Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft
File:                     3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json)
Hash identifier:          9w4TYQY42MSfO2FtU9VXnHWJadFgK3fLdBlmdOsvM0M=
Subject key identifier:   CB:2C:FC:B6:B9:DA:5B:27:F1:83:5C:F3:8E:7E:EE:75:FA:49:17:BB
Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2
Certificate issuer:       /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2
Certificate serial:       7AE03491813BA719E58862F3B812C3B4B0AEE9B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft
Manifest number:          048E
Signing time:             Thu 27 Mar 2025 21:00:45 +0000
Manifest this update:     Thu 27 Mar 2025 20:55:45 +0000
Manifest next update:     Mon 31 Mar 2025 02:11:45 +0000
Files and hashes:         1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: d+nfnjCsbiPpOIGuPHqRJuwI1k0eYV7w110MM9ODbuc=)
                          2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:34:91:81:3b:a7:19:e5:88:62:f3:b8:12:c3:b4:b0:ae:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2
        Validity
            Not Before: Mar 27 20:55:45 2025 GMT
            Not After : Mar 31 02:11:45 2025 GMT
        Subject: CN=CB2CFCB6B9DA5B27F1835CF38E7EEE75FA4917BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:64:9f:ca:8e:94:f5:49:cd:a9:60:f4:45:
                    4c:69:6b:3c:fa:3b:13:66:c4:d5:13:ac:bb:ba:38:
                    93:50:b9:8b:10:ea:9a:e6:89:c1:f6:b7:a5:fd:ca:
                    2d:1a:09:90:d6:b8:14:80:22:f2:a2:fa:b8:fe:b4:
                    d3:75:e5:43:d9:5f:da:01:1e:7c:39:9b:e9:80:3f:
                    69:27:3d:be:f6:67:1f:ee:4f:9e:c2:45:4e:d4:fa:
                    b4:a4:97:27:78:e6:f0:a2:ec:a3:48:58:65:76:dd:
                    88:7a:46:5a:6c:3d:8d:63:e3:07:30:da:f5:32:8d:
                    0e:14:9e:d2:ab:e2:87:78:8b:b0:4b:08:c6:cf:b8:
                    8d:45:be:0f:5d:29:c9:6c:8c:a8:de:f7:42:0c:de:
                    86:34:0a:53:38:39:31:75:ee:9d:6f:36:13:11:3d:
                    9a:c0:fa:90:1b:42:ce:ac:55:07:9c:ef:8d:aa:81:
                    6a:07:e8:0b:48:1d:65:45:a9:b1:34:e0:b8:dd:a1:
                    e2:24:cf:2e:c7:ef:91:e1:9d:24:f6:c2:b4:84:42:
                    a6:4a:58:a0:6f:b8:bc:4a:46:10:f1:71:bb:32:48:
                    cd:93:72:be:c6:7b:09:cb:8c:ce:19:98:a9:7f:7d:
                    9f:fe:73:2a:4a:8f:f5:4d:b5:b1:46:6c:7f:12:62:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:FC:B6:B9:DA:5B:27:F1:83:5C:F3:8E:7E:EE:75:FA:49:17:BB
            X509v3 Authority Key Identifier:
                keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:8f:c8:54:83:66:4d:49:71:86:92:be:1c:00:10:6f:2d:99:
         c2:61:80:38:b6:63:39:cd:8b:e9:26:60:2c:aa:a3:73:66:48:
         2f:2b:51:44:9e:f1:68:af:45:a8:fd:da:c7:93:a4:83:bb:09:
         fc:9a:ec:0b:f5:16:1b:f4:9b:8c:84:0e:2b:63:6a:31:1d:dc:
         8c:c7:8b:3f:39:27:4d:1c:f0:30:b7:d4:c0:c5:fa:eb:d3:b6:
         87:6b:70:4a:80:5a:4d:7b:a2:d6:ec:23:a8:aa:7d:8e:78:69:
         c5:87:47:87:2f:03:6b:ab:c0:6d:1f:8b:83:f1:b4:3e:96:13:
         80:b5:ae:07:9d:96:6b:f7:f8:9c:89:53:2a:a1:2a:13:e5:27:
         e0:19:cb:71:73:18:d3:b4:27:b4:17:5b:85:1c:d5:1a:e2:c8:
         b0:a0:e8:2c:a5:39:ce:09:be:03:4d:f7:1d:79:fe:80:1b:94:
         f4:97:ef:b5:20:66:b1:4e:68:fc:79:24:92:f4:4d:b2:34:b8:
         83:dc:15:56:6e:27:a3:7a:e9:aa:1a:fa:58:6a:0f:c3:61:99:
         6d:57:c2:ab:a3:70:ab:0d:47:71:79:b4:b7:6b:ec:3a:1c:95:
         42:15:93:e6:e0:cb:95:84:7e:49:7c:f7:bf:2c:d6:87:03:b2:
         0d:0c:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----