Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
File:                     2D18956397FA6055A44153CABF07303FD6E55E44.mft (raw, json)
Hash identifier:          3dD9279Szh9jtF5DBST48kbs7t/eqGlLC2n+3tKM9u0=
Subject key identifier:   02:14:20:44:CB:1F:9B:7D:52:AD:27:F6:3A:AC:A2:74:3C:45:9A:45
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Certificate issuer:       /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial:       166F72361C717FAA60A5F6B30F560EA85E836B0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
Manifest number:          04C7
Signing time:             Thu 27 Mar 2025 17:42:00 +0000
Manifest this update:     Thu 27 Mar 2025 17:37:00 +0000
Manifest next update:     Mon 31 Mar 2025 01:22:00 +0000
Files and hashes:         1: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: 9pt7JLtOWMCBsJXp8H1J28V9N/OUvx5VflNai/uQZgc=)
                          2: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HyMWadhCrBlbrvw7eV4dA67xhQ9znG8zfhfFTeZs2rs=)
                          3: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: 1cZaLW2bYSVuCFR3p6/QnCg+KIF2tEt9ZDlyjUYN2tI=)
                          4: 2D18956397FA6055A44153CABF07303FD6E55E44.crl (hash: ujbziARKreByY4Ao1SCs6SezkTjFSZXckP6kr7tHA4E=)
                          5: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: LMlg0YtMMAZTGP6EzKXImD6a6ZjUtLMQ+VabkB5A5lc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:72:36:1c:71:7f:aa:60:a5:f6:b3:0f:56:0e:a8:5e:83:6b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
        Validity
            Not Before: Mar 27 17:37:00 2025 GMT
            Not After : Mar 31 01:22:00 2025 GMT
        Subject: CN=02142044CB1F9B7D52AD27F63AACA2743C459A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:68:80:3f:bd:fd:f9:b4:d4:09:f7:3a:b6:
                    45:01:3f:8a:e0:24:d1:67:b8:de:fd:21:20:fc:04:
                    0d:bb:cf:6b:91:ed:b9:55:bd:2b:8e:54:4c:c3:f1:
                    ba:54:a9:76:60:21:4b:2a:11:75:db:f7:ee:01:fb:
                    9d:18:b2:5e:c4:88:ff:1e:3c:57:69:d1:af:ce:e4:
                    be:2f:79:3e:04:8f:34:54:d3:99:81:fc:51:d2:5f:
                    b2:ab:31:ad:45:6e:be:d5:ff:27:16:02:62:fa:06:
                    cb:7f:ca:9f:a7:80:9e:96:28:e9:3b:9b:fb:d5:de:
                    1f:62:ba:87:dc:32:6e:f8:e5:8e:64:a8:a9:80:71:
                    fc:a3:d1:e5:44:48:ac:d4:55:b1:44:c8:98:a6:b8:
                    a2:67:4b:5c:fd:f3:f2:fd:9f:41:56:bc:98:ef:17:
                    36:f8:0a:86:48:62:bf:4b:41:c0:c9:28:a6:66:d3:
                    ad:53:5b:80:9a:d7:9c:35:2e:ea:22:db:df:3f:5a:
                    4d:ba:e6:42:08:e7:0f:9f:1c:be:c0:56:65:13:0d:
                    ee:75:4f:1d:5d:bf:a7:00:fd:ff:1c:5a:40:21:0a:
                    98:7b:79:f8:9d:bd:31:69:cb:c0:d6:86:0c:18:ce:
                    df:10:99:be:d5:04:84:28:60:b6:d8:6a:d8:b3:33:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:20:44:CB:1F:9B:7D:52:AD:27:F6:3A:AC:A2:74:3C:45:9A:45
            X509v3 Authority Key Identifier:
                keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:61:fa:c4:c4:61:73:09:fd:53:8c:f8:7f:c3:6c:7b:f9:fd:
         a4:57:69:73:77:c6:51:16:a2:39:17:b0:aa:30:30:42:c3:9c:
         6d:fe:c1:3c:2a:a2:24:d1:4c:6c:c4:13:3d:c5:2e:af:f2:44:
         2b:93:b3:a4:9c:a3:dd:29:b1:33:f9:bd:ae:f4:c6:bb:4c:48:
         83:22:40:cf:3f:5d:9a:b8:0d:33:40:d3:05:4f:4d:c5:0e:c6:
         65:b1:fc:ad:9c:6a:10:c7:3c:55:15:9c:fa:d9:a5:1e:50:a9:
         d7:35:72:13:2f:b8:e3:ca:7d:94:d8:9b:03:69:d3:a6:05:1c:
         42:8b:cc:47:73:9a:cb:59:df:99:b0:19:9d:f0:48:9e:8d:dd:
         cf:72:a6:2a:8d:95:f3:30:0b:4b:19:59:62:3f:f9:a4:0d:22:
         20:6f:ac:cd:22:82:eb:73:4e:54:31:14:66:9e:21:f2:fd:f6:
         ef:02:ab:86:52:f2:29:db:5a:aa:07:04:25:44:0b:5e:16:f0:
         7a:bb:7b:8c:b0:46:dc:da:e8:12:a2:47:fa:da:57:2c:c5:ac:
         33:fc:3f:c0:e4:50:5b:a6:32:45:54:67:a0:19:d9:6f:32:18:
         4b:54:40:dc:ad:f1:e8:7c:37:b7:18:c1:8c:c6:2d:1b:bc:42:
         0c:0d:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----