2025 12:28:17 +0000
Files and hashes:         1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: MLL6/qDsxtEsMRa44Zl6aIIBEl0tDem6dFSdspx4PV8=)
                          2: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: FOW2QLsQ4x6W+jpqaCCJVYP1Rjtm3bpy3VNKBwW20ZU=)
                          3: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 5cGFOXICgLmaNpmZAogfW5ytKDPAYz1pnqRlwPOSxTo=)
                          4: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: eYrdqV2eJFnxCahDbApV4knHEj3k//y61qNLVNaT8KE=)
                          5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: 3EvU4TBtv6BXZiyYaAbxIfh7U9gKO1iNAgsQ6ldwMyE=)
                          6: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: P+IUE1LGD8ElXeQQSjrtgfcVyLtwl4130alY1sqZ59Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:40:db:0f:15:ad:55:79:c2:6b:06:b5:18:c7:59:44:17:8e:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Validity
            Not Before: Mar 28 08:17:17 2025 GMT
            Not After : Mar 31 12:28:17 2025 GMT
        Subject: CN=329A3D07B963E77F6FDF603822F8110FC3D86D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:b1:e7:fa:97:a0:e3:cd:c6:34:34:3f:ea:
                    62:f8:af:ef:30:40:e0:25:71:d8:92:2c:95:ae:55:
                    cc:9f:29:c6:47:de:8f:50:9e:e2:66:13:3f:f3:1b:
                    1b:cb:ee:e3:e6:4b:02:28:24:66:d5:86:1f:59:c1:
                    c6:41:25:7b:e8:55:af:ad:29:63:6a:34:f5:dd:46:
                    a6:a2:ed:d1:5d:51:70:50:70:3a:c4:ca:6f:ce:56:
                    55:ee:f0:4d:94:a7:81:07:12:4b:b8:fb:c4:94:c5:
                    55:5d:4d:e3:90:92:d7:64:af:18:c5:a5:d5:24:77:
                    2d:70:8f:6e:75:0c:e9:d1:e6:9a:8a:14:c8:3c:6b:
                    8d:e1:e6:bc:aa:67:07:f1:4c:f2:c5:b8:bd:f9:d5:
                    09:0e:9f:14:2a:39:36:2e:4f:3c:3f:b4:82:c1:13:
                    84:af:ba:63:b1:d5:a7:ca:8b:0d:a6:ec:10:a9:f8:
                    2c:00:df:52:a4:88:71:eb:fc:98:f9:bc:ef:ea:e8:
                    6c:7b:35:d3:2d:c6:6e:e5:50:76:bf:9b:9b:1a:4f:
                    32:81:c6:0b:76:45:84:42:91:5f:f2:f4:6c:00:44:
                    3a:3d:4c:c2:24:c1:a1:fd:01:7b:d6:fd:dd:fe:d1:
                    27:4e:41:9a:90:cc:fc:c2:88:b5:2c:33:b4:d1:52:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:3D:07:B9:63:E7:7F:6F:DF:60:38:22:F8:11:0F:C3:D8:6D:81
            X509v3 Authority Key Identifier:
                keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:b2:fe:6f:9e:25:54:3f:80:9f:ac:1c:23:01:50:d0:13:
         1c:7b:d4:9b:52:f2:5d:34:fa:ec:f1:68:88:e6:81:ae:55:e2:
         29:c2:e2:f8:84:b0:9e:8d:01:92:16:dd:e2:70:aa:a0:94:ab:
         5b:54:56:75:07:e6:46:ff:0b:fc:a6:7e:d7:e8:f8:37:17:73:
         9f:9e:0d:3a:1a:21:e5:c5:1b:d5:aa:d6:4f:16:e1:fa:d4:27:
         49:9b:2f:9e:63:15:ad:af:13:08:1c:e1:ac:8c:d1:6d:be:ec:
         56:9a:ff:5b:43:61:36:cd:08:32:14:2f:7f:90:e6:78:84:f5:
         76:2d:0c:8a:ee:22:0c:fb:34:54:2a:88:81:03:29:12:d0:3b:
         bc:b7:3b:f7:13:9c:fb:cb:24:5d:37:b6:8f:b3:f3:9d:bf:12:
         94:23:b3:24:da:ea:90:ae:ba:34:eb:52:f6:d2:59:04:6d:50:
         e2:7d:ed:ac:73:d7:e2:e1:8b:32:a7:65:13:81:f3:73:f4:f5:
         71:ac:ce:92:cd:73:f2:a7:5f:44:a9:e5:f8:84:ac:63:7f:d2:
         bd:9b:bf:c0:bd:f2:69:06:2c:ea:44:20:4a:5d:89:7d:39:c4:
         fb:c6:19:75:90:99:e6:5e:56:12:61:bb:55:45:88:12:fc:4f:
         e0:23:72:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----