Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft
File:                     AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json)
Hash identifier:          NCQi7PdqqBAUWVZvXcuY9xYg6pV1RSR81ocBNX19p1w=
Subject key identifier:   8C:BB:27:9B:4F:77:F5:51:45:11:1F:A8:02:19:59:F3:07:41:E2:D9
Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1
Certificate issuer:       /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1
Certificate serial:       3880EAEBB35F5AB77D9FB68659017570F39CC83D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft
Manifest number:          0129
Signing time:             Thu 27 Mar 2025 08:22:00 +0000
Manifest this update:     Thu 27 Mar 2025 08:17:00 +0000
Manifest next update:     Sun 30 Mar 2025 12:54:00 +0000
Files and hashes:         1: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: T+e6QRBADZD6IUSgUKZhdJVoeEIJXyW9Ypi3ijvpV2c=)
                          2: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: wWAFHWU6qsBhUcGrs+endSdpfXDee9NoiplPOwgoZ3s=)
                          3: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: FuC0X759h2GO+MLLKWRrbDk5a3CiG3LjZLk/US775mk=)
                          4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: GpPOWs9VxBPasPMBzvDCP7Tdeg1upqH9ZV21fxWvJbs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:80:ea:eb:b3:5f:5a:b7:7d:9f:b6:86:59:01:75:70:f3:9c:c8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1
        Validity
            Not Before: Mar 27 08:17:00 2025 GMT
            Not After : Mar 30 12:54:00 2025 GMT
        Subject: CN=8CBB279B4F77F55145111FA8021959F30741E2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:ab:78:fe:a5:2e:4d:e7:91:fb:2a:57:73:
                    ad:02:4d:75:ac:d9:84:df:f0:81:72:64:92:29:17:
                    a5:da:9b:e1:6d:a7:8f:41:bf:49:e7:2a:c6:50:a2:
                    19:23:d9:82:f5:04:08:bf:5a:f1:f5:2e:ff:f2:f2:
                    be:e6:73:34:a5:97:32:63:bf:1d:6e:ef:b0:ee:9d:
                    bf:3e:5e:9f:c6:55:61:07:d6:a1:8b:0a:81:fc:8d:
                    03:c0:d5:48:aa:88:c2:c1:83:d2:3c:80:59:70:7f:
                    df:0b:c7:18:e4:57:0e:38:cc:a6:63:38:f5:ac:0f:
                    97:59:2c:20:f2:ef:54:5f:af:2c:c5:24:16:d8:74:
                    89:68:58:06:a2:0a:f1:a5:d3:57:26:e5:dd:39:ab:
                    0d:03:f6:34:1b:c4:90:af:93:c7:32:19:bc:a0:14:
                    e9:6b:dd:07:86:15:93:6a:d1:d3:b0:95:7a:f5:65:
                    37:bf:34:84:ff:08:ef:d4:13:56:c2:69:a1:98:06:
                    52:f5:99:c1:f8:c8:c8:69:da:ad:0b:96:f7:d0:dd:
                    4e:da:46:b8:16:71:13:be:71:0b:38:5b:65:3e:93:
                    1b:54:86:85:85:9c:87:6e:1f:1d:af:dc:44:5e:26:
                    0f:47:0c:85:b0:9d:20:b4:2a:9b:a2:ef:38:5e:5c:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:27:9B:4F:77:F5:51:45:11:1F:A8:02:19:59:F3:07:41:E2:D9
            X509v3 Authority Key Identifier:
                keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:17:c3:ce:7f:8c:c4:31:7d:22:fb:a5:29:a7:1e:28:fc:
         4b:e1:d6:97:b7:46:13:ac:d1:17:f0:68:45:47:34:b2:7e:b5:
         3d:93:a1:d0:b7:32:b7:90:da:95:58:04:8b:02:f7:e6:c4:a5:
         bf:b4:3d:ae:fe:7a:3f:14:e1:c0:e1:e7:91:53:1e:5c:b2:6f:
         d7:0b:c5:f0:e1:20:79:34:f9:0d:01:94:d6:8d:79:83:06:41:
         74:d3:d2:72:ff:53:db:a1:14:b9:a8:95:0c:a4:8d:32:0f:8d:
         27:c9:5e:f5:92:39:1a:4e:1d:e2:24:c7:ba:17:9a:58:8b:46:
         77:d2:6a:f6:75:98:b9:d0:51:2e:86:e5:6e:93:52:ec:6c:dd:
         66:73:7c:8f:bc:ec:6c:a7:8f:5a:59:dc:4e:1f:bc:25:69:59:
         d3:ab:27:b4:31:e0:a6:f1:35:ac:f9:8d:1c:39:18:d8:76:51:
         13:55:db:b4:c5:56:4c:b7:c0:5f:d6:49:96:e0:b8:11:f9:3c:
         fd:0e:fc:10:ec:df:5d:73:04:9f:a0:d7:ad:57:f0:d4:3f:6d:
         b7:a6:81:31:2d:53:2e:ce:d2:97:49:2a:71:fc:5f:82:fd:12:
         c7:f6:1b:c6:1e:2e:fb:4f:ed:82:8d:70:11:9b:17:23:10:11:
         1d:f6:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----