Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
File:                     8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json)
Hash identifier:          xDZbjZBqO6krijWh7EzO7YwzXbME/AG+iWJCn0O/8/8=
Subject key identifier:   B8:D3:2D:5B:69:66:58:30:68:E1:F7:24:19:B0:95:82:DC:1F:D4:ED
Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68
Certificate issuer:       /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
Certificate serial:       12CB2AE0F11A90D45699C3EBBB171233396CF245
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
Manifest number:          018D
Signing time:             Thu 27 Mar 2025 16:11:52 +0000
Manifest this update:     Thu 27 Mar 2025 16:06:52 +0000
Manifest next update:     Mon 31 Mar 2025 03:29:52 +0000
Files and hashes:         1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=)
                          2: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: qqeSpNHdf2fsIqs9qmAnByUeVdpBSrPb64pweepjDts=)
                          3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cb:2a:e0:f1:1a:90:d4:56:99:c3:eb:bb:17:12:33:39:6c:f2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
        Validity
            Not Before: Mar 27 16:06:52 2025 GMT
            Not After : Mar 31 03:29:52 2025 GMT
        Subject: CN=B8D32D5B6966583068E1F72419B09582DC1FD4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:11:cd:62:8d:0d:a0:c1:cc:56:76:a0:9c:
                    66:cb:01:7d:7e:e9:a2:e3:93:07:a0:07:ba:79:dd:
                    b6:f8:eb:4b:5d:06:56:54:65:1e:be:e0:a2:64:49:
                    51:c3:b2:c1:ed:80:03:c3:5a:d9:3f:26:ee:5f:0b:
                    ca:49:73:22:83:07:37:97:62:10:2a:2d:18:86:9a:
                    6b:cc:82:cc:05:23:79:aa:42:be:64:d8:77:df:00:
                    5a:db:bb:ab:43:54:c0:82:d1:45:0a:b5:bd:4d:37:
                    d3:20:0d:fc:b9:fb:2e:69:fa:b6:ed:82:5d:8f:b3:
                    a2:d3:03:ec:25:0a:53:52:10:48:ab:b6:72:a9:27:
                    7d:e5:2f:0b:bc:12:2b:54:54:1d:b5:f9:07:2a:2f:
                    1f:1e:9e:00:74:b9:85:5e:f4:35:e1:36:4a:f0:64:
                    c0:17:bc:be:4d:c4:12:ec:f1:b5:2c:a5:71:ae:67:
                    b1:83:9b:b7:fe:46:7c:d2:04:89:6a:72:75:c7:44:
                    32:8d:42:f1:13:b0:cc:11:68:78:b9:32:16:4c:f5:
                    1b:79:77:b6:9b:88:64:c0:c6:9c:f2:7b:52:f4:14:
                    86:d1:e7:f2:11:2a:ed:b6:6a:60:33:af:49:b9:ad:
                    fb:cb:fd:60:bb:c6:40:3c:e2:ba:b0:b3:42:13:16:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:2D:5B:69:66:58:30:68:E1:F7:24:19:B0:95:82:DC:1F:D4:ED
            X509v3 Authority Key Identifier:
                keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:49:3c:1c:fb:7b:5d:40:82:31:72:7d:91:20:5f:42:4c:
         5f:21:cb:e1:9d:dd:38:66:78:90:d7:45:af:04:3d:bb:32:3a:
         c8:be:d6:dc:77:e4:72:a8:31:e2:aa:19:ad:1f:7a:d7:5a:a0:
         c5:5c:fa:9e:48:f4:dc:58:0c:ef:bf:0e:f2:81:32:bc:60:16:
         90:8d:a7:ff:f2:7f:cb:35:75:d4:c7:f1:b6:09:65:43:cd:17:
         d1:3a:93:8d:de:b7:cf:85:5c:a0:b1:18:ee:47:2a:81:59:bd:
         d4:71:c1:4a:14:ac:4c:40:f8:31:da:d6:6d:7c:0c:c5:32:a7:
         95:5a:9b:69:aa:47:27:d4:3b:32:c4:a3:5f:fd:7e:54:c8:15:
         c9:bf:dc:ad:b2:32:62:9e:a7:bc:ef:82:7c:b0:d7:3a:b8:a2:
         34:a7:e5:ca:44:04:f9:63:3c:8e:7d:64:c2:0f:7c:60:17:20:
         63:46:37:d7:52:68:73:34:ff:fe:29:4a:0d:45:85:de:09:d0:
         7e:f5:df:fc:b1:7a:a0:04:c6:9f:81:27:ca:22:4a:92:64:10:
         4f:fd:84:e6:1c:61:c8:60:12:5f:9d:a9:fe:31:03:fd:e7:d2:
         f7:2b:8f:ca:81:b1:21:cf:04:a2:c0:59:12:90:1f:f7:30:06:
         76:dd:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----