Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft
File:                     DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json)
Hash identifier:          hN6PTa0eb8RKBxrBrHxGlY+oOOdjomEy120bDXu9CsM=
Subject key identifier:   41:86:71:F9:6A:A0:04:24:33:73:54:00:B1:C2:CA:68:AD:95:E2:91
Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2
Certificate issuer:       /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2
Certificate serial:       1A26681D5F20B64D0E31F43CE3B734F5A632C3A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft
Manifest number:          01FC
Signing time:             Fri 28 Mar 2025 02:01:52 +0000
Manifest this update:     Fri 28 Mar 2025 01:56:52 +0000
Manifest next update:     Mon 31 Mar 2025 10:50:52 +0000
Files and hashes:         1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=)
                          2: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: 51LNKgnUsO2lBhZMgPtGLkW1ub1nvvvhDQL7PS+Z410=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:26:68:1d:5f:20:b6:4d:0e:31:f4:3c:e3:b7:34:f5:a6:32:c3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2
        Validity
            Not Before: Mar 28 01:56:52 2025 GMT
            Not After : Mar 31 10:50:52 2025 GMT
        Subject: CN=418671F96AA0042433735400B1C2CA68AD95E291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:d6:10:25:78:7a:6a:a3:cb:95:56:a3:81:
                    71:34:68:6d:89:f6:47:c5:e1:d3:e9:09:a7:e4:0c:
                    32:d0:c8:0b:a7:63:ff:f5:19:66:f1:d0:b7:8d:fa:
                    87:51:da:42:3f:ae:64:40:be:44:86:7c:33:b3:81:
                    91:3b:f7:66:6e:7a:a2:ee:47:aa:bd:31:cc:53:f4:
                    0b:61:d8:26:51:86:07:ed:dd:71:ea:7b:37:ce:cc:
                    19:2a:ab:7b:d4:69:21:d9:3d:aa:bd:1f:cb:e9:07:
                    36:9b:fb:76:11:db:1b:24:33:83:38:6f:76:7d:eb:
                    1c:63:c2:13:e9:0f:fe:ed:a5:99:46:86:ab:70:98:
                    ca:99:2a:8d:e4:7f:61:fd:b3:fa:4e:fc:1e:06:45:
                    49:a0:b1:d0:9b:be:28:4a:76:e4:ea:4b:e6:44:03:
                    8e:25:33:6e:d3:d7:5d:2c:b2:2b:76:75:41:ed:25:
                    73:3b:19:d3:43:ea:31:54:5d:e6:df:e1:5c:c2:19:
                    fb:ff:51:6a:78:8d:5c:96:af:9d:14:c1:a6:44:62:
                    1b:d2:f4:e5:c5:0f:08:56:84:f3:b3:be:36:87:3c:
                    73:33:36:b3:ec:05:d3:46:b8:ac:7f:f9:87:0b:c4:
                    2c:75:0a:26:43:e5:05:6f:1a:bc:bd:18:95:42:cf:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:86:71:F9:6A:A0:04:24:33:73:54:00:B1:C2:CA:68:AD:95:E2:91
            X509v3 Authority Key Identifier:
                keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:44:eb:f6:db:2c:a0:3b:15:7f:ff:cf:44:6d:a7:4d:04:56:
         7a:46:e5:f4:69:ed:62:6c:7e:ee:5b:e7:0d:75:4f:48:b3:fe:
         32:b9:f3:53:29:3d:e5:bf:30:49:63:9a:c0:b3:8f:72:da:08:
         ec:b1:d7:78:f2:b8:98:56:ad:eb:60:10:0f:5b:3e:65:d8:e2:
         ea:40:50:49:33:03:a4:57:d8:6a:ec:53:b4:0f:1f:59:71:10:
         6a:84:0a:11:0f:ef:bf:b3:b8:3a:3d:8e:fb:e4:04:98:c9:fc:
         d2:a2:d7:73:4b:2e:8f:04:1c:f2:e0:cd:e4:06:7d:8e:b8:d9:
         ba:c4:d0:98:be:34:36:15:6d:29:a2:98:a4:16:fb:39:6c:37:
         07:b0:3f:67:aa:1e:e6:6d:64:a3:fa:f8:a7:ef:76:0b:92:d1:
         78:48:96:fa:ad:df:81:22:41:1c:3a:1a:bc:e3:01:c1:a3:41:
         ec:e7:ca:fa:02:30:38:1b:66:89:fe:26:dc:a7:f9:d7:bb:5c:
         50:9b:a9:d3:a1:71:aa:5e:1e:b7:af:05:ab:75:43:46:1b:5a:
         f2:c3:e8:3b:e8:8f:87:24:5a:54:ec:a2:e9:ce:81:e1:6e:fc:
         0d:f3:9f:f0:0f:da:ca:8c:43:78:e8:80:31:68:60:ae:f1:5f:
         38:23:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----