Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
File:                     FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json)
Hash identifier:          LBEG2wwOPP5Yj0vXMnhYmYssqiQQp/oOShbliqw8TyU=
Subject key identifier:   75:73:10:65:85:9B:E1:55:FC:E3:79:F0:BD:FC:3C:1C:B4:7D:7A:23
Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
Certificate issuer:       /CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Certificate serial:       66A1CB1F166FA067FDC0382ED773774C9D430D11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
Manifest number:          95
Signing time:             Thu 27 Mar 2025 08:21:43 +0000
Manifest this update:     Thu 27 Mar 2025 08:16:43 +0000
Manifest next update:     Sun 30 Mar 2025 15:07:43 +0000
Files and hashes:         1: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: kVAu3KyWXvKIwQJjGOhFYfzSiSFyjfTHHc0SdPz1+os=)
                          2: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: xIrVfMAVvHhmcmv3uU3iTVpmFtyqzBFBLDzWz/fYV6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:cb:1f:16:6f:a0:67:fd:c0:38:2e:d7:73:77:4c:9d:43:0d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309
        Validity
            Not Before: Mar 27 08:16:43 2025 GMT
            Not After : Mar 30 15:07:43 2025 GMT
        Subject: CN=75731065859BE155FCE379F0BDFC3C1CB47D7A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:47:12:bd:23:aa:c2:99:3b:9a:a2:ee:ef:
                    81:ed:6c:e1:ab:57:dd:6a:69:0a:5e:25:6e:dc:6f:
                    84:77:d4:3e:ac:63:3f:3e:f1:d1:46:1b:63:42:83:
                    1d:67:b8:4b:fe:e1:d0:eb:e2:74:b6:30:df:19:0a:
                    a2:50:b0:56:5e:fe:5c:21:a9:0f:ea:d9:a2:6c:58:
                    7e:27:d5:fe:35:51:23:73:f8:32:81:50:45:7a:fd:
                    12:8f:1b:fc:c6:fb:fc:95:d6:1f:fa:85:98:9b:ff:
                    ff:0e:75:b0:dc:17:b1:e6:db:87:f2:f6:35:ac:09:
                    27:57:12:ba:b9:d8:48:33:84:17:36:ff:e6:5d:30:
                    9b:19:ad:49:7b:f1:a7:f7:9a:51:0e:39:2b:21:a0:
                    ac:fd:8d:bb:b9:d1:bc:62:ca:1f:67:93:f2:3e:89:
                    61:e0:d5:8e:4d:a1:58:8a:9f:f8:e8:28:7b:87:21:
                    ed:fe:83:51:98:66:30:47:c6:09:0b:25:59:60:e3:
                    b2:a3:bd:37:9d:dd:99:d5:04:ae:9f:7f:6d:fa:63:
                    1c:82:c4:ec:2a:f0:f7:36:df:05:d6:8c:4f:c8:aa:
                    56:d7:0e:42:81:77:2c:a1:36:18:1a:f0:2a:81:fc:
                    ea:6f:73:b7:cb:29:97:ec:f2:38:dc:4e:e3:00:e4:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:10:65:85:9B:E1:55:FC:E3:79:F0:BD:FC:3C:1C:B4:7D:7A:23
