Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
File:                     7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json)
Hash identifier:          q8JVHxELicb95Qm10hJ6WbaaxMKL/IPZWSr1b7ltcmA=
Subject key identifier:   9B:14:0E:F8:D9:33:92:24:C0:E4:68:42:65:95:F8:34:7A:26:F0:B8
Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99
Certificate issuer:       /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
Certificate serial:       1CA500AD283785614C75D00CE01F0020C8DCBEA2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
Manifest number:          F0
Signing time:             Thu 27 Mar 2025 20:41:40 +0000
Manifest this update:     Thu 27 Mar 2025 20:36:40 +0000
Manifest next update:     Mon 31 Mar 2025 04:29:40 +0000
Files and hashes:         1: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: ORKr4ha8P6tv9X5zA4ht6mjFvslVRbnM+gzBN7aD/Sw=)
                          2: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: goBdU2IBnHy9wcOLLQQ/OCQZydl32zY5z0yZl8PUzN4=)
                          3: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: PFjLJCNzVROiQslNJr8SDC7d+VdpOp1wTEy8ifVjVSo=)
                          4: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 18Hkz/XR+bc2+4hLanlNPrrmjy5COqEUY7Uy7tOHT7Q=)
                          5: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: smWnJtZ/R67U2ULFGK7Jk8VcGNSJ3hQ7lt79pWbaLFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a5:00:ad:28:37:85:61:4c:75:d0:0c:e0:1f:00:20:c8:dc:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
        Validity
            Not Before: Mar 27 20:36:40 2025 GMT
            Not After : Mar 31 04:29:40 2025 GMT
        Subject: CN=9B140EF8D9339224C0E468426595F8347A26F0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:cb:54:f4:b1:d5:cb:b7:f1:ba:14:84:bf:
                    8f:77:b0:ab:ef:1b:8c:32:d6:72:90:7e:38:3e:eb:
                    64:d8:71:3b:0f:59:6e:ff:9e:b0:59:2e:a8:a5:cf:
                    ee:b0:bf:27:3f:58:0c:d2:59:ad:84:0e:44:7d:0c:
                    f9:a2:ae:a8:4f:04:5b:5f:48:2e:b1:38:b0:a8:93:
                    c0:59:54:b0:57:cb:fa:cb:4c:cf:12:98:61:f0:c6:
                    92:a7:73:a3:4f:73:cd:c3:ea:d4:01:81:71:13:84:
                    0f:bb:c7:e4:eb:13:a3:07:55:6c:41:ab:35:1a:7c:
                    23:ea:cc:91:09:c2:8e:ed:eb:36:53:31:a3:60:18:
                    9b:54:ef:52:45:7a:d9:0c:5a:8e:bc:55:94:57:69:
                    e1:e9:ac:4d:1d:48:ff:a4:ca:12:7f:22:61:9d:e4:
                    b7:d1:f3:cf:4e:82:79:fd:de:e3:69:89:e7:0d:39:
                    96:54:5d:52:48:95:8e:9f:96:3c:c5:b9:31:57:f5:
                    a8:80:fa:4c:0b:18:c7:f0:9c:79:dd:8d:27:62:b7:
                    c8:ec:af:1c:61:dc:17:eb:5c:43:ab:fd:bd:fa:a7:
                    94:a2:11:63:e6:8c:77:0f:8d:b0:02:16:54:23:32:
                    0b:fd:ff:a9:7d:17:da:fc:7b:52:1b:17:5a:86:74:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:0E:F8:D9:33:92:24:C0:E4:68:42:65:95:F8:34:7A:26:F0:B8
            X509v3 Authority Key Identifier:
                keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:dc:e0:29:d4:98:2a:69:f5:a1:1f:9f:31:fe:18:9e:89:
         d8:55:81:eb:21:a4:f3:57:6e:1f:0e:4e:84:56:ef:e2:b1:94:
         6b:00:9f:f1:b3:ad:a6:f1:34:43:7e:f0:62:29:41:92:95:ac:
         d3:bb:ca:c6:b7:bf:1b:e2:78:49:b6:21:10:34:31:ac:a9:d0:
         08:59:24:db:71:7a:dd:b3:50:91:d2:aa:e7:e6:c4:c0:53:7f:
         46:f6:53:f3:2d:75:a2:4d:09:7e:da:3f:8b:84:67:35:fb:76:
         ce:ca:99:56:69:10:64:47:ac:fc:b9:db:d3:d2:84:4d:c8:ce:
         94:89:ea:30:4b:aa:09:19:22:ba:df:c6:9f:88:1e:7e:aa:bb:
         04:2b:33:2f:20:aa:fb:72:a3:c9:fe:fa:b4:f1:aa:a4:ba:21:
         19:39:e4:62:97:da:31:67:9a:48:f7:03:a1:f6:b5:a0:54:45:
         24:7e:42:52:2f:1c:ca:02:43:51:35:09:15:36:18:d3:f0:e7:
         a0:0f:3a:83:9c:7f:03:75:81:ef:a8:d6:fb:30:03:ae:d3:db:
         19:95:8a:0c:15:4f:09:a3:ec:36:d5:a4:11:5d:54:74:ee:b8:
         98:25:15:1b:7e:77:9b:ba:83:c1:ac:5d:69:60:f9:60:eb:95:
         ba:e4:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----