Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
File:                     FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json)
Hash identifier:          NhdicBkpXUQYn22hoJZjxdigc1rERid80gf8Kw9D8Ms=
Subject key identifier:   F7:93:EE:4C:CE:7A:23:F0:D3:C5:AF:EA:3B:33:31:99:D8:36:92:63
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Certificate issuer:       /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial:       665395330BB4123EE32B187A5EACEB224B0CD0E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
Manifest number:          0435
Signing time:             Sat 29 Mar 2025 04:31:22 +0000
Manifest this update:     Sat 29 Mar 2025 04:26:22 +0000
Manifest next update:     Tue 01 Apr 2025 12:24:22 +0000
Files and hashes:         1: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=)
                          2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=)
                          3: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: WiF977mXzgCtxEO+EoM01TbBWfQNQwyKqkOBJdJeZV4=)
                          4: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=)
                          5: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=)
                          6: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:53:95:33:0b:b4:12:3e:e3:2b:18:7a:5e:ac:eb:22:4b:0c:d0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
        Validity
            Not Before: Mar 29 04:26:22 2025 GMT
            Not After : Apr  1 12:24:22 2025 GMT
        Subject: CN=F793EE4CCE7A23F0D3C5AFEA3B333199D8369263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:07:27:c5:3a:b0:01:6d:b5:0d:91:e7:e2:
                    88:28:80:ac:5b:51:69:f6:c8:1b:ca:25:66:77:27:
                    01:c9:0a:f8:60:cf:b2:ee:18:0b:a5:f7:15:ab:eb:
                    f9:01:d6:44:f3:c1:aa:3f:3a:8a:3c:0e:40:7b:3f:
                    92:4f:e8:2a:15:24:57:58:38:5e:f8:0e:30:d2:0a:
                    f1:e3:d2:b4:cf:f4:a2:1c:2c:5b:86:9f:9e:66:29:
                    7e:35:e4:36:e9:46:bf:93:fc:1a:54:b3:51:6b:94:
                    50:1b:e6:13:f9:7c:88:5b:8c:1e:81:1d:54:17:0d:
                    3b:59:88:51:0d:49:7d:56:7f:85:d6:08:cb:3a:46:
                    0e:74:f9:f1:fd:1c:53:70:4e:5c:cc:29:21:7c:83:
                    98:94:3c:54:61:24:0c:17:82:0c:e7:f7:1e:80:49:
                    e9:67:90:34:c4:33:48:5f:a1:28:16:18:1d:40:30:
                    86:86:53:fd:dc:ff:14:96:cd:2b:17:df:c0:3e:42:
                    d6:a8:9a:a7:94:b3:78:b6:93:65:bd:44:d2:2d:4a:
                    17:f6:59:4d:24:d2:69:55:26:e9:d8:a1:7c:ec:27:
                    3c:e3:3c:85:fe:ac:c2:22:93:bf:82:d8:aa:f3:35:
                    99:d8:5b:94:84:14:bd:88:11:1e:15:92:71:98:3d:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:EE:4C:CE:7A:23:F0:D3:C5:AF:EA:3B:33:31:99:D8:36:92:63
            X509v3 Authority Key Identifier:
                keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6e:15:7a:b4:f9:8f:57:93:33:67:f3:ce:d2:0c:fe:17:fd:
         fd:41:4c:b4:fb:8e:45:ec:0d:22:36:fb:4c:15:83:8f:3f:6b:
         4a:23:d0:7e:7b:18:33:39:c3:8c:e5:1d:30:e4:6b:0d:bd:c2:
         e9:ad:33:f2:2a:63:c0:a9:a6:c1:90:63:96:42:fb:3e:3b:1b:
         1f:14:e8:4a:07:22:b0:43:71:f1:5f:e8:cc:6e:2c:31:3a:ce:
         26:be:93:2d:91:ca:77:7c:2b:70:27:76:bf:47:84:47:eb:f9:
         2e:e6:9b:87:14:92:f6:86:d6:55:cc:c2:15:c2:0e:1b:8f:37:
         c9:06:65:1b:e0:49:21:9f:4c:7f:d5:83:99:7a:a3:d4:b6:f3:
         e1:19:b8:35:d9:be:0c:2b:77:15:68:55:e9:4d:8a:0b:23:d5:
         e0:7b:78:ca:f5:aa:5d:43:f2:84:07:d7:55:ac:62:a2:df:ad:
         89:ed:41:ef:a5:c5:ac:1f:2f:dc:67:b5:85:50:27:d0:ab:b9:
         a4:39:9a:8a:65:6f:08:fe:7b:1a:64:8f:bf:a3:5e:bd:ae:64:
         b7:c9:8c:3e:9b:9e:4a:b8:58:fa:dc:4c:c6:f8:7f:ba:da:fe:
         1a:68:a0:96:82:4a:f4:16:6e:e7:1a:0b:17:c7:28:2d:c2:a3:
         c1:5c:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----