Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft
File:                     3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json)
Hash identifier:          1o7wX5FXhE97vG+JBNr+1hGoZv9Z6TuMO94kMHL4e+s=
Subject key identifier:   EA:E6:C1:0B:1D:13:F8:4A:FE:F6:59:38:21:2D:76:91:2A:59:3F:3F
Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6
Certificate issuer:       /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
Certificate serial:       247E5C30CCF8B2997875C83B5BCCAED941D7F340
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft
Manifest number:          7C
Signing time:             Fri 28 Mar 2025 16:42:14 +0000
Manifest this update:     Fri 28 Mar 2025 16:37:14 +0000
Manifest next update:     Mon 31 Mar 2025 21:09:14 +0000
Files and hashes:         1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: eE01S7Tt3hDolfjSjNHuVWE0u1++skpVNaI9QD0VjC4=)
                          2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: 49HTMVxx05wPdArfdbkc8ZuyfBJmlfmMETsXKqg+H4o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7e:5c:30:cc:f8:b2:99:78:75:c8:3b:5b:cc:ae:d9:41:d7:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
        Validity
            Not Before: Mar 28 16:37:14 2025 GMT
            Not After : Mar 31 21:09:14 2025 GMT
        Subject: CN=EAE6C10B1D13F84AFEF65938212D76912A593F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:06:c0:dd:0b:59:5e:46:2d:b6:9f:bc:90:
                    29:83:4a:05:d3:5b:00:4b:d8:09:fd:1b:8e:5b:ea:
                    56:bf:b9:e7:f9:b0:05:88:14:b8:86:f3:d5:75:3f:
                    96:2b:4d:f1:39:b2:54:4b:67:1b:d9:4f:71:fe:4e:
                    64:dd:38:f4:39:ff:04:b4:68:69:a1:c4:e3:df:a5:
                    0a:32:b7:7e:8f:94:d7:d1:5e:eb:ec:07:8b:90:2c:
                    8a:5e:90:ac:8a:7b:f3:6f:ae:6e:cf:bb:12:e1:14:
                    43:c5:55:d3:e4:da:e8:c8:80:59:e7:4e:d3:0a:b2:
                    36:98:5f:67:b3:dc:3d:29:10:25:7f:81:9c:7e:ac:
                    46:8a:6b:71:5a:57:dc:8e:b0:ed:70:83:bd:1b:db:
                    90:32:2b:f8:fd:6e:5f:05:08:0a:ec:ca:a2:f1:9e:
                    4a:97:07:cc:a4:cf:ce:0b:a1:7b:b8:ef:1f:5d:7b:
                    e9:95:98:16:80:ae:08:45:bb:db:71:f1:dc:c6:1f:
                    5b:0a:bb:2c:ba:e1:68:0c:87:e3:ef:da:4b:f7:cb:
                    0c:87:b0:ad:bb:5e:b3:75:6e:7b:fc:f0:ab:6e:b4:
                    84:d6:62:c4:08:17:62:34:ac:3f:bd:41:be:81:a6:
                    51:2a:d6:ad:90:18:4d:04:6d:f9:9c:2d:da:9e:ba:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:C1:0B:1D:13:F8:4A:FE:F6:59:38:21:2D:76:91:2A:59:3F:3F
            X509v3 Authority Key Identifier:
                keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:ba:c7:4a:ce:28:e4:42:18:81:74:62:09:29:1f:f4:0a:
         f8:93:78:59:f5:d5:67:74:be:2b:4d:4e:bf:78:90:d9:e9:c4:
         2a:50:e9:c7:58:0a:84:4c:72:50:f6:fd:bb:fd:a5:47:9b:52:
         b8:ca:51:eb:0c:3e:32:0a:43:39:01:a8:8f:3c:65:1f:7f:d9:
         1b:26:72:55:71:02:64:cf:e6:b2:17:cb:85:a9:1e:39:a0:8c:
         52:bb:a4:ea:9f:8b:a9:e4:18:d5:fc:a8:16:d6:5e:6e:f1:f2:
         ad:c1:7a:ec:4d:f1:95:50:49:e0:e2:f2:25:5e:fd:74:39:2d:
         71:7f:e5:b4:c1:0e:49:a3:fb:71:14:9c:77:c1:d1:97:72:ce:
         99:fb:48:82:e2:62:20:c8:7a:fb:0d:9e:3e:ef:dd:df:82:86:
         bc:77:ec:85:90:df:c7:2c:c4:d6:6f:77:84:6d:51:0e:c2:50:
         f2:67:0a:39:fd:6d:43:c5:3d:03:f6:6f:b8:be:18:fd:82:22:
         ad:03:93:38:4b:7f:85:57:cf:19:27:1c:55:a6:c6:76:ad:03:
         9c:eb:f7:8b:42:05:9f:96:ee:e1:5e:22:51:29:5d:6b:a3:be:
         1f:c6:f5:48:bf:05:0a:e7:c5:b8:74:a9:f3:fd:f7:fa:1f:2b:
         6b:e6:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----