Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft
File:                     A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json)
Hash identifier:          UiyR8ryOmZmcSbgv+gW3G0L79mYp8WY1UBZVX+ijgSs=
Subject key identifier:   F9:7A:81:94:3B:F3:07:5C:B5:3D:5D:95:C9:8C:E2:92:07:7D:E5:84
Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48
Certificate issuer:       /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848
Certificate serial:       5A078428D73733B8518AAFFA3E41A5A39B1E20FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft
Manifest number:          A3
Signing time:             Fri 28 Mar 2025 06:02:17 +0000
Manifest this update:     Fri 28 Mar 2025 05:57:17 +0000
Manifest next update:     Mon 31 Mar 2025 17:59:17 +0000
Files and hashes:         1: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=)
                          2: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=)
                          3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=)
                          4: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: CAgsqQHVCPJrkyM/R1AVwS8NhUfxYLXqPAbSRRat4iE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:07:84:28:d7:37:33:b8:51:8a:af:fa:3e:41:a5:a3:9b:1e:20:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848
        Validity
            Not Before: Mar 28 05:57:17 2025 GMT
            Not After : Mar 31 17:59:17 2025 GMT
        Subject: CN=F97A81943BF3075CB53D5D95C98CE292077DE584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c2:b4:28:58:2b:74:6b:37:3b:9a:41:d8:d4:
                    ab:28:ce:f7:3f:1e:a1:e3:d6:99:56:70:b2:55:8b:
                    75:de:ac:5f:22:2b:a4:93:f7:41:19:6a:d9:bd:ad:
                    a8:ee:9b:b3:e4:ba:18:91:d8:4f:70:1f:15:71:bb:
                    72:09:35:a9:48:e8:29:a2:06:da:a6:aa:87:f9:4d:
                    fc:e7:63:25:d4:6d:e7:77:27:ba:33:09:b5:d9:b8:
                    e7:1f:3b:eb:d8:e2:ea:99:6e:95:66:61:ea:93:5f:
                    80:7f:41:73:8a:86:35:7c:ae:d6:03:0c:fc:de:01:
                    93:62:89:c0:10:66:da:3e:e0:3b:20:3e:99:f6:46:
                    9e:29:50:e7:13:d5:5e:20:00:3f:05:4a:33:f0:16:
                    67:47:04:7f:8a:a8:7f:69:93:f9:ed:22:1c:55:4f:
                    5f:9b:3c:21:bc:c7:0b:aa:60:6f:9e:04:89:91:30:
                    d5:c5:4c:67:7e:34:79:dd:bd:ba:20:6a:c8:12:a5:
                    5c:81:31:85:ea:4f:a3:ba:e1:22:90:73:9c:7b:4e:
                    a8:3f:c0:46:ef:15:de:54:27:f6:0b:49:98:e7:2a:
                    d3:3f:9a:3d:7b:07:fb:dd:9d:50:8f:54:2b:e4:4e:
                    06:62:a1:e9:3a:7f:af:ce:d7:b7:d9:e9:c5:08:0d:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:81:94:3B:F3:07:5C:B5:3D:5D:95:C9:8C:E2:92:07:7D:E5:84
            X509v3 Authority Key Identifier:
                keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:1d:08:a1:57:30:aa:b2:43:c5:1d:8e:c1:ff:5d:7d:8e:
         b0:d7:8c:f0:b3:5f:76:2b:13:55:5c:f9:40:af:9f:0a:33:fc:
         e1:7c:24:d4:11:7c:9a:c0:b5:d9:26:1d:45:ff:2f:b9:51:a2:
         cb:72:01:4d:57:b8:d5:6f:3b:6d:ab:c0:6b:07:83:d4:cb:eb:
         71:d2:6d:b5:46:2c:c0:c0:e0:18:ff:ee:ab:81:94:17:79:78:
         0f:96:41:f1:ac:cb:f4:53:47:98:7b:38:f2:15:48:eb:a3:a1:
         67:a9:77:59:3a:79:be:7a:e5:11:f9:8a:a6:92:38:7c:9b:17:
         d0:f2:05:a8:07:e2:f7:f4:93:ec:2e:46:ed:01:9f:74:45:55:
         69:f4:2c:59:d0:b9:95:eb:7b:e2:46:c3:68:82:af:72:cb:7e:
         09:f0:a4:e9:29:c9:90:d0:94:f5:6d:67:45:45:30:fc:33:e3:
         5f:54:b6:ba:45:65:54:44:94:ad:eb:17:67:cd:e6:7c:d7:5e:
         8b:8e:d2:c2:d2:30:c7:de:fc:7c:59:fb:b9:66:a8:9d:71:a0:
         0f:72:e4:bc:22:5a:0d:84:0e:9d:e8:13:88:28:a7:51:15:b9:
         51:35:a1:e2:ae:72:cd:af:87:7b:c8:cd:e1:2c:b3:bf:e3:45:
         17:14:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----