Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft
File:                     5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json)
Hash identifier:          Bxa4kGf+egFwjIC3DPgSgrHL1RIP3gaYi8ce6tVArsE=
Subject key identifier:   8E:97:5C:30:82:68:CA:63:0D:97:6B:E9:47:7A:64:70:44:A0:5D:58
Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70
Certificate issuer:       /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
Certificate serial:       621FA173BC3FC34EF20062567AFEB4C856CDB50E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft
Manifest number:          0243
Signing time:             Thu 27 Mar 2025 14:50:48 +0000
Manifest this update:     Thu 27 Mar 2025 14:45:48 +0000
Manifest next update:     Sun 30 Mar 2025 16:10:48 +0000
Files and hashes:         1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: nmjZ9XFKx4RdrPC0fphOqiuvrglymXydwGaIs3uyulg=)
                          2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5P014E1vh45qM6aR+Ldp3g4rfdACGPl5tqqo9VwzVBw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1f:a1:73:bc:3f:c3:4e:f2:00:62:56:7a:fe:b4:c8:56:cd:b5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
        Validity
            Not Before: Mar 27 14:45:48 2025 GMT
            Not After : Mar 30 16:10:48 2025 GMT
        Subject: CN=8E975C308268CA630D976BE9477A647044A05D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:56:af:f8:45:b2:05:62:a5:d4:fc:98:6e:
                    b5:26:4a:43:73:c8:0f:72:98:d7:ed:94:fc:11:a1:
                    57:bb:ba:85:63:47:95:73:eb:62:06:82:b8:f1:cb:
                    36:97:69:ed:90:09:10:79:4a:08:be:a6:34:c9:32:
                    2b:05:75:2d:09:62:b3:6b:e1:4a:c2:67:56:9e:ac:
                    a0:85:e4:ab:62:d6:0c:65:26:d9:91:15:12:7b:b5:
                    d0:b5:1e:38:4f:7c:b4:a4:33:22:8b:5b:ee:d0:08:
                    e5:a8:8b:1f:fd:ed:72:b8:dc:8a:3d:5c:fa:5a:0c:
                    44:39:6d:c1:29:1f:20:9a:53:f7:62:c4:bd:e5:d8:
                    a4:09:5c:bd:ed:40:10:39:6e:0d:74:0b:a2:62:9b:
                    2a:41:4c:8c:ae:84:f2:a2:78:25:c4:0d:c9:7e:51:
                    ca:38:e1:10:c1:4a:3b:4d:41:ca:6a:95:a1:1a:bf:
                    4b:5f:4f:ac:4e:2d:31:7f:aa:73:88:36:de:0d:d5:
                    4c:1e:8d:04:9a:2b:a7:ce:68:30:ba:60:bc:8c:99:
                    ec:1c:f0:ec:99:64:6b:90:e2:8e:10:02:2e:c9:6c:
                    fe:e5:d4:a5:eb:6f:88:cd:74:ac:4d:c1:22:b4:97:
                    8a:63:e0:d6:2d:b8:dd:34:fd:4d:a2:eb:58:53:73:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:5C:30:82:68:CA:63:0D:97:6B:E9:47:7A:64:70:44:A0:5D:58
            X509v3 Authority Key Identifier:
                keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:81:b8:e8:c5:c3:e8:1f:90:a5:c5:79:3f:71:0f:4a:5a:93:
         34:7b:7c:c6:e5:a2:b9:6a:7a:a6:e2:02:03:71:75:10:ba:6f:
         b2:d2:bf:eb:8c:fb:8c:64:88:2d:89:76:02:ed:1f:bd:8f:1e:
         27:6a:72:b2:0e:a3:30:94:d8:09:e1:a6:80:56:1c:f9:0e:87:
         c6:a8:3c:28:4a:62:0b:69:66:80:0e:04:f8:53:c6:c6:f6:d2:
         ea:ae:6c:39:8e:1f:53:ec:cc:b8:fb:92:17:e3:69:28:ac:0d:
         c3:8b:33:ba:f9:cb:6e:5a:80:ff:1f:31:f3:9b:06:3d:2d:2c:
         12:dc:5a:60:76:a4:95:e5:f1:50:04:e4:ef:4c:1d:eb:b3:fe:
         5a:68:61:14:47:c6:b3:3a:4f:de:66:4c:d3:2f:ea:92:fc:06:
         7f:3f:7f:f3:6a:9c:72:c6:7e:8b:aa:37:cd:20:a5:23:d5:02:
         b4:a0:40:5c:71:89:62:c7:69:1d:58:a1:5b:a1:80:47:19:6d:
         c2:22:83:d6:5b:f9:59:ef:33:d2:7f:af:39:c7:b9:79:3b:d2:
         fb:c5:62:af:c4:f2:62:c1:b8:29:37:28:29:19:eb:e5:67:d0:
         31:8f:52:10:ca:63:b1:0c:5e:ec:55:be:bf:d4:2f:47:ea:e6:
         a4:4f:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----