Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
File:                     D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json)
Hash identifier:          XiFfw9Ig0c/lRnsfBkDRCQlZkqjf3LxHjVHerXmqXIU=
Subject key identifier:   43:E5:6F:15:F7:9B:8E:0C:E0:F3:FA:CF:8C:71:D2:BB:1C:E7:B6:D9
Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C
Certificate issuer:       /CN=D296B71263A794DB76A99329A0A6CD91F03F997C
Certificate serial:       2630441CF37CD1683268A9EB5F15C7048D40FAF8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
Manifest number:          04BC
Signing time:             Sat 29 Mar 2025 02:10:03 +0000
Manifest this update:     Sat 29 Mar 2025 02:05:03 +0000
Manifest next update:     Tue 01 Apr 2025 08:35:03 +0000
Files and hashes:         1: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: 7pC4ZnHhzPGeaVBP4ZWXbmGP2RHUekDAkJ0d8mXm+mA=)
                          2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: eP9HYV3PuOgWsaNidklL7fFxAiMdSf/LVzna0rIUQhA=)
                          3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: hsPXQKay+qedGG/jMzXptueav18vcMllJ1dIk7iOf1k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:30:44:1c:f3:7c:d1:68:32:68:a9:eb:5f:15:c7:04:8d:40:fa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C
        Validity
            Not Before: Mar 29 02:05:03 2025 GMT
            Not After : Apr  1 08:35:03 2025 GMT
        Subject: CN=43E56F15F79B8E0CE0F3FACF8C71D2BB1CE7B6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:19:4f:07:b4:c2:50:4a:40:22:b0:65:ec:be:
                    ab:58:43:eb:61:81:98:8a:b8:f8:51:dc:9c:30:ba:
                    12:0d:a1:c6:ce:c7:c9:81:8b:51:9f:a1:b1:38:11:
                    24:46:0b:a7:60:2a:97:24:cb:d8:a5:f3:a9:6e:bb:
                    5b:0c:35:e2:4f:d1:51:78:65:95:c7:09:42:eb:5e:
                    e8:91:56:13:61:f9:6e:9b:bf:f6:6c:61:e4:5e:a4:
                    60:5e:a6:8c:c9:9c:f1:a2:f6:92:8d:ad:b1:d6:cd:
                    6d:fa:80:a2:53:23:9c:2f:1d:d2:10:98:64:08:e8:
                    51:09:81:3f:88:a5:34:65:bb:fd:dc:a3:72:6e:99:
                    f7:a4:42:a4:85:e4:ea:28:a3:25:4c:82:cf:b0:37:
                    f9:ff:95:bf:4d:00:46:7d:2a:83:15:27:b8:03:92:
                    80:b1:21:32:f7:5b:9f:64:0f:67:6f:a4:b5:86:69:
                    a9:df:5d:99:97:3e:c7:ae:fb:75:cd:0c:4f:1d:cb:
                    b0:41:56:34:0d:cd:9b:90:fd:ff:5b:8f:36:4f:f7:
                    09:79:a2:da:b9:64:8f:39:3b:85:52:28:43:ce:36:
                    39:bb:db:af:46:74:75:cb:aa:58:2b:bf:a3:6b:c2:
                    36:20:0e:e3:7d:0c:42:38:a2:b5:25:a8:d8:e7:f0:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:6F:15:F7:9B:8E:0C:E0:F3:FA:CF:8C:71:D2:BB:1C:E7:B6:D9
            X509v3 Authority Key Identifier:
                keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:e5:c0:35:95:41:e6:fa:35:2c:53:8b:1c:1f:21:cd:dc:
         50:bc:70:57:59:0d:60:8e:dc:70:b1:c2:cb:de:62:12:3c:1d:
         71:2d:61:70:64:26:3a:e6:c8:32:75:85:78:31:86:78:f4:69:
         90:e6:31:b1:43:f3:95:47:05:cc:08:94:09:22:83:0e:4e:9b:
         06:b9:60:04:e1:e3:f5:26:16:4a:ad:f4:f3:16:3c:19:b8:f2:
         bc:61:2c:60:0f:f0:de:d4:4d:21:7e:40:7d:cf:7b:0b:32:98:
         2a:8c:54:28:11:68:c6:09:d8:74:50:27:73:1f:5d:d3:90:a6:
         9c:63:67:a5:00:85:75:58:3f:8b:9b:97:bd:87:87:c5:01:7e:
         75:99:c7:f6:ca:1c:3b:72:e7:bd:11:03:77:e3:c3:44:01:7e:
         e5:12:f3:70:8f:ae:ac:e6:44:9a:dd:b2:05:d2:ce:7e:46:6e:
         90:9c:52:fd:70:b9:74:0e:a2:6a:64:94:36:13:ab:f2:67:97:
         31:b7:53:78:d5:ed:f7:a4:ae:1d:49:03:6f:f4:cc:5f:b0:8d:
         58:15:27:2c:06:68:5c:50:2a:85:ac:f6:1d:dc:35:9d:e9:90:
         4d:1c:b4:3a:d6:ad:ca:a6:e3:4f:2a:ef:67:d0:22:d0:36:93:
         b3:bb:87:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJjBEHPN80WgyaKnrXxXHBI1A+vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG
MDNGOTk3QzAeFw0yNTAzMjkwMjA1MDNaFw0yNTA0MDEwODM1MDNaMDMxMTAvBgNV
BAMTKDQzRTU2RjE1Rjc5QjhFMENFMEYzRkFDRjhDNzFEMkJCMUNFN0I2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsGU8HtMJQSkAisGXsvqtYQ+th
gZiKuPhR3JwwuhINocbOx8mBi1GfobE4ESRGC6dgKpcky9il86luu1sMNeJP0VF4
ZZXHCULrXuiRVhNh+W6bv/ZsYeRepGBepozJnPGi9pKNrbHWzW36gKJTI5wvHdIQ
mGQI6FEJgT+IpTRlu/3co3JumfekQqSF5OoooyVMgs+wN/n/lb9NAEZ9KoMVJ7gD
koCxITL3W59kD2dvpLWGaanfXZmXPseu+3XNDE8dy7BBVjQNzZuQ/f9bjzZP9wl5
otq5ZI85O4VSKEPONjm7269GdHXLqlgrv6NrwjYgDuN9DEI4orUlqNjn8InXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ+VvFfebjgzg8/rPjHHSuxznttkwHwYDVR0j
BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz
QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG
OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0
ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE
OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHSq5cA1lUHm+jUsU4scHyHN3FC8cFdZDWCO
3HCxwsveYhI8HXEtYXBkJjrmyDJ1hXgxhnj0aZDmMbFD85VHBcwIlAkigw5Omwa5
YATh4/UmFkqt9PMWPBm48rxhLGAP8N7UTSF+QH3PewsymCqMVCgRaMYJ2HRQJ3Mf
XdOQppxjZ6UAhXVYP4ubl72Hh8UBfnWZx/bKHDty570RA3fjw0QBfuUS83CPrqzm
RJrdsgXSzn5GbpCcUv1wuXQOompklDYTq/JnlzG3U3jV7fekrh1JA2/0zF+wjVgV
JywGaFxQKoWs9h3cNZ3pkE0ctDrWrcqm408q72fQItA2k7O7h/Q=
-----END CERTIFICATE-----