Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
File:                     466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json)
Hash identifier:          48pm5vcO0FzIldEYPiauMsL/COFg7I6OZxGrOKiPvlU=
Subject key identifier:   12:B2:29:BA:68:C5:B7:8A:D8:9F:27:69:3D:E7:A1:89:26:00:92:AD
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Certificate issuer:       /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial:       1338E7FD591C2360EF4CAFB9D139CAFD41FFEE4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
Manifest number:          040D
Signing time:             Fri 28 Mar 2025 19:01:03 +0000
Manifest this update:     Fri 28 Mar 2025 18:56:03 +0000
Manifest next update:     Mon 31 Mar 2025 21:12:03 +0000
Files and hashes:         1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: 4Z5eDrrHZmqs6QxVIkyuY07V0t6QahOws6as1cnmdoY=)
                          2: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: tU9RWgW37iIbv5yZk5eKXbGgz2dtjeUyxpD8SfQmmFA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:38:e7:fd:59:1c:23:60:ef:4c:af:b9:d1:39:ca:fd:41:ff:ee:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
        Validity
            Not Before: Mar 28 18:56:03 2025 GMT
            Not After : Mar 31 21:12:03 2025 GMT
        Subject: CN=12B229BA68C5B78AD89F27693DE7A189260092AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:04:49:4d:55:55:86:a9:1c:bd:13:1f:a6:
                    0a:90:39:18:ac:0e:49:ee:e8:25:cf:c1:00:0b:7d:
                    45:c4:75:63:6c:a7:1d:59:0a:95:4b:04:1c:c3:e4:
                    0d:2e:95:e5:05:ca:4a:9e:88:8a:41:6f:67:df:9d:
                    9a:76:81:fd:a3:3c:88:c9:a2:93:71:d0:c8:d6:9f:
                    61:92:d1:b6:67:08:fc:0b:92:bd:29:ea:6a:67:28:
                    2a:b4:0e:cf:0a:52:25:1b:96:6c:41:8c:12:d1:bd:
                    df:94:fd:c1:31:a9:e3:51:54:ab:e5:24:7a:45:01:
                    bd:a7:fa:a2:2b:99:54:8c:ae:55:a4:71:fb:74:a7:
                    35:27:25:c5:f3:f2:8f:8f:93:08:e2:75:52:e5:b6:
                    a5:3a:72:e2:da:21:75:20:26:1d:9a:dd:c3:1b:66:
                    12:69:0f:43:cf:07:f9:5c:f9:20:e2:d3:7b:40:69:
                    2d:d3:cb:45:be:84:5b:9e:0a:e7:e1:57:76:49:55:
                    34:43:99:fc:74:27:07:5c:0a:16:d7:24:4b:2f:75:
                    4b:9b:8e:44:c2:56:df:3c:af:66:a6:76:7a:91:d0:
                    c3:71:61:60:65:cb:6a:fe:d2:3d:98:79:c7:a1:d6:
                    45:ae:37:ee:a9:cd:4e:05:98:36:f0:33:99:a4:67:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:29:BA:68:C5:B7:8A:D8:9F:27:69:3D:E7:A1:89:26:00:92:AD
            X509v3 Authority Key Identifier:
                keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:45:97:27:52:04:25:d5:5d:7c:c0:3d:ac:58:18:95:0b:
         74:ce:ed:d8:de:f9:a6:4c:d9:70:34:e7:a9:a7:e3:16:06:64:
         4d:0b:d5:4e:6c:90:56:77:39:13:95:1d:3a:bc:1e:8f:56:3b:
         24:7d:4c:d5:83:9d:62:43:87:8b:4c:e0:71:23:4b:c8:3c:40:
         f5:46:c9:1c:6a:9e:fb:1e:42:77:8f:27:87:22:cf:99:e9:e2:
         ee:f6:68:c5:8b:4e:db:9a:78:8b:fe:bc:7a:28:d5:b7:9b:d8:
         30:ef:9d:a3:3d:88:20:45:43:c4:d4:1e:43:ed:3d:70:1c:0e:
         69:c1:c0:87:3b:bf:c5:e6:d3:be:02:95:51:8b:3a:96:87:58:
         03:46:40:17:12:d9:1f:82:d1:32:2c:cc:66:34:ee:fb:e0:02:
         cf:6a:ef:83:28:33:9f:fe:48:3c:69:3e:cf:25:3b:dd:53:c5:
         ff:0d:a4:49:df:b2:bc:93:83:c4:41:73:8c:ef:e0:59:57:7e:
         d6:eb:7e:74:7d:8f:99:b4:f8:0b:b2:85:31:31:c6:85:ba:44:
         b5:3e:8c:c2:88:46:7f:e8:a9:3f:93:44:95:26:e8:20:53:e6:
         b8:c0:24:0b:07:25:e3:b4:3c:30:ce:19:03:14:73:50:24:2d:
         2e:45:91:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEzjn/VkcI2DvTK+50TnK/UH/7k0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMy
QjI1RDQwMjAeFw0yNTAzMjgxODU2MDNaFw0yNTAzMzEyMTEyMDNaMDMxMTAvBgNV
BAMTKDEyQjIyOUJBNjhDNUI3OEFEODlGMjc2OTNERTdBMTg5MjYwMDkyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+wRJTVVVhqkcvRMfpgqQORis
Dknu6CXPwQALfUXEdWNspx1ZCpVLBBzD5A0uleUFykqeiIpBb2ffnZp2gf2jPIjJ
opNx0MjWn2GS0bZnCPwLkr0p6mpnKCq0Ds8KUiUblmxBjBLRvd+U/cExqeNRVKvl
JHpFAb2n+qIrmVSMrlWkcft0pzUnJcXz8o+PkwjidVLltqU6cuLaIXUgJh2a3cMb
ZhJpD0PPB/lc+SDi03tAaS3Ty0W+hFueCufhV3ZJVTRDmfx0JwdcChbXJEsvdUub
jkTCVt88r2amdnqR0MNxYWBly2r+0j2Yeceh1kWuN+6pzU4FmDbwM5mkZ0xPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUErIpumjFt4rYnydpPeehiSYAkq0wHwYDVR0j
BBgwFoAURm+JNPP+2TVcntCeOCbL4ysl1AIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzM5NzhmOC1hZWFiLTQyN2EtYmQ3NS0yY2RmMWQ5ZWI1MTcvMC80NjZGODkzNEYz
RkVEOTM1NUM5RUQwOUUzODI2Q0JFMzJCMjVENDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMyQjI1
RDQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk
NzUtMmNkZjFkOWViNTE3LzAvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNC
RTMyQjI1RDQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK9NRZcnUgQl1V18wD2sWBiVC3TO7dje+aZM
2XA056mn4xYGZE0L1U5skFZ3OROVHTq8Ho9WOyR9TNWDnWJDh4tM4HEjS8g8QPVG
yRxqnvseQnePJ4ciz5np4u72aMWLTtuaeIv+vHoo1beb2DDvnaM9iCBFQ8TUHkPt
PXAcDmnBwIc7v8Xm074ClVGLOpaHWANGQBcS2R+C0TIszGY07vvgAs9q74MoM5/+
SDxpPs8lO91Txf8NpEnfsryTg8RBc4zv4FlXftbrfnR9j5m0+AuyhTExxoW6RLU+
jMKIRn/oqT+TRJUm6CBT5rjAJAsHJeO0PDDOGQMUc1AkLS5FkWg=
-----END CERTIFICATE-----