Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
File:                     47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json)
Hash identifier:          tKcyAFMlJhI/erSscctNttBTa9oSxptq/FI5j4oZnZs=
Subject key identifier:   12:67:A7:08:E3:2D:59:97:CE:BD:32:CC:01:93:66:3B:69:51:20:FC
Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
Certificate issuer:       /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Certificate serial:       7AFB279095B394441B3DDC9375CC5362A59B8D96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
Manifest number:          0298
Signing time:             Mon 27 Apr 2026 18:42:08 +0000
Manifest this update:     Mon 27 Apr 2026 18:37:08 +0000
Manifest next update:     Fri 01 May 2026 00:07:08 +0000
Files and hashes:         1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: qSOluZYhHbh5qhe9XFML1T+yjS4Nr+V42eVROiXrJCc=)
                          2: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: II9JVKF1MZoJVEwW5NW1UekxkNykQFOso9Z3hUpWd4w=)
                          3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: +RzIkKcclhhmS8GwfpMzHJYL3/aslCxP9ofzAqZe73s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:27:90:95:b3:94:44:1b:3d:dc:93:75:cc:53:62:a5:9b:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
        Validity
            Not Before: Apr 27 18:37:08 2026 GMT
            Not After : May  1 00:07:08 2026 GMT
        Subject: CN=1267A708E32D5997CEBD32CC0193663B695120FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:76:a1:6d:28:28:d8:1d:75:a8:07:c6:18:
                    53:ef:12:f0:a8:c8:16:67:dc:04:8c:f9:1b:17:a3:
                    d9:c2:ef:6c:83:e3:44:16:70:36:97:3c:c6:bf:84:
                    ee:f4:17:f1:ab:6d:3f:5a:17:eb:9b:08:d0:de:85:
                    f1:56:54:9f:a6:ac:be:d6:08:4b:bd:da:fa:a9:b0:
                    cc:04:70:26:0c:40:3b:e1:94:2d:4a:1b:29:2e:0a:
                    15:9d:4a:03:c6:a1:8f:cb:a8:38:53:bf:1c:32:37:
                    f6:7d:34:89:9d:39:53:ae:a2:31:0a:ff:7d:de:df:
                    05:0c:73:35:67:27:65:ec:44:63:69:39:25:c8:66:
                    4b:16:53:f0:1b:17:02:be:30:44:5e:3c:b5:36:2c:
                    11:68:8f:02:a1:96:55:31:c2:ed:a3:17:34:7e:69:
                    ab:c9:22:0f:88:46:7b:6f:ce:45:54:42:31:94:b5:
                    01:59:c4:07:19:ad:d5:07:7b:23:24:76:b1:8e:bc:
                    fe:1a:a7:25:01:79:af:9a:10:01:9c:9f:26:97:76:
                    58:72:a3:3f:80:cd:c8:3b:91:4f:19:4a:cf:ba:ad:
                    3e:1b:25:a7:2b:fe:2e:b1:8a:f3:8a:a2:b0:55:ec:
                    e0:14:e5:b7:77:b6:23:7f:5a:54:11:b4:7c:13:e9:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:A7:08:E3:2D:59:97:CE:BD:32:CC:01:93:66:3B:69:51:20:FC
            X509v3 Authority Key Identifier:
                keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:04:1f:b4:36:a3:1f:3b:1d:88:47:ce:8d:57:c8:f3:be:
         3f:d3:2a:c2:87:45:30:0a:c8:a9:7f:77:35:9c:c5:5d:6f:9b:
         4d:66:d6:5e:a9:39:10:ad:71:1f:45:61:15:f3:54:a4:42:dd:
         c7:a0:03:1b:38:f6:6f:30:4f:d4:b5:43:82:c5:86:a7:34:52:
         97:23:31:85:f7:a5:d6:59:77:26:f9:6f:4c:ae:76:9d:41:74:
         f8:98:af:66:0c:18:fd:56:e6:52:18:76:59:c7:58:2f:ee:e8:
         66:15:32:8e:96:ee:c7:84:1d:d3:a8:83:f4:e5:a9:7c:ec:f7:
         96:a5:21:45:53:45:5d:e6:ce:6f:d0:5a:fd:36:be:83:a3:2d:
         71:53:10:6d:5f:d3:4d:fa:15:2f:d8:a5:20:9a:14:23:b9:54:
         80:6a:4f:a2:d4:71:26:c1:a1:45:18:86:65:71:d0:9a:29:7a:
         2c:2d:af:eb:64:52:99:6d:6c:45:a8:04:23:03:50:52:58:ef:
         01:28:c9:9b:3c:56:38:3e:d6:89:2f:a5:7f:83:78:83:23:ef:
         e5:ec:55:cb:f4:f3:5c:54:c2:2a:99:bb:c8:59:69:a5:b6:00:
         7e:c6:a4:98:f5:39:1c:be:da:bd:28:38:cd:56:b8:56:95:12:
         36:e7:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----