Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
File:                     C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json)
Hash identifier:          v7Zf3YsRyIaAAncZVlpUnHQ9qXcN/aDDbcnmC1n6z7w=
Subject key identifier:   40:FC:ED:67:56:AE:F2:2C:DF:9C:11:38:43:E0:A7:70:18:2D:17:20
Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53
Certificate issuer:       /CN=C7840142ADE3E1876CB50EA3A410454EB3889153
Certificate serial:       2967A49BBB205BDD248755888EDA7F15CBCC2AE7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
Manifest number:          77
Signing time:             Fri 28 Mar 2025 10:10:02 +0000
Manifest this update:     Fri 28 Mar 2025 10:05:02 +0000
Manifest next update:     Mon 31 Mar 2025 18:10:02 +0000
Files and hashes:         1: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: vYpsXCq+dUZGqyVf4s3bzeWm5/RKgjIsaIYaVayVEI8=)
                          2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: yks7nJcsDo9XtgYxk9DnHK0wG2/vAHkj81nLw0hV720=)
                          3: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: 0nm8+wg97E8X0p8UXEGrmZEjRdWW322tQB5S1kkGNIo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:a4:9b:bb:20:5b:dd:24:87:55:88:8e:da:7f:15:cb:cc:2a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153
        Validity
            Not Before: Mar 28 10:05:02 2025 GMT
            Not After : Mar 31 18:10:02 2025 GMT
        Subject: CN=40FCED6756AEF22CDF9C113843E0A770182D1720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:43:c9:ad:30:4e:14:3d:5f:c9:25:1d:fd:
                    94:b2:e0:f8:1f:9d:2f:40:a1:c2:d7:23:82:5b:b5:
                    21:ee:e5:7f:b8:58:d8:67:e8:21:dd:39:55:6a:9f:
                    00:6b:fc:31:63:61:41:5d:63:25:06:33:b4:75:06:
                    83:21:ea:f3:57:01:d6:5d:db:16:6e:4e:7d:45:3a:
                    d7:25:44:b1:ea:9c:d4:25:31:f0:cb:5f:0b:67:15:
                    3b:56:e7:d1:c5:c1:ba:38:77:e8:a1:8a:16:c3:48:
                    35:c8:7d:ac:6f:85:57:85:f3:c8:d2:ca:e9:f7:93:
                    da:48:71:aa:3d:88:03:be:45:32:11:c2:98:f2:75:
                    d0:12:62:9f:20:25:cd:24:51:98:fb:54:55:b8:15:
                    5e:cf:bb:9c:cd:5a:27:81:04:d4:69:98:c6:2f:c1:
                    a5:c4:9f:23:84:06:d4:72:5d:0d:e7:d6:a0:ca:89:
                    28:9c:de:0a:15:48:fc:6c:94:d5:bf:22:00:82:80:
                    9f:f7:20:5c:5a:91:89:60:26:07:bc:5f:f8:16:e5:
                    0e:69:0d:d6:23:12:54:04:11:fc:2a:87:26:d6:fc:
                    01:1d:1f:84:eb:eb:bb:21:07:f1:b0:f4:52:57:b9:
                    bf:70:fd:91:8d:ae:7d:a8:0a:db:ea:75:2d:28:b2:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:ED:67:56:AE:F2:2C:DF:9C:11:38:43:E0:A7:70:18:2D:17:20
            X509v3 Authority Key Identifier:
                keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:46:75:de:1d:79:16:fe:26:a1:69:6f:6a:7c:51:15:e2:
         f6:39:e9:2f:9e:62:ec:b5:9a:55:11:f6:38:17:d9:d1:71:95:
         d7:ca:60:6a:21:b3:7d:90:82:e9:0c:0c:c9:92:df:98:af:82:
         78:b1:fb:02:fd:df:c6:3a:98:00:d8:82:16:58:0a:f7:41:bf:
         c9:20:3e:c3:75:09:71:f1:c0:8c:52:d3:b0:b4:cb:b9:c7:a8:
         86:c7:47:e7:19:d9:6d:53:3d:5d:25:ac:12:58:88:89:15:4e:
         25:28:07:a4:ca:7f:95:55:21:d5:e7:19:88:e8:8d:0d:1a:11:
         f0:d0:07:f1:45:de:2a:05:75:9f:29:83:ad:db:55:1b:8b:d8:
         cd:8b:59:d9:52:18:74:1d:d6:64:5d:14:2a:74:07:e7:9a:64:
         5d:33:a3:7b:f5:20:8f:72:4a:92:ca:35:63:3e:91:a7:1b:c6:
         4c:fe:2f:c9:53:fa:9f:bc:29:b5:ac:58:88:3d:0e:4b:95:91:
         34:01:26:05:19:6b:12:cc:48:12:37:ad:32:fe:19:5a:b6:2a:
         bc:43:92:63:92:bc:85:f0:a8:ba:e7:8b:54:79:1f:97:8c:3f:
         1a:0f:fd:a5:a1:ff:d6:e4:10:75:c3:3e:6f:e8:bd:ea:e7:7b:
         01:4d:6a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----