Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
File:                     2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json)
Hash identifier:          NuK1h+NeZ8FWIrgyon+GIQOjvR0msbBOys1zksw+MWg=
Subject key identifier:   D3:EF:49:3D:01:FA:AB:D4:62:D0:75:28:FE:D6:2E:4D:96:83:71:BF
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       7F989407E5C2131E801DB2F2C96E798201B1815F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
Manifest number:          04C0
Signing time:             Sat 29 Mar 2025 00:31:39 +0000
Manifest this update:     Sat 29 Mar 2025 00:26:39 +0000
Manifest next update:     Tue 01 Apr 2025 06:27:39 +0000
Files and hashes:         1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: 35E4UlqdBUYnnMY7Jpoh0Eg3oe/ZchB5ctSGR7BqZWM=)
                          2: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: F684hFj2zsDExb3TLn+kQNB/4i2mlpksjyUYR6kCNG4=)
                          3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=)
                          4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=)
                          5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: U1le6HmfhNXh3uDoBprzUB/GbdiVtl5syDPCsFAVER0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:98:94:07:e5:c2:13:1e:80:1d:b2:f2:c9:6e:79:82:01:b1:81:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Mar 29 00:26:39 2025 GMT
            Not After : Apr  1 06:27:39 2025 GMT
        Subject: CN=D3EF493D01FAABD462D07528FED62E4D968371BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:93:ff:8d:07:c8:bd:3c:1a:49:10:f1:f8:
                    f3:34:ac:21:57:9b:f5:05:9a:17:32:14:b6:57:a6:
                    14:d4:be:e3:a2:e4:35:8f:0d:de:e4:93:ed:a0:bb:
                    25:d2:94:8d:2d:1f:1e:01:62:02:cb:a3:f4:67:e2:
                    5f:94:b1:99:27:de:41:9f:71:1d:4d:ff:41:02:34:
                    56:c8:38:9a:7d:5a:a1:49:7e:c7:c9:f7:8d:22:c0:
                    24:f4:89:f8:fb:05:83:50:c1:34:e5:a5:a1:fe:24:
                    29:e4:22:6d:6b:e8:19:35:64:9c:68:5d:78:53:9c:
                    46:f9:dd:34:a8:ac:59:8a:ba:b4:30:2d:3f:b3:cc:
                    d4:87:3e:b3:48:2a:a0:7d:d4:ac:99:3c:a2:4d:f6:
                    4f:52:16:d7:d4:86:79:20:4a:fe:c0:fd:49:2b:e3:
                    67:47:8c:3f:5f:cf:20:8f:5c:a3:0e:31:ad:7a:ff:
                    b6:4b:6b:22:20:a1:85:45:e7:2a:ad:44:39:da:4b:
                    68:ba:ef:c8:4e:5d:e9:10:7f:07:dc:06:80:43:b4:
                    0c:db:ba:ab:e5:22:a8:3c:44:95:f2:3c:a1:d6:1e:
                    69:b4:7f:73:97:58:19:fb:cc:70:80:28:c4:28:1b:
                    73:af:46:00:24:db:b0:16:27:59:ad:ff:21:2e:41:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:49:3D:01:FA:AB:D4:62:D0:75:28:FE:D6:2E:4D:96:83:71:BF
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:88:72:9d:44:75:e9:e3:35:f5:07:8d:81:7c:1a:be:08:2d:
         c5:1d:4b:79:d6:1e:4c:17:99:20:be:90:6e:60:f6:1a:45:70:
         66:05:4a:f7:83:24:bc:22:3a:8c:b3:25:c3:4d:2f:da:96:cc:
         8f:1b:76:c8:a2:43:17:c5:b3:28:f7:ab:6f:a6:de:50:43:5d:
         c8:ba:5f:68:29:e2:f7:48:44:91:ec:e2:e4:64:73:ed:c7:0c:
         02:5f:97:35:16:a2:4e:dd:ca:92:1e:a6:e4:5d:71:f0:46:e1:
         3b:ed:11:0e:fe:78:d9:7f:ec:74:b1:2a:01:f4:21:dc:23:5b:
         31:0b:a0:e9:f0:4f:12:23:ae:47:4d:35:69:e9:69:34:aa:e7:
         b7:87:a2:01:66:c8:b5:ae:24:c1:01:4c:35:de:8a:2a:4d:86:
         91:46:ea:40:61:44:83:9d:8f:95:53:93:42:fb:8d:91:8d:4c:
         c4:cb:19:61:b6:09:1d:a5:a0:76:0c:06:f9:ae:a3:9e:39:19:
         f1:a3:aa:cd:d5:fc:cf:ff:a5:bb:d9:54:1d:10:f2:59:af:7e:
         cb:d4:ec:2c:86:94:8d:1d:ce:9f:25:59:bb:0f:ec:90:06:c8:
         8d:f5:00:0b:b9:36:38:ee:af:12:d4:c2:68:af:cc:f7:d1:f5:
         c9:12:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----