Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
File:                     90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json)
Hash identifier:          jyPj11FykRFNLEOPs/pzy1pjewBUJv9OQ/75P9xXqjA=
Subject key identifier:   04:21:91:C0:A3:49:8F:EE:33:BE:E0:C8:F7:9E:22:F9:27:D4:2C:F6
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Certificate issuer:       /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial:       7ACB75DDD1C452F5B6BD9F290BDE610160965297
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
Manifest number:          60
Signing time:             Fri 28 Mar 2025 01:20:04 +0000
Manifest this update:     Fri 28 Mar 2025 01:15:04 +0000
Manifest next update:     Mon 31 Mar 2025 12:24:04 +0000
Files and hashes:         1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: 4jxp+zEiciP46mB/YNCRQNo2YfUUKSAmIAPNOMlhyaI=)
                          2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=)
                          3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=)
                          4: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cb:75:dd:d1:c4:52:f5:b6:bd:9f:29:0b:de:61:01:60:96:52:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
        Validity
            Not Before: Mar 28 01:15:04 2025 GMT
            Not After : Mar 31 12:24:04 2025 GMT
        Subject: CN=042191C0A3498FEE33BEE0C8F79E22F927D42CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:f3:00:be:cb:87:92:3b:b8:5a:6e:55:62:
                    7c:45:3e:d4:38:3f:5d:d6:4f:fd:64:7b:74:2b:f9:
                    1b:19:72:43:64:fa:da:c5:f6:ff:64:d5:14:b1:3d:
                    1c:9c:d5:a3:de:dc:ab:13:69:95:7b:c1:8f:00:ad:
                    8b:a6:1e:63:aa:97:0b:31:f7:87:ca:60:ac:b8:e3:
                    ab:32:78:50:1d:0e:05:55:fc:dc:47:11:13:da:49:
                    36:48:84:12:55:0c:bc:08:0d:09:94:8f:2b:d1:fd:
                    f6:bf:e4:a2:6b:41:7b:cd:ac:d1:3b:89:44:c3:fc:
                    a2:8b:4b:c9:12:72:2a:a7:99:83:d7:1f:1f:f3:15:
                    23:81:91:91:5b:69:3c:7d:4e:6d:58:2e:51:1e:6c:
                    e9:79:24:15:b9:72:51:db:05:ac:bc:ae:6e:7c:87:
                    b0:51:9c:1e:d5:c7:31:43:96:65:89:e3:35:a5:a5:
                    46:b1:87:f6:8d:d7:b2:2a:92:30:07:b0:ac:a5:3d:
                    ff:e8:d2:3e:10:a6:a1:ec:d0:16:c3:42:36:58:14:
                    42:e4:35:9f:66:41:4e:34:9c:59:32:2b:ef:5a:85:
                    56:20:60:0c:5c:29:95:41:1a:34:2f:8a:78:db:55:
                    a2:68:07:66:c3:63:3a:1a:b6:09:96:7f:bd:6d:bc:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:91:C0:A3:49:8F:EE:33:BE:E0:C8:F7:9E:22:F9:27:D4:2C:F6
            X509v3 Authority Key Identifier:
                keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:35:88:56:61:9b:e6:17:66:d8:4e:e0:65:5c:dd:de:2c:
         57:0b:a3:12:aa:47:f5:07:1e:2d:47:79:3b:fa:3c:be:66:ae:
         ad:65:ff:2b:7b:ec:53:78:19:02:9d:da:42:1e:66:f8:cd:9e:
         38:98:6c:0c:f2:06:d6:79:76:39:ca:e1:b0:79:74:0d:ce:1e:
         52:f1:5c:c7:fc:7f:f2:87:22:6b:87:25:57:f6:6b:f3:2f:33:
         e4:21:17:5a:1b:f3:75:c6:bf:17:ab:a9:6b:7a:35:1a:da:4b:
         24:60:e4:78:1e:2e:fa:59:80:bd:98:fb:29:ba:c9:68:34:07:
         20:76:75:42:d6:ed:80:04:45:19:64:95:48:46:8d:ad:cc:72:
         46:a8:dc:04:9c:38:fb:b3:7e:d4:a4:72:f9:99:73:f2:9b:83:
         07:d4:20:cb:63:e8:f4:9a:94:6a:91:8c:a5:b5:22:e7:7c:d7:
         84:89:5f:4f:ef:10:cd:58:97:f0:4c:8c:7e:73:76:87:b3:f9:
         41:be:43:c5:c5:c7:ca:71:5e:94:11:ed:81:d6:8d:7f:db:25:
         79:04:0c:ea:5c:a4:bb:22:94:f7:a1:23:09:d1:2d:b6:d0:85:
         98:7a:61:c0:78:d0:1a:89:37:57:c6:07:51:cf:d4:3b:cb:b3:
         ac:ac:d3:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUest13dHEUvW2vZ8pC95hAWCWUpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2
MEY3OEZDQTAeFw0yNTAzMjgwMTE1MDRaFw0yNTAzMzExMjI0MDRaMDMxMTAvBgNV
BAMTKDA0MjE5MUMwQTM0OThGRUUzM0JFRTBDOEY3OUUyMkY5MjdENDJDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3vMAvsuHkju4Wm5VYnxFPtQ4
P13WT/1ke3Qr+RsZckNk+trF9v9k1RSxPRyc1aPe3KsTaZV7wY8ArYumHmOqlwsx
94fKYKy446syeFAdDgVV/NxHERPaSTZIhBJVDLwIDQmUjyvR/fa/5KJrQXvNrNE7
iUTD/KKLS8kSciqnmYPXHx/zFSOBkZFbaTx9Tm1YLlEebOl5JBW5clHbBay8rm58
h7BRnB7VxzFDlmWJ4zWlpUaxh/aN17IqkjAHsKylPf/o0j4QpqHs0BbDQjZYFELk
NZ9mQU40nFkyK+9ahVYgYAxcKZVBGjQvinjbVaJoB2bDYzoatgmWf71tvJY1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBCGRwKNJj+4zvuDI954i+SfULPYwHwYDVR0j
BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG
RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3
OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj
ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB
NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADPNNYhWYZvmF2bYTuBlXN3eLFcLoxKqR/UH
Hi1HeTv6PL5mrq1l/yt77FN4GQKd2kIeZvjNnjiYbAzyBtZ5djnK4bB5dA3OHlLx
XMf8f/KHImuHJVf2a/MvM+QhF1ob83XGvxerqWt6NRraSyRg5HgeLvpZgL2Y+ym6
yWg0ByB2dULW7YAERRlklUhGja3Mckao3AScOPuzftSkcvmZc/KbgwfUIMtj6PSa
lGqRjKW1Iud814SJX0/vEM1Yl/BMjH5zdoez+UG+Q8XFx8pxXpQR7YHWjX/bJXkE
DOpcpLsilPehIwnRLbbQhZh6YcB40BqJN1fGB1HP1DvLs6ys0zg=
-----END CERTIFICATE-----