Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft
File:                     8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json)
Hash identifier:          MM0CL/CKNWs/mOZY4o/qsB4UnErvbozVI6a7Mma7jtE=
Subject key identifier:   5A:AC:CA:2E:49:BE:CF:F6:D6:24:19:0E:29:85:00:DD:24:E6:1F:60
Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79
Certificate issuer:       /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779
Certificate serial:       18C7A135AC7C93EC6DB38E72B381C5CAC76FF5B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft
Manifest number:          043B
Signing time:             Thu 27 Mar 2025 22:50:48 +0000
Manifest this update:     Thu 27 Mar 2025 22:45:48 +0000
Manifest next update:     Mon 31 Mar 2025 08:30:48 +0000
Files and hashes:         1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: M6vzqSL58GQIo4G3TsKC3smkrom1AKYwGW+SboXQrBY=)
                          2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=)
                          3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: cbpmkM6PwYV6RY6q2yehaxTDDfvHXmTxn5hBermc51M=)
                          4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: ummcd32J2PfVvp+R69LzxbIEO8p+ckqksmqTcY62DdQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c7:a1:35:ac:7c:93:ec:6d:b3:8e:72:b3:81:c5:ca:c7:6f:f5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779
        Validity
            Not Before: Mar 27 22:45:48 2025 GMT
            Not After : Mar 31 08:30:48 2025 GMT
        Subject: CN=5AACCA2E49BECFF6D624190E298500DD24E61F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:56:af:21:f0:68:a5:df:b8:46:3a:34:15:
                    b9:76:4b:62:ee:df:10:16:6e:da:f1:7a:a1:96:81:
                    a3:87:ac:c1:90:b5:f7:94:c2:11:05:04:01:5a:6e:
                    e6:69:c0:b4:9a:48:81:23:19:54:13:4b:e6:61:96:
                    4a:14:31:aa:de:95:f0:2f:13:13:b1:b1:70:52:3f:
                    f9:9e:07:78:95:36:1a:64:ee:c4:e5:1a:58:20:ad:
                    0b:07:5d:1e:d6:e8:2c:b4:9e:53:a2:bb:6a:5e:ea:
                    dd:68:41:c2:83:1d:b6:af:7a:ff:5c:b6:ec:ab:0a:
                    dd:c9:c5:41:f3:7e:40:be:1c:40:d6:fd:4b:79:e0:
                    b9:fd:2f:ae:53:48:bd:7e:15:96:8d:00:7e:45:94:
                    33:c6:c6:8d:f9:78:ad:e9:dc:24:cf:bd:fa:b4:3b:
                    6a:a6:8f:95:06:29:1b:c4:7d:c4:19:ce:58:ab:f2:
                    11:59:1a:04:db:9e:ec:63:51:5e:1b:4f:31:c3:9e:
                    5a:ac:cd:a8:a8:3e:4b:97:b6:54:35:da:d1:57:f9:
                    0d:4c:c2:39:ff:cf:32:f0:2e:68:7d:3f:4b:b4:93:
                    b9:80:67:b3:b5:40:1d:12:6b:96:ce:11:b2:81:62:
                    6e:33:9a:8d:f5:04:a3:c0:e0:76:ef:f5:2a:5e:86:
                    4d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:CA:2E:49:BE:CF:F6:D6:24:19:0E:29:85:00:DD:24:E6:1F:60
            X509v3 Authority Key Identifier:
                keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:9f:5f:eb:9c:49:6d:c2:4e:02:26:1f:bd:35:12:97:a6:
         65:75:85:4d:c3:aa:1a:96:38:f4:d7:92:23:6c:2d:c4:e4:11:
         03:f7:17:74:12:03:d3:a8:f4:d6:8c:86:5d:b0:67:97:66:40:
         2c:03:ad:f7:98:ec:23:25:05:14:7f:02:15:42:7e:05:e4:a9:
         43:e3:08:fb:db:e1:aa:0d:27:25:f0:3e:ad:fc:0a:7f:d3:74:
         96:61:bb:1f:fb:54:85:90:24:d3:58:9f:7f:1b:bf:95:0f:f0:
         f4:9e:39:9c:c5:a2:e8:16:6e:34:ce:74:9e:bd:95:cc:d1:b1:
         9f:c4:ed:9a:17:e3:15:5d:f2:16:c3:3f:91:01:68:60:58:9e:
         ef:58:39:4c:d0:df:4c:64:6a:ab:28:02:93:70:f7:ef:4f:a3:
         08:c3:b1:d6:8c:ae:d5:57:24:ec:b3:cf:e7:1d:e3:54:51:95:
         fd:28:2b:fd:f2:c6:f6:03:4d:8e:b8:10:96:c9:48:7b:7c:df:
         10:ae:4b:61:7c:d1:a8:9d:bf:ce:32:86:2e:e9:8f:1a:6b:25:
         06:b8:6b:35:f7:18:51:a8:5b:1a:a2:4c:eb:4a:48:aa:c2:5a:
         1b:da:f4:e5:8d:cc:87:96:c7:dd:03:14:ea:ac:ee:4d:b7:35:
         e8:88:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----