Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
File:                     2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json)
Hash identifier:          sCnMXZoZdGFN5d2Uvfqz2loNif+khQNRMFm+ejzyCkY=
Subject key identifier:   71:EE:A3:93:D4:E4:A2:95:D7:6E:48:FB:DA:6D:7A:1F:EE:61:2F:FC
Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC
Certificate issuer:       /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
Certificate serial:       6DD9E66B0707C78BCE46BE3B0889851D83089DC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
Manifest number:          8E
Signing time:             Thu 27 Mar 2025 04:50:38 +0000
Manifest this update:     Thu 27 Mar 2025 04:45:38 +0000
Manifest next update:     Sun 30 Mar 2025 13:36:38 +0000
Files and hashes:         1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oZcKTmYCJqDy9qRd0DlVW5dVuhLNvdkEUxYoj4jIWDo=)
                          2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: YV9rVvsdSgD3BdBPXz9uIgrFRgHbL+Vx/JV7hSTyYQc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:e6:6b:07:07:c7:8b:ce:46:be:3b:08:89:85:1d:83:08:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
        Validity
            Not Before: Mar 27 04:45:38 2025 GMT
            Not After : Mar 30 13:36:38 2025 GMT
        Subject: CN=71EEA393D4E4A295D76E48FBDA6D7A1FEE612FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:c6:61:5d:a5:73:73:67:4f:15:7d:e7:55:
                    0c:79:89:f1:6c:b5:45:71:b4:16:fd:46:8c:e8:4e:
                    d8:24:5f:c3:8e:c4:59:7d:13:92:ab:b0:19:04:37:
                    13:07:78:6a:86:f6:e9:d3:0c:3c:90:7e:f5:70:37:
                    1f:ba:b2:ad:af:0f:4b:3b:98:08:79:32:5b:54:62:
                    01:3d:0e:76:d9:46:01:07:bf:db:da:f0:55:81:b6:
                    56:cb:7e:37:67:29:43:eb:16:5c:73:b0:9a:1e:35:
                    e7:a9:dd:68:95:c0:19:a8:a2:fc:2c:15:40:01:ee:
                    c3:43:ce:5d:02:90:6e:78:67:f8:bf:44:50:c1:6f:
                    5d:31:78:83:9c:f7:e0:4b:ab:4c:c6:1a:39:14:2b:
                    91:7f:bf:bd:79:3f:38:1a:61:49:bc:d4:85:a6:0d:
                    f0:d4:18:18:29:f8:b1:ee:50:a7:b3:81:da:26:bd:
                    ab:6a:72:db:b7:e4:96:d5:60:26:16:d0:62:63:70:
                    bf:4e:5f:9b:9b:17:0e:40:59:2d:25:dc:9f:07:5c:
                    95:4b:ac:28:47:01:db:0a:b7:8e:ca:4b:76:ff:00:
                    64:36:8f:f9:3a:e1:a9:cc:b0:16:da:da:55:55:0e:
                    18:9e:5d:a2:c0:5c:2a:02:3f:1a:f5:1d:fe:61:ee:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:A3:93:D4:E4:A2:95:D7:6E:48:FB:DA:6D:7A:1F:EE:61:2F:FC
            X509v3 Authority Key Identifier:
                keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:d1:d3:95:6d:07:42:bd:16:1f:9b:65:8e:ca:27:a9:5e:
         52:c5:3c:1a:de:68:0d:1f:fa:99:13:c3:4a:5d:d1:a7:b7:3b:
         ef:4e:d1:50:3f:56:1d:e2:70:c2:a6:b9:a2:2a:23:63:59:ce:
         06:1c:da:40:ca:ac:f2:40:8b:e0:64:8d:90:03:2a:c2:cf:b2:
         f7:6a:ab:5d:5d:6e:61:5d:e9:db:4d:af:27:5c:9d:b9:6c:cb:
         cb:30:6a:b3:49:bd:58:eb:19:78:2d:cc:65:e7:75:d9:67:ec:
         56:2b:90:ad:4d:e8:7c:ff:77:2d:8f:16:1b:ad:ea:6d:6d:e3:
         e4:43:df:5f:ed:09:1f:b6:48:99:c1:a5:3d:77:b9:3a:90:26:
         da:ec:4b:81:de:08:71:46:10:d1:24:16:2f:38:1d:04:e6:68:
         f6:69:fe:64:08:de:0b:fd:a9:93:17:bb:0e:61:42:66:f9:76:
         d4:12:bb:2b:30:8a:e8:f1:31:73:b1:bd:4e:1e:ab:92:e8:31:
         40:ad:f6:1a:b1:e1:26:d3:e6:53:79:d1:6b:9d:64:1b:f2:b2:
         51:aa:21:4f:e9:9c:ed:b5:36:70:8f:a1:10:7f:3e:30:19:b8:
         65:16:e9:ae:cb:d6:40:57:69:0f:a4:7e:d2:a9:ed:92:da:0c:
         a7:db:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----