Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft
File:                     2985976A4B3081770748882703E16497964D05A6.mft (raw, json)
Hash identifier:          VqqtPezcK91mCb/6GAV1XII9HdIx/3Cj/XunPC/gctA=
Subject key identifier:   85:33:0F:70:1C:23:F6:71:79:5F:1C:10:8E:47:C7:1A:C3:5A:C3:CF
Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6
Certificate issuer:       /CN=2985976A4B3081770748882703E16497964D05A6
Certificate serial:       5498F32EF39AF6730163E126D0CEAF72F396BEDF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft
Manifest number:          01AB
Signing time:             Fri 28 Mar 2025 19:30:35 +0000
Manifest this update:     Fri 28 Mar 2025 19:25:35 +0000
Manifest next update:     Mon 31 Mar 2025 21:33:35 +0000
Files and hashes:         1: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: BerVZ23TVRI4dwt9lyBc2AUhwZ05yfxMPrju4y+LAeE=)
                          2: 2985976A4B3081770748882703E16497964D05A6.crl (hash: htBauTyLbs/Mvecc261O+tnBdH9kTrtZsUYWudQM0P0=)
                          3: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: ERxIPVPynr8Zqyd/erBxd/JSZglWN0mqL6sn5XfEVLc=)
                          4: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: FPt98Jlb07JrGQGNjE2/vKY/2MGs525PrXsgLkmv66M=)
                          5: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: To2RtUGQFhlqilx+fqPMxzWWGUOkUvTK0ofRYTXx5FY=)
                          6: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: rqdaT3dhU4vRh0lUQmFU0b1pAjqoq7sorljrl78YDwk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:98:f3:2e:f3:9a:f6:73:01:63:e1:26:d0:ce:af:72:f3:96:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2985976A4B3081770748882703E16497964D05A6
        Validity
            Not Before: Mar 28 19:25:35 2025 GMT
            Not After : Mar 31 21:33:35 2025 GMT
        Subject: CN=85330F701C23F671795F1C108E47C71AC35AC3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:40:96:ef:6a:95:03:a6:c1:85:a8:ea:e6:
                    5f:53:4a:b9:da:00:6d:78:07:e5:f7:58:67:7d:ef:
                    35:ef:63:e4:8c:6e:8e:ef:d6:3f:36:f5:3f:4b:07:
                    ef:6d:fa:f6:7a:e7:d1:d9:d6:de:be:99:a5:e8:6e:
                    14:5e:37:17:39:26:eb:9a:b4:75:5a:4c:95:75:77:
                    75:8d:54:3d:86:3b:3b:cb:0f:05:96:12:62:71:f1:
                    6a:97:f2:ed:dc:ae:56:0c:57:bd:e2:0e:a1:1a:2b:
                    54:f2:de:b9:ea:39:c6:08:38:4b:45:04:40:52:4a:
                    be:d4:c0:59:9d:f7:5b:b9:76:2a:50:8b:e5:21:a1:
                    6c:55:39:be:dd:aa:f3:70:9a:a2:bf:b6:16:45:75:
                    f4:dd:ac:42:cf:5e:c5:2c:46:5d:5d:e5:ee:45:fe:
                    89:d7:d5:18:b6:27:29:fe:1e:d4:c4:a4:fb:f5:fa:
                    61:2d:e1:10:a3:08:b9:9b:25:02:b3:07:41:7a:52:
                    b0:64:03:54:f7:37:8a:33:d2:0f:c7:4e:70:2c:35:
                    79:58:5a:a4:1c:c9:94:cb:7e:fc:45:a9:12:92:4f:
                    41:dd:1b:b2:17:76:51:8c:74:d6:5a:c5:85:a8:d8:
                    85:45:f4:00:74:98:a3:55:dd:f3:3f:67:99:d4:31:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:0F:70:1C:23:F6:71:79:5F:1C:10:8E:47:C7:1A:C3:5A:C3:CF
            X509v3 Authority Key Identifier:
                keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:40:e6:aa:2b:9a:ba:5a:ff:60:72:37:e3:ba:cc:24:96:
         16:2d:e6:8c:3f:42:a5:28:6d:8f:56:b6:93:29:39:33:29:46:
         ec:27:b1:c9:33:f4:82:1a:61:c2:93:ba:39:a6:f9:4f:25:6f:
         54:8a:ff:9f:b5:53:03:fa:52:1d:bd:b8:40:91:5e:1e:62:9e:
         f6:00:a2:59:49:69:dd:45:98:39:84:5c:ff:44:f8:3e:3c:9a:
         61:66:6d:f6:b6:d8:2d:e5:9b:d5:a6:59:e9:17:a6:b6:46:da:
         07:e1:80:d1:d3:f3:fa:2e:f8:7e:9b:ea:95:88:f2:70:0b:5b:
         58:cf:4f:12:34:a9:34:59:88:a2:d1:56:6c:b5:a8:13:37:0e:
         79:51:c2:28:da:76:f6:f6:22:42:95:8e:6b:ab:32:86:70:01:
         35:00:a2:f8:28:0e:81:59:2d:75:61:c4:fd:2e:88:0e:cc:db:
         29:15:2e:5d:f0:a5:34:9e:fd:d1:93:72:1b:02:f9:54:5a:3b:
         bf:ce:8d:02:7b:f6:f8:f6:6f:5d:1d:4c:e5:aa:22:f5:49:77:
         08:96:9a:dc:3c:36:1c:ce:0f:a1:09:ee:9f:86:4c:62:b2:cb:
         61:1b:2c:ec:de:7e:11:10:a9:e2:37:19:56:85:37:7a:22:35:
         66:1f:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----