Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft
File:                     19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json)
Hash identifier:          sqzEoVgEhMdrNWftm6pgmiOfTP+SLWYLT+d4cBYIHuk=
Subject key identifier:   2A:25:6F:6C:2D:42:08:3D:47:30:A7:A4:ED:B2:A2:13:66:FD:57:61
Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3
Certificate issuer:       /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3
Certificate serial:       36194D53FF7DEEA871F49A36DDF479FFF51A7ED1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft
Manifest number:          59
Signing time:             Fri 28 Mar 2025 07:10:47 +0000
Manifest this update:     Fri 28 Mar 2025 07:05:47 +0000
Manifest next update:     Mon 31 Mar 2025 12:54:47 +0000
Files and hashes:         1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: 9PCqgM4cYwxJhzjcC5PwzOGJSMyyIfUQz/Yhckz5Cok=)
                          2: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: fPbTgk03Yz582PYO+/S3Q0j4nj0ZowMUiVAj8Zu/YXI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:19:4d:53:ff:7d:ee:a8:71:f4:9a:36:dd:f4:79:ff:f5:1a:7e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3
        Validity
            Not Before: Mar 28 07:05:47 2025 GMT
            Not After : Mar 31 12:54:47 2025 GMT
        Subject: CN=2A256F6C2D42083D4730A7A4EDB2A21366FD5761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:97:a9:34:ec:ef:ec:10:ae:9b:7e:77:58:
                    05:6c:2b:f6:9e:4a:0a:f3:cf:56:e2:f5:bf:67:c5:
                    f8:27:40:58:ae:7d:2f:20:28:54:38:e4:f8:fa:3e:
                    ca:18:29:dc:17:16:8b:29:c2:ab:66:45:b5:93:be:
                    67:6d:6b:c9:8a:86:35:39:41:5f:c4:f3:f2:c4:66:
                    5d:12:c5:33:80:3f:dc:03:82:cc:0f:26:3f:05:39:
                    72:70:7c:cd:13:ac:f0:d1:6d:30:6b:ed:4e:e7:d7:
                    0c:33:fa:a0:5a:f1:29:b1:80:84:81:bd:95:97:a2:
                    53:92:1e:26:d0:b0:ba:c7:45:58:99:31:ce:30:b4:
                    82:96:ee:a4:10:c3:19:34:11:4c:81:6f:5f:bb:81:
                    68:28:e7:e9:97:3a:78:bc:86:32:0a:09:60:07:6b:
                    4b:50:22:9c:3c:aa:79:24:34:40:bb:3b:e8:a9:9a:
                    5f:9b:00:e7:7b:a8:e0:d7:8c:12:86:70:c3:ce:d4:
                    c7:62:a7:a5:41:04:9f:57:62:1d:b3:3e:ae:dc:3b:
                    c1:f2:42:7a:59:91:9d:f2:ee:2b:c9:ca:fe:06:f4:
                    37:7c:9d:aa:35:fe:98:33:31:c4:3f:12:38:69:50:
                    d7:55:22:75:d8:04:32:e2:5e:f2:d9:c6:fe:e9:a7:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:25:6F:6C:2D:42:08:3D:47:30:A7:A4:ED:B2:A2:13:66:FD:57:61
            X509v3 Authority Key Identifier:
                keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:7b:99:b2:f3:9f:7d:96:4a:be:2e:90:74:55:e5:e1:ea:f1:
         2b:cc:05:86:3e:16:22:2c:7a:c1:80:43:e4:8a:bb:ad:63:a9:
         0a:23:01:78:7d:4a:41:40:b6:b6:3d:cd:19:b9:72:64:72:69:
         1b:3a:8d:8c:38:25:81:3f:f2:51:8b:0c:fa:1d:da:6c:7c:ca:
         1e:07:77:ec:41:cd:51:2c:15:5d:cc:9f:3d:4d:bc:57:b0:e3:
         e0:cd:f4:bf:8f:83:fe:1b:23:45:05:2c:62:a3:c0:14:48:53:
         b7:6c:09:13:44:c4:f4:f2:a3:71:ef:3d:30:e7:e9:9b:7e:ff:
         a2:a6:96:33:ce:2f:bb:6a:de:fb:89:58:10:79:79:56:e3:61:
         51:08:3c:cc:c2:55:ff:eb:64:ec:1d:fe:c9:17:22:2c:44:60:
         3c:b1:1c:92:bb:1e:82:c8:12:59:e2:22:9a:71:22:a6:a0:0b:
         f0:15:93:ad:e2:be:01:98:c8:a0:e0:49:7b:c5:6c:72:bf:20:
         bc:bf:7a:88:52:cd:8e:59:47:94:28:67:ff:7e:c7:7b:cd:c4:
         15:04:d8:71:2a:da:de:c8:2a:69:a6:33:0f:9a:4f:30:28:f7:
         63:55:42:50:b4:1f:11:ac:0f:39:cc:0d:7e:2a:3f:1d:58:00:
         da:35:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----