            X509v3 Authority Key Identifier:
                keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:16:e2:c0:72:33:cd:bd:d2:19:e8:5e:b1:16:0a:8b:d8:
         a6:5a:fa:db:5f:d6:44:1f:a0:bf:3c:88:e8:46:9e:31:2f:8b:
         bd:aa:47:2d:62:f8:04:52:b3:15:24:cc:63:55:a3:5e:a0:ad:
         f5:c9:bc:9b:4d:bf:18:9d:c9:9e:a7:18:53:cd:15:9c:bc:88:
         48:19:ed:39:4f:36:de:1e:a0:07:0f:bb:39:77:d9:e2:aa:c3:
         de:68:c2:33:49:92:1d:72:42:3d:9c:40:58:3a:9b:e8:15:60:
         17:69:b4:db:41:1d:2a:2b:59:23:a9:13:09:d4:72:01:84:dd:
         c3:79:af:b6:63:0e:8b:71:f6:00:af:40:56:23:d6:c4:3f:9d:
         37:46:57:f2:46:3a:82:3f:ae:bc:e0:11:66:c0:a2:e7:43:73:
         c0:42:20:fc:04:63:a4:71:9d:f8:8b:6c:9a:ad:6e:a9:1c:96:
         a6:51:96:53:4d:e5:3c:d6:e0:b2:21:8b:ca:0f:d2:55:d2:fa:
         b0:59:74:3b:9b:6b:86:5c:01:aa:42:86:9b:14:43:03:2b:7c:
         ec:82:8d:00:4a:ae:fc:a2:f7:4d:84:f7:1d:e6:c4:e9:7d:94:
         40:d5:40:9e:e0:dc:07:d4:ff:14:66:54:16:20:9c:e2:79:f8:
         8c:94:14:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZqHLHxZvoGf9wDgu13N3TJ1DDREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThE
Njk3ODMwOTAeFw0yNTAzMjcwODE2NDNaFw0yNTAzMzAxNTA3NDNaMDMxMTAvBgNV
BAMTKDc1NzMxMDY1ODU5QkUxNTVGQ0UzNzlGMEJERkMzQzFDQjQ3RDdBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl4kcSvSOqwpk7mqLu74HtbOGr
V91qaQpeJW7cb4R31D6sYz8+8dFGG2NCgx1nuEv+4dDr4nS2MN8ZCqJQsFZe/lwh
qQ/q2aJsWH4n1f41USNz+DKBUEV6/RKPG/zG+/yV1h/6hZib//8OdbDcF7Hm24fy
9jWsCSdXErq52EgzhBc2/+ZdMJsZrUl78af3mlEOOSshoKz9jbu50bxiyh9nk/I+
iWHg1Y5NoViKn/joKHuHIe3+g1GYZjBHxgkLJVlg47KjvTed3ZnVBK6ff236YxyC
xOwq8Pc23wXWjE/IqlbXDkKBdyyhNhga8CqB/Opvc7fLKZfs8jjcTuMA5EuPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdXMQZYWb4VX843nwvfw8HLR9eiMwHwYDVR0j
BBgwFoAU/ErgXBVHt3gGP5HEaH0S6NaXgwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Y2YwYTc3Yy0zOTI4LTQxMzAtYTA5OC1iNDM3NTcyZDcyMmMvMC9GQzRBRTA1QzE1
NDdCNzc4MDYzRjkxQzQ2ODdEMTJFOEQ2OTc4MzA5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEyRThENjk3
ODMwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw
OTgtYjQzNzU3MmQ3MjJjLzAvRkM0QUUwNUMxNTQ3Qjc3ODA2M0Y5MUM0Njg3RDEy
RThENjk3ODMwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJbFuLAcjPNvdIZ6F6xFgqL2KZa+ttf1kQf
oL88iOhGnjEvi72qRy1i+ARSsxUkzGNVo16grfXJvJtNvxidyZ6nGFPNFZy8iEgZ
7TlPNt4eoAcPuzl32eKqw95owjNJkh1yQj2cQFg6m+gVYBdptNtBHSorWSOpEwnU
cgGE3cN5r7ZjDotx9gCvQFYj1sQ/nTdGV/JGOoI/rrzgEWbAoudDc8BCIPwEY6Rx
nfiLbJqtbqkclqZRllNN5TzW4LIhi8oP0lXS+rBZdDuba4ZcAapChpsUQwMrfOyC
jQBKrvyi902E9x3mxOl9lEDVQJ7g3AfU/xRmVBYgnOJ5+IyUFEE=
-----END CERTIFICATE-----