Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
File:                     4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json)
Hash identifier:          PpivShF2+g/pVHC0jR9KmELhy9FVrB8G3dK9iFM9qkE=
Subject key identifier:   5C:7B:68:60:C2:60:97:41:AF:BB:79:71:7E:7F:F0:86:E7:47:D8:06
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       2E22967B3D9953FFAC87BAD19B237747F364EC4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
Manifest number:          026D
Signing time:             Fri 28 Mar 2025 14:41:32 +0000
Manifest this update:     Fri 28 Mar 2025 14:36:32 +0000
Manifest next update:     Mon 31 Mar 2025 19:03:32 +0000
Files and hashes:         1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=)
                          2: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=)
                          3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=)
                          4: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=)
                          5: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: BzB5VvbV+WmQfEX9Ur9thiazsLDuAQ0dvZV3/fw33iU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:96:7b:3d:99:53:ff:ac:87:ba:d1:9b:23:77:47:f3:64:ec:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Mar 28 14:36:32 2025 GMT
            Not After : Mar 31 19:03:32 2025 GMT
        Subject: CN=5C7B6860C2609741AFBB79717E7FF086E747D806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:18:f1:d6:3d:46:1c:07:fa:98:4c:63:ec:
                    5f:a7:a3:22:72:9c:83:9b:86:98:73:9b:99:3f:ec:
                    5b:c3:8e:d4:32:77:2b:a0:f8:fb:90:51:a0:7c:6c:
                    a4:c7:00:92:2a:2a:75:75:4d:58:6b:5c:82:ec:9e:
                    2a:c8:b1:66:d8:2e:b4:72:98:ca:93:0e:18:40:c6:
                    bf:45:bf:80:62:41:b8:8b:4b:c1:47:70:df:05:c0:
                    84:6e:51:fe:5c:b0:07:3a:33:5a:2d:fd:0a:7a:74:
                    db:a8:2e:99:be:2b:6b:56:8d:85:ae:a0:75:52:6e:
                    a4:f2:46:b4:4f:3c:93:26:3b:bc:77:90:28:95:26:
                    88:76:0c:5e:07:61:fd:cd:39:32:98:5a:cf:c7:70:
                    1e:3b:00:94:a0:64:a2:d3:e6:98:ec:2d:2d:7d:00:
                    de:fb:54:b6:93:75:6b:e3:3a:1a:05:16:0d:b7:c3:
                    d8:02:b3:55:77:fd:2a:12:ba:36:39:3b:08:bb:b1:
                    b0:4c:a3:75:25:dc:a8:78:cc:bd:3c:09:a3:c1:c1:
                    45:1b:84:18:e2:46:1f:74:22:3d:40:ff:73:60:99:
                    06:f7:a1:fe:51:58:e3:89:3e:7d:cf:d2:fd:41:bb:
                    71:25:d1:68:55:3f:a6:a2:cb:f0:12:bc:ab:c8:f2:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7B:68:60:C2:60:97:41:AF:BB:79:71:7E:7F:F0:86:E7:47:D8:06
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:dc:a2:0a:82:5d:94:57:54:2c:17:8c:d9:42:43:3d:bd:
         96:28:28:88:0b:c7:c6:9c:a1:95:b1:97:2a:b0:60:44:af:03:
         80:26:65:9f:3d:d8:ea:09:c6:78:cf:4a:df:57:3e:38:5d:62:
         8d:10:91:f4:79:54:9e:85:68:49:04:e3:47:ea:97:14:57:92:
         76:cb:66:a0:a9:ff:0f:0b:86:dd:87:36:17:16:fd:6b:14:86:
         44:90:b9:a0:69:6e:f5:ef:59:fd:03:60:31:29:6c:c1:83:a3:
         b8:f6:d8:fb:70:31:96:cf:66:9f:07:a6:ab:0d:1b:41:97:f8:
         f4:11:2b:ec:b8:ae:c0:c2:07:6b:3c:4a:e0:fe:4f:9e:3d:01:
         25:bb:25:1f:8d:d6:c0:e1:4b:ad:d8:a9:e2:30:95:8c:bc:ce:
         62:42:f0:66:de:77:9c:e3:c9:3e:2b:35:3c:d1:7a:1d:ec:7a:
         4c:39:ab:fd:ee:3e:84:bd:73:46:1a:66:d0:06:76:9a:c2:b8:
         ea:45:7f:e1:2b:5a:7c:64:e5:c4:75:96:7e:9a:ec:81:94:c9:
         4a:6d:d8:bd:72:71:f1:1b:0d:05:a3:2e:a8:9c:3c:3f:eb:c2:
         9a:71:b7:4c:3c:c3:1b:3a:54:ba:47:ec:31:29:d5:c0:09:8f:
         cb:61:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----