Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
File:                     A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json)
Hash identifier:          k89aSQfnAlNED0CN7qlz13FG3dDq5559rbD78CRAtq4=
Subject key identifier:   C6:DB:19:12:BC:A6:B6:D5:D0:E7:AB:FA:71:D9:8F:79:5D:F8:9E:15
Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Certificate issuer:       /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Certificate serial:       3AC5475A5EAE9788BCE6BFFBA6E9E31002688100
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
Manifest number:          0417
Signing time:             Fri 28 Mar 2025 04:50:00 +0000
Manifest this update:     Fri 28 Mar 2025 04:45:00 +0000
Manifest next update:     Mon 31 Mar 2025 07:31:00 +0000
Files and hashes:         1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: CKGbkiFsQwscTDkSpvtt5iP1v1205LysilPvEPjYjDU=)
                          2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c5:47:5a:5e:ae:97:88:bc:e6:bf:fb:a6:e9:e3:10:02:68:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
        Validity
            Not Before: Mar 28 04:45:00 2025 GMT
            Not After : Mar 31 07:31:00 2025 GMT
        Subject: CN=C6DB1912BCA6B6D5D0E7ABFA71D98F795DF89E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4c:52:30:a4:33:18:d5:d2:39:46:94:66:12:
                    12:20:20:72:1c:b5:7f:3c:d2:69:8c:95:34:3f:ec:
                    02:c7:6a:8d:3d:43:1d:ce:49:65:eb:2b:8f:2b:9f:
                    f5:6d:e9:ad:62:7d:a7:1c:2c:81:72:14:c3:6d:e4:
                    1f:98:bb:c6:4b:de:49:1f:09:10:21:27:3d:3c:74:
                    4a:d7:29:ef:2b:3c:0b:a6:60:4e:bb:33:b5:17:15:
                    74:46:28:6a:7a:28:d9:b7:e0:ab:45:a4:14:8a:a0:
                    d4:61:1c:12:59:fd:22:54:50:f8:c7:e4:fe:9e:f6:
                    0f:8c:3f:f1:a4:f0:61:1c:4a:79:a0:ce:f2:e1:78:
                    15:49:a1:ce:ac:00:92:7a:a8:de:ed:f2:1c:66:15:
                    f9:b8:ac:49:a5:fe:61:5a:16:4a:1e:c5:cd:d5:f8:
                    aa:1f:dc:6b:60:7a:c1:ad:56:d1:2b:b9:21:9a:7b:
                    3d:d6:a7:4e:6a:23:fc:3c:c2:c8:cd:1a:4d:07:21:
                    43:d7:5f:8d:01:76:95:0b:bd:b5:2c:e6:eb:66:dd:
                    1b:ec:ab:0a:65:13:38:80:6c:08:95:ce:a8:ca:13:
                    36:0e:8e:10:9e:08:9f:7e:3f:77:31:30:c9:6b:08:
                    38:b7:91:c6:f8:2d:34:83:d9:99:ae:3d:6b:ce:71:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:19:12:BC:A6:B6:D5:D0:E7:AB:FA:71:D9:8F:79:5D:F8:9E:15
            X509v3 Authority Key Identifier:
                keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:99:5a:11:46:e5:91:68:1f:03:ff:f0:fc:70:f4:c1:8a:
         c9:bb:e4:df:7b:dc:1b:86:1c:b0:e7:c7:56:0e:f9:bd:0d:44:
         f1:2a:d1:c4:b0:c7:5c:28:6a:85:e1:74:19:78:0d:44:e9:b1:
         51:ea:db:26:17:5c:04:d2:84:9a:71:fb:c3:b7:bc:b4:3c:f5:
         30:b3:f5:0e:29:33:e8:d6:f9:b0:b1:60:70:eb:8c:31:c1:a6:
         73:a5:b5:ef:4d:57:a8:2e:9d:0d:22:6b:1c:08:ea:28:4f:b7:
         c1:d5:95:15:88:aa:5d:d6:37:83:a3:87:39:4d:3b:a5:65:0d:
         ac:c5:88:da:13:d5:10:45:72:86:dd:bc:05:cb:98:09:74:6d:
         fb:3a:91:37:17:c9:aa:3b:c5:c9:bb:a3:35:b1:e2:10:76:ee:
         5a:0f:ef:a2:15:17:8b:32:03:0b:15:38:47:78:c6:56:fb:f3:
         88:65:4d:03:da:b2:e5:1b:5d:61:d9:c9:77:aa:7d:d8:09:6e:
         5c:31:c7:5c:0d:ba:7a:e6:36:59:95:57:50:75:7b:a6:98:b4:
         64:31:f6:b0:f3:7c:09:27:f5:43:f2:6b:7f:b4:ee:b9:02:04:
         f8:12:01:86:45:18:f0:52:ac:a1:26:a3:8c:3e:9d:ad:80:fd:
         1e:7e:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----