Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
File:                     19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json)
Hash identifier:          yZ7MRfMStD3mc+8lmHLnQeZwgHqvwNQp8GIdqfXiVkw=
Subject key identifier:   2E:90:3D:F1:29:08:8F:84:ED:95:45:1C:A5:32:8B:EC:24:5A:AA:71
Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Certificate issuer:       /CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Certificate serial:       7A2ACACB0A7DE5EF2824654C3FD0896054D68428
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
Manifest number:          04BC
Signing time:             Wed 26 Mar 2025 23:32:17 +0000
Manifest this update:     Wed 26 Mar 2025 23:27:17 +0000
Manifest next update:     Sun 30 Mar 2025 11:21:17 +0000
Files and hashes:         1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 0o1dZly1HSyDWWEt2i9M1vY5SgKnfR722kBmWCwtoQw=)
                          2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: GMIZ46e2O1DvErtTWXo188EA4Hf8hgbyz4I+5Jo7wnI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:ca:cb:0a:7d:e5:ef:28:24:65:4c:3f:d0:89:60:54:d6:84:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
        Validity
            Not Before: Mar 26 23:27:17 2025 GMT
            Not After : Mar 30 11:21:17 2025 GMT
        Subject: CN=2E903DF129088F84ED95451CA5328BEC245AAA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:9c:b1:a1:8a:65:12:7d:27:10:ff:ab:f7:
                    08:19:da:37:24:03:82:3e:c2:ce:6a:21:72:40:7f:
                    e2:24:22:51:cd:63:2a:37:18:7a:f0:fd:e3:ba:5a:
                    a3:c3:5e:8d:b8:13:7c:81:a8:5d:2e:67:61:59:0f:
                    45:d3:d4:95:c1:e5:de:48:e9:ce:41:9d:2f:be:4e:
                    fd:d7:8f:0d:70:f4:0b:6d:19:f6:59:df:92:85:d2:
                    65:93:12:72:90:fd:f4:b3:91:97:f3:2b:a6:b8:8f:
                    05:2d:fc:21:97:c6:2c:bb:ce:23:ff:97:52:e2:63:
                    31:9a:dd:15:b2:b9:9c:09:a9:33:d9:60:63:a0:0c:
                    c8:f9:72:c0:c7:f0:dd:4d:c4:2f:8a:71:17:d9:ac:
                    ca:ca:ea:d8:fc:c5:fc:f8:fc:41:fe:1b:2b:2a:f5:
                    a0:65:eb:e6:63:91:2d:44:72:4c:66:17:46:c8:48:
                    0e:d7:28:84:bb:d2:6c:10:07:c7:86:18:29:d7:3f:
                    79:c9:b9:2c:9a:6d:2c:13:16:f7:2a:8f:5d:61:0b:
                    ff:9f:72:75:09:13:5f:d9:c1:85:e4:a9:60:31:83:
                    1e:a0:69:ef:00:32:cf:b3:1c:0e:c3:0d:2f:60:6b:
                    2c:81:ce:81:65:8a:36:e6:86:15:bd:f6:69:2c:58:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:3D:F1:29:08:8F:84:ED:95:45:1C:A5:32:8B:EC:24:5A:AA:71
            X509v3 Authority Key Identifier:
                keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:75:09:44:bc:07:7f:d6:b9:6c:89:3f:be:05:f4:e0:21:9d:
         76:96:e7:12:df:f7:b5:b3:e9:2e:61:12:99:77:14:6a:cb:be:
         4e:e4:4b:c3:5b:a6:69:66:5c:3b:91:5f:6e:42:c6:02:20:d7:
         be:16:b8:c4:89:31:a9:d0:2e:b3:8b:a4:8e:b1:f7:16:b8:89:
         57:8e:62:ce:08:de:6d:2b:32:90:0a:58:3b:51:da:92:30:bd:
         b6:42:27:3f:7f:aa:8e:10:7c:a5:87:18:23:91:21:14:d5:dd:
         39:6e:0e:a2:b6:34:d5:f9:39:32:42:e2:a8:1a:3c:7c:8d:6d:
         a4:be:c0:78:b3:3f:f1:47:18:7b:a3:47:0c:2d:e0:bd:69:5d:
         23:bd:bd:45:2b:90:a2:de:4f:15:f9:6f:a5:7c:8a:be:43:c2:
         75:78:4f:a3:9f:11:ae:95:51:c3:27:8b:92:b6:b9:7e:91:ed:
         c3:1d:c8:62:ef:34:96:51:32:f0:a8:79:f3:94:19:68:b3:ce:
         33:53:73:85:70:46:5c:af:20:86:da:59:a3:57:c6:88:00:92:
         45:a0:a3:6b:ba:b3:6e:02:2f:42:06:17:1a:52:b2:10:ab:c2:
         72:d4:4a:8e:40:31:83:81:6a:4c:37:37:b5:7c:03:07:7d:fd:
         a5:9c:a9:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeirKywp95e8oJGVMP9CJYFTWhCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1
QkYwNDk0MzAeFw0yNTAzMjYyMzI3MTdaFw0yNTAzMzAxMTIxMTdaMDMxMTAvBgNV
BAMTKDJFOTAzREYxMjkwODhGODRFRDk1NDUxQ0E1MzI4QkVDMjQ1QUFBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgeJyxoYplEn0nEP+r9wgZ2jck
A4I+ws5qIXJAf+IkIlHNYyo3GHrw/eO6WqPDXo24E3yBqF0uZ2FZD0XT1JXB5d5I
6c5BnS++Tv3Xjw1w9AttGfZZ35KF0mWTEnKQ/fSzkZfzK6a4jwUt/CGXxiy7ziP/
l1LiYzGa3RWyuZwJqTPZYGOgDMj5csDH8N1NxC+KcRfZrMrK6tj8xfz4/EH+Gysq
9aBl6+ZjkS1EckxmF0bISA7XKIS70mwQB8eGGCnXP3nJuSyabSwTFvcqj11hC/+f
cnUJE1/ZwYXkqWAxgx6gae8AMs+zHA7DDS9gayyBzoFlijbmhhW99mksWHdRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULpA98SkIj4TtlUUcpTKL7CRaqnEwHwYDVR0j
BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5
NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw
NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0
ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF
RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIZ1CUS8B3/WuWyJP74F9OAhnXaW5xLf97Wz
6S5hEpl3FGrLvk7kS8NbpmlmXDuRX25CxgIg174WuMSJManQLrOLpI6x9xa4iVeO
Ys4I3m0rMpAKWDtR2pIwvbZCJz9/qo4QfKWHGCORIRTV3TluDqK2NNX5OTJC4qga
PHyNbaS+wHizP/FHGHujRwwt4L1pXSO9vUUrkKLeTxX5b6V8ir5DwnV4T6OfEa6V
UcMni5K2uX6R7cMdyGLvNJZRMvCoefOUGWizzjNTc4VwRlyvIIbaWaNXxogAkkWg
o2u6s24CL0IGFxpSshCrwnLUSo5AMYOBakw3N7V8Awd9/aWcqWA=
-----END CERTIFICATE-----