Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
File:                     E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json)
Hash identifier:          8XQKYVenoyL7JzeahqWD/N17ZswQiudbERiPbv2y89g=
Subject key identifier:   F8:44:F7:5D:A1:1A:F7:9F:11:5C:E9:E2:63:16:2D:59:37:C9:5B:0B
Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
Certificate issuer:       /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Certificate serial:       56257DF7B60413042B5891253265ED429F34E5DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
Manifest number:          E2
Signing time:             Fri 28 Mar 2025 17:22:17 +0000
Manifest this update:     Fri 28 Mar 2025 17:17:17 +0000
Manifest next update:     Mon 31 Mar 2025 21:20:17 +0000
Files and hashes:         1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: jR3Fixe166OMUTtP8mJKbsDEpASm2BgJ020ziz4iWic=)
                          2: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: Xwhjl6rYi2GiJ63apVZxajMffw2QXZ3RilE/f3c5skI=)
                          3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 2+QIfySh8c6i8OAm2ZBYIJAC5i/VOgSLnCJgIJXnqcY=)
                          4: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: eTIGvTxcclkAjkS0JQL+QXqxxlU66A6zLv2/rsCM/mo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:25:7d:f7:b6:04:13:04:2b:58:91:25:32:65:ed:42:9f:34:e5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
        Validity
            Not Before: Mar 28 17:17:17 2025 GMT
            Not After : Mar 31 21:20:17 2025 GMT
        Subject: CN=F844F75DA11AF79F115CE9E263162D5937C95B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:f6:10:1d:15:b2:e4:b8:76:6f:e2:71:c9:
                    6c:a3:51:c6:e0:d5:b9:b9:01:0e:62:f5:83:76:79:
                    37:4a:40:ed:67:11:fc:fa:0b:7d:44:23:91:b6:39:
                    2c:45:5a:86:be:fb:8c:ee:08:32:b6:78:1a:87:7b:
                    c2:29:36:d5:84:75:6a:7f:c5:a5:f3:29:5a:bd:01:
                    54:55:1e:0c:9e:a5:e4:45:5b:02:9a:58:2c:49:37:
                    e2:22:9b:c5:f7:75:ca:f2:4a:e1:6f:d7:0d:df:e6:
                    96:21:42:fc:03:ee:6e:a9:0b:ab:21:46:9e:78:2a:
                    c9:f0:71:51:b3:09:9c:e9:b3:f3:a7:5f:fd:40:85:
                    52:c2:a2:c2:b2:2c:01:cf:b3:eb:36:c3:2f:d3:ea:
                    19:f9:90:68:55:cf:74:78:d6:3c:1b:73:29:c5:6a:
                    c1:6b:cb:a8:ee:b9:07:59:26:9b:78:96:8a:93:62:
                    c7:ce:98:6b:94:cb:d2:e7:10:17:80:47:76:18:db:
                    dc:89:9b:a4:27:5a:8f:ca:cc:0b:cd:89:ce:28:1f:
                    dd:b4:83:d9:9c:3f:c9:ef:79:f8:10:fc:43:34:57:
                    ed:3e:af:60:30:2b:ff:ce:da:b7:5e:c3:f2:2d:34:
                    9d:80:62:b4:fb:84:bb:69:e9:c0:2d:21:19:08:69:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:F7:5D:A1:1A:F7:9F:11:5C:E9:E2:63:16:2D:59:37:C9:5B:0B
            X509v3 Authority Key Identifier:
                keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:c7:9d:c0:2a:89:b7:18:2d:71:ae:bd:24:51:bc:68:72:82:
         40:b5:24:70:a2:20:ef:c7:ca:a8:e1:ad:7a:f7:d5:d3:d5:cb:
         41:c4:1d:02:7e:cd:30:9a:d2:42:bb:ca:cb:7a:fc:c7:c5:f2:
         fa:0b:46:cc:76:ee:e2:89:e7:83:21:d8:e1:67:33:0f:86:1f:
         49:30:fe:6c:3a:a5:78:68:50:8c:bd:21:60:f1:85:9d:f9:84:
         63:34:45:be:c8:24:73:cb:47:45:ca:23:03:2c:86:14:42:e1:
         e3:6f:cb:35:96:91:85:50:3c:ea:73:31:76:33:af:32:b1:a3:
         9f:51:8c:57:0d:b2:c1:e5:ae:1d:e9:e6:ef:91:15:87:0c:e6:
         fa:80:19:f5:c5:6a:20:aa:00:7f:31:3b:23:12:50:86:32:d4:
         5e:da:f2:ae:c5:e7:1b:65:96:f5:87:21:b8:5e:3a:80:56:8b:
         aa:7c:cb:35:c3:92:b2:a1:0f:f4:1e:96:f2:7a:1e:7f:70:c2:
         e4:c0:a1:91:bd:bf:11:b0:69:d2:75:a5:dc:7a:d6:31:51:c2:
         5c:d6:dd:fd:c9:67:15:ce:5d:3c:a5:84:06:24:09:7f:38:c5:
         3d:9f:3c:35:d9:00:49:f7:77:bd:74:c7:29:b4:11:b5:b6:3e:
         7c:e5:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----