Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
File:                     71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json)
Hash identifier:          e6qduDfXGbOqV7vNVTQusHzR6gS/YfOz5Yf2wxJ4Wv4=
Subject key identifier:   61:B5:B4:A4:34:50:89:16:33:4A:AD:68:84:C9:8B:6E:A2:CB:95:D5
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       2FFB4BD50CB49C5B54A763F87E3A691505E4EFC9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
Manifest number:          023F
Signing time:             Thu 27 Mar 2025 14:31:39 +0000
Manifest this update:     Thu 27 Mar 2025 14:26:39 +0000
Manifest next update:     Sun 30 Mar 2025 22:12:39 +0000
Files and hashes:         1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: vZ69R5xggPKA1DsvCuQpoDKoruTtlm92emoYCZhzbUc=)
                          2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fb:4b:d5:0c:b4:9c:5b:54:a7:63:f8:7e:3a:69:15:05:e4:ef:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Mar 27 14:26:39 2025 GMT
            Not After : Mar 30 22:12:39 2025 GMT
        Subject: CN=61B5B4A434508916334AAD6884C98B6EA2CB95D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:4b:34:15:0b:98:d0:c1:b2:6c:f2:aa:1d:
                    a5:72:33:b2:83:09:c2:e7:c5:aa:78:05:61:b5:1c:
                    42:3a:ee:77:0d:f5:16:87:29:01:99:7b:e7:3e:4b:
                    b3:97:07:1a:2f:99:b6:89:84:9f:c7:3e:19:7b:6e:
                    70:04:6d:af:c8:36:ab:ba:3e:af:95:37:12:5f:59:
                    04:7a:6c:fe:c5:50:ee:a3:91:cf:97:9c:19:da:5d:
                    d4:dc:cf:6b:09:92:2e:08:78:f0:89:1e:36:b9:c0:
                    c2:1a:b8:f6:34:d7:5f:56:d3:14:bd:64:9b:f4:05:
                    15:c0:57:59:41:67:b3:55:bc:98:a5:f5:1c:72:09:
                    10:32:53:9c:66:66:f4:91:15:8c:4f:ee:eb:41:f6:
                    66:57:c5:fc:b8:ac:10:19:f4:41:95:77:16:0f:3b:
                    1b:69:88:97:11:71:81:6d:77:16:1d:08:84:97:b1:
                    99:26:ff:df:92:60:5d:f8:28:05:cf:96:cf:32:20:
                    3d:7d:7e:ef:77:8f:d7:36:f0:3f:0e:06:10:1b:e9:
                    14:fe:a9:cc:6b:5f:a6:69:0f:97:ec:9d:46:d1:78:
                    43:02:f0:72:2a:ca:e5:f9:7a:bc:1a:cd:ca:48:cd:
                    7b:18:bf:1f:8c:de:c2:bf:a9:11:fb:fe:21:44:bf:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B5:B4:A4:34:50:89:16:33:4A:AD:68:84:C9:8B:6E:A2:CB:95:D5
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:fa:e4:8d:49:d4:ba:74:14:c9:55:92:7c:a1:5c:cf:59:
         89:2d:f3:1e:52:64:dd:b7:2a:83:80:33:e9:71:76:ae:60:e3:
         37:a1:7d:c1:a2:c3:19:a5:b4:40:0a:6d:40:b9:d3:d6:d7:ad:
         cf:b2:b3:8d:e0:0f:52:9f:a7:dd:a6:b1:c1:50:c6:c5:43:ff:
         0d:b6:76:2c:c2:72:ca:d1:f2:37:3b:91:1a:19:3a:fb:bb:a9:
         49:8f:f7:7e:ec:0b:8f:b9:d7:84:6c:90:23:c7:0e:ae:e0:c2:
         24:b3:41:64:2a:d8:49:cb:58:b9:b9:8b:1d:45:b2:e1:7f:1f:
         ad:95:aa:24:59:02:37:37:5a:97:23:d4:85:8f:bd:9c:4e:33:
         01:ad:79:95:2d:30:70:02:0c:e1:5d:5b:93:25:3a:41:46:66:
         34:38:d9:c1:ea:eb:45:32:84:78:db:bc:c9:6d:a4:22:b5:50:
         40:5f:12:01:29:cd:39:7f:b6:32:ff:5a:71:df:89:7a:c5:0a:
         54:8c:7f:10:74:43:fa:d8:c7:56:18:20:d0:46:aa:8f:12:0a:
         02:d4:7d:62:b8:b3:82:25:2a:e9:e2:8b:6b:a6:57:37:45:60:
         2d:c6:17:d3:ec:64:28:5c:bc:81:e6:77:f4:39:af:c1:6a:e3:
         55:11:a6:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL/tL1Qy0nFtUp2P4fjppFQXk78kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1
RjlBODkxNzAeFw0yNTAzMjcxNDI2MzlaFw0yNTAzMzAyMjEyMzlaMDMxMTAvBgNV
BAMTKDYxQjVCNEE0MzQ1MDg5MTYzMzRBQUQ2ODg0Qzk4QjZFQTJDQjk1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiEs0FQuY0MGybPKqHaVyM7KD
CcLnxap4BWG1HEI67ncN9RaHKQGZe+c+S7OXBxovmbaJhJ/HPhl7bnAEba/INqu6
Pq+VNxJfWQR6bP7FUO6jkc+XnBnaXdTcz2sJki4IePCJHja5wMIauPY0119W0xS9
ZJv0BRXAV1lBZ7NVvJil9RxyCRAyU5xmZvSRFYxP7utB9mZXxfy4rBAZ9EGVdxYP
OxtpiJcRcYFtdxYdCISXsZkm/9+SYF34KAXPls8yID19fu93j9c28D8OBhAb6RT+
qcxrX6ZpD5fsnUbReEMC8HIqyuX5erwazcpIzXsYvx+M3sK/qRH7/iFEv0DPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYbW0pDRQiRYzSq1ohMmLbqLLldUwHwYDVR0j
BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG
REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB
ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx
ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE
Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA5A+uSNSdS6dBTJVZJ8oVzPWYkt8x5SZN23
KoOAM+lxdq5g4zehfcGiwxmltEAKbUC509bXrc+ys43gD1Kfp92mscFQxsVD/w22
dizCcsrR8jc7kRoZOvu7qUmP937sC4+514RskCPHDq7gwiSzQWQq2EnLWLm5ix1F
suF/H62VqiRZAjc3Wpcj1IWPvZxOMwGteZUtMHACDOFdW5MlOkFGZjQ42cHq60Uy
hHjbvMltpCK1UEBfEgEpzTl/tjL/WnHfiXrFClSMfxB0Q/rYx1YYINBGqo8SCgLU
fWK4s4IlKunii2umVzdFYC3GF9PsZChcvIHmd/Q5r8Fq41URpg4=
-----END CERTIFICATE-----