Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft
File:                     C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json)
Hash identifier:          0uoUfhfp+ztvyI7nhzoSuxpKfgcsWWlflYeeMVwWKbs=
Subject key identifier:   FA:AF:6D:F4:F9:D5:33:AB:DD:D5:A0:57:57:AF:05:51:3D:B3:67:AD
Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7
Certificate issuer:       /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7
Certificate serial:       06BDD68E410312FF331699277DC70D7EB2F891DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft
Manifest number:          030A
Signing time:             Fri 28 Mar 2025 01:12:10 +0000
Manifest this update:     Fri 28 Mar 2025 01:07:10 +0000
Manifest next update:     Mon 31 Mar 2025 06:05:10 +0000
Files and hashes:         1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: 6uUBpb0ojFffgUncHkIUWVHiZY2EGU0LJB1E13ei09U=)
                          2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bd:d6:8e:41:03:12:ff:33:16:99:27:7d:c7:0d:7e:b2:f8:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7
        Validity
            Not Before: Mar 28 01:07:10 2025 GMT
            Not After : Mar 31 06:05:10 2025 GMT
        Subject: CN=FAAF6DF4F9D533ABDDD5A05757AF05513DB367AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:2d:e9:d0:94:71:a7:7a:ba:7a:5c:4b:4e:
                    6a:87:37:52:74:f5:f2:dd:85:03:22:ae:11:0b:1a:
                    79:ff:8a:51:48:86:e2:64:04:e1:32:37:aa:ac:5b:
                    11:12:72:f0:cd:bd:d1:42:30:e5:07:c9:22:09:4f:
                    b0:dc:24:24:53:18:1d:5a:be:7c:42:3f:51:40:ff:
                    a1:ae:62:b5:2c:d1:5b:f3:58:65:93:b5:5e:2a:e2:
                    7b:94:b5:d0:fa:8c:8b:08:0c:36:84:7b:18:61:d2:
                    62:03:61:50:18:75:ba:a0:ef:3b:8a:c8:8c:f1:c2:
                    be:db:ad:f7:97:97:3b:5b:aa:f8:bc:0f:ef:60:2c:
                    20:b1:35:a1:8e:b0:8e:78:86:0c:99:ee:59:39:d9:
                    99:87:11:cd:04:a1:4f:d8:9f:73:f4:87:70:26:6d:
                    30:4d:bb:02:f2:80:5e:f8:a2:f9:59:fb:3b:9d:4f:
                    10:0a:19:67:2d:c0:1a:ce:42:d6:b0:d9:53:df:96:
                    84:59:e0:04:2e:f7:60:1f:b9:1f:d6:1a:f0:f2:81:
                    ae:07:f6:ea:b5:b0:ad:e1:d0:db:12:f1:ed:4f:6a:
                    79:b2:87:b1:d5:b2:f0:50:0d:c6:b5:40:ea:25:ec:
                    6d:95:e7:d1:93:c7:68:3f:d1:fb:d2:d1:07:a0:32:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:6D:F4:F9:D5:33:AB:DD:D5:A0:57:57:AF:05:51:3D:B3:67:AD
            X509v3 Authority Key Identifier:
                keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:a3:05:2b:d3:33:3d:6a:ab:5f:40:f9:f7:ad:aa:9c:51:
         70:ea:36:25:c3:76:0f:c2:cc:23:4c:ab:97:58:3a:a9:98:7a:
         d2:9e:8a:1f:63:cc:d0:02:b6:e8:0d:64:38:ce:15:46:9b:8d:
         cd:cc:2f:42:01:26:ad:06:0a:c6:34:58:7b:d2:c9:f5:95:87:
         66:68:95:f4:0a:b6:3e:cd:5d:5e:11:d0:4f:89:96:9a:1f:58:
         2f:88:7d:30:bd:5e:1c:9d:62:54:56:b9:2f:b8:24:39:ab:cc:
         ab:93:57:cb:1b:92:d8:af:67:c7:7f:af:71:8c:f9:32:f1:35:
         83:6c:70:10:3e:07:7f:ce:2e:56:42:a1:3e:0d:c6:3f:c7:7e:
         60:cf:c7:fe:8f:f5:55:f2:c4:20:4c:66:be:41:7d:4a:c8:52:
         41:ab:fb:9d:fc:02:7e:27:b5:3c:7c:7c:7a:66:d3:4e:8c:7c:
         62:dd:82:4a:0b:5e:77:cb:a3:2b:a6:c4:4d:af:58:6d:0d:13:
         0f:c0:fd:60:9f:91:f1:bc:3d:ff:30:6c:a6:4a:f4:61:5a:39:
         ad:48:b0:40:27:bb:f0:90:25:e4:6e:a5:92:48:a6:b8:6e:3d:
         18:a3:99:6f:38:39:fc:ae:4e:e0:dd:d1:33:8d:db:43:05:ff:
         81:af:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----