Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
File:                     3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json)
Hash identifier:          NSWOspP4L2DfDb8Y/EQj4VkC/Too0sFxLHSltBNCkuc=
Subject key identifier:   B3:7D:91:70:51:94:63:94:F9:CA:B9:09:10:0C:A2:7B:21:F3:21:BA
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Certificate issuer:       /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial:       0C4DF71AEA5E184FA2F3F8343699412159B50641
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
Manifest number:          01ED
Signing time:             Fri 28 Mar 2025 03:11:50 +0000
Manifest this update:     Fri 28 Mar 2025 03:06:50 +0000
Manifest next update:     Mon 31 Mar 2025 08:56:50 +0000
Files and hashes:         1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=)
                          2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: mpWFCHVjj+zZBz81oEax+KJdChdml8WVupB6NX9bDqg=)
                          3: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: Y16HrvFa5vs+/FhVsYhq2ABwBAkVUa93btNYM1MfzGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:f7:1a:ea:5e:18:4f:a2:f3:f8:34:36:99:41:21:59:b5:06:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
        Validity
            Not Before: Mar 28 03:06:50 2025 GMT
            Not After : Mar 31 08:56:50 2025 GMT
        Subject: CN=B37D917051946394F9CAB909100CA27B21F321BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:0d:4b:fe:b6:78:79:c9:18:f0:b3:5f:b7:
                    dc:25:5d:c6:40:f7:76:d7:0c:96:de:5b:c7:5d:77:
                    83:c6:6a:17:da:ec:58:1a:d0:17:64:19:04:92:a2:
                    4d:eb:b2:df:a5:3e:e8:ac:fd:8d:95:1e:83:82:78:
                    0d:00:f2:89:e0:95:f7:32:86:2c:d6:e5:be:e9:2a:
                    a1:5b:79:b5:4e:30:e6:b3:e1:79:35:e1:1d:b5:43:
                    e6:cf:76:8a:27:88:2b:dd:1e:2c:72:b3:fc:41:04:
                    a4:8f:0d:11:19:54:72:02:76:1b:79:41:5d:b0:fe:
                    a5:f7:66:6c:db:d3:2c:e0:06:b0:3f:c9:91:1a:6c:
                    70:0e:d7:80:17:03:6b:9d:36:01:44:82:16:ae:52:
                    da:f7:01:37:32:12:03:03:3d:13:71:59:ec:9f:db:
                    2e:fc:bd:c8:3b:57:60:c0:ee:eb:5c:8a:57:34:ef:
                    d2:28:bc:fa:d5:22:e4:0c:65:29:3d:45:91:06:94:
                    1e:a3:5f:b1:4c:c0:8d:05:f5:7e:49:4e:3a:fe:ad:
                    24:0a:1d:2d:9f:c9:b4:33:9a:90:2c:a7:0c:9a:d6:
                    86:f0:a2:31:13:85:39:e6:c3:7f:b9:29:49:a6:7b:
                    fc:c7:63:4f:20:5e:20:6b:ee:73:05:8e:b3:31:a6:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:91:70:51:94:63:94:F9:CA:B9:09:10:0C:A2:7B:21:F3:21:BA
            X509v3 Authority Key Identifier:
                keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:65:94:98:f8:6d:2b:ed:86:26:29:a2:ff:a1:87:e3:14:
         69:f0:04:4f:56:a4:da:e1:32:13:94:f9:00:8a:97:0e:18:d2:
         aa:e3:61:de:3b:10:c7:07:fa:03:f6:b3:6c:80:db:2c:57:07:
         28:fc:e5:ff:2c:7b:fa:85:70:d0:ca:b3:ef:f2:2a:f5:7d:98:
         2a:d5:e5:d4:c4:44:cb:b5:e6:df:ad:cc:d9:25:19:16:6f:76:
         2b:7d:9b:08:38:d4:51:b3:e0:c0:98:76:00:de:a1:45:0e:f6:
         e4:35:cb:ff:60:77:c2:65:e6:1a:15:a2:2d:e9:bc:2a:88:7f:
         20:87:f2:a9:28:44:41:e3:4c:b5:09:ce:eb:4a:86:e7:28:e0:
         e2:6b:af:c3:65:7a:43:2a:ec:a2:44:c2:91:e3:d7:a7:5b:1f:
         77:72:5a:b9:8c:2d:ee:45:46:19:71:cc:a2:ef:f8:e5:9e:7a:
         43:8d:7d:f7:40:b2:93:55:b7:e3:69:e4:c0:3a:eb:30:dd:7e:
         33:be:60:3e:3f:8b:fc:7f:46:99:95:dc:5d:93:87:fe:c7:05:
         e1:3e:dc:e2:f2:69:1a:40:a6:2c:68:82:9f:71:e5:5c:4d:1c:
         32:b4:fb:b0:2a:72:14:92:7c:97:cf:7c:0f:59:93:81:72:4a:
         89:23:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----