Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
File:                     A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json)
Hash identifier:          vfS1fkql1S8NS/zWsqabil7isBBvSqc5aKODzYCbzow=
Subject key identifier:   DA:56:C8:AC:F6:58:95:12:34:39:B9:35:0A:D8:8C:88:71:E9:52:F9
Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A
Certificate issuer:       /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
Certificate serial:       65B511D5F2900C7EB8EFF5622E91E1262ECAD534
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
Manifest number:          01E4
Signing time:             Fri 28 Mar 2025 17:51:47 +0000
Manifest this update:     Fri 28 Mar 2025 17:46:47 +0000
Manifest next update:     Mon 31 Mar 2025 18:49:47 +0000
Files and hashes:         1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=)
                          2: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: hJ9m/RZndJK1fvcGFPp5AaV1lFnR9AvGt3IgA/IocDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:11:d5:f2:90:0c:7e:b8:ef:f5:62:2e:91:e1:26:2e:ca:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
        Validity
            Not Before: Mar 28 17:46:47 2025 GMT
            Not After : Mar 31 18:49:47 2025 GMT
        Subject: CN=DA56C8ACF65895123439B9350AD88C8871E952F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:28:e9:6b:4f:79:d9:9f:eb:46:05:1f:8d:
                    bd:52:b2:7c:24:44:69:2b:e5:c1:98:cb:a8:b4:e3:
                    ab:2a:28:69:8a:a3:29:81:c0:76:32:91:24:c7:02:
                    de:15:df:71:f3:34:91:28:9a:fd:93:27:bf:18:fb:
                    df:78:62:2b:b0:b6:8f:d7:ea:3c:90:52:8a:5b:f8:
                    dc:94:63:94:33:7a:12:77:07:1a:05:3e:91:fb:05:
                    6e:4f:b1:e5:f9:63:b3:4e:56:5e:13:a0:a2:c6:fe:
                    b0:4a:e5:3f:af:ef:8d:e4:92:41:ac:ef:e3:97:1f:
                    2c:43:d7:5d:a1:47:bd:a0:77:65:35:ef:80:c9:e2:
                    90:a9:9e:55:0a:8c:db:9e:ac:d6:c2:01:21:e1:33:
                    a1:11:37:ac:8a:45:d9:8a:4c:b6:be:a6:ab:88:3e:
                    45:4b:aa:34:74:54:50:47:61:8b:9e:96:76:63:bd:
                    7c:bf:ee:dc:ff:3b:97:85:b5:4c:39:83:ce:fa:3a:
                    d5:79:35:e4:8f:d8:9b:a4:be:32:9f:a3:86:34:83:
                    a2:b7:25:a9:49:69:49:f3:e3:49:c4:fc:1c:85:c8:
                    de:48:67:d0:35:23:c8:dd:a0:a6:2e:05:78:ae:df:
                    09:2e:2a:78:71:38:5f:5b:be:d8:49:e3:cf:6c:98:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:C8:AC:F6:58:95:12:34:39:B9:35:0A:D8:8C:88:71:E9:52:F9
            X509v3 Authority Key Identifier:
                keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:61:d4:8a:f1:be:03:ff:b3:66:e6:ef:12:06:86:fc:31:
         2f:0b:9e:b0:f7:a3:ca:05:78:5f:53:74:64:81:3f:ad:4e:d7:
         38:19:7e:e0:6e:12:83:a0:24:21:bd:6a:0a:37:29:f3:d3:76:
         1d:75:a6:30:02:74:26:b6:ea:66:c4:12:8e:8c:c1:43:b4:23:
         89:42:0e:1b:69:d2:44:6b:7b:3e:a0:1b:67:db:f3:a8:4c:fb:
         3c:b7:92:cd:5a:6c:8f:1f:59:fb:5a:52:28:6e:13:ce:d4:63:
         93:1b:f2:ef:23:81:2d:53:61:f2:ce:ce:dc:eb:80:19:20:18:
         a1:84:59:13:d3:71:af:1b:f0:8f:53:66:7e:5d:9b:4f:76:70:
         dc:9b:02:b7:ee:9d:74:d7:01:01:79:cc:56:a5:4f:a5:6c:22:
         d2:38:0c:48:e7:76:b2:da:8e:02:28:cc:bf:4a:51:8a:86:79:
         53:e3:aa:98:ec:0c:dc:0c:3a:0a:51:6c:8c:69:6b:78:af:e9:
         46:56:98:1a:94:00:c2:5e:28:ed:13:7f:7d:20:88:bc:3b:93:
         89:2a:41:86:87:31:8f:5c:1c:e1:e7:df:7a:14:8a:20:10:98:
         3c:9b:f0:e4:6e:50:3c:7f:59:a4:98:33:de:81:c6:3a:23:e7:
         47:5e:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----