Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File:                     940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier:          ZB9yW747Q4561YT6d5OE2xVi7A/xtDZhRc9AtUU30+A=
Subject key identifier:   E2:50:DD:84:3E:65:FA:83:8B:68:86:B6:D0:EF:30:47:96:18:DE:A3
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer:       /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial:       1E0B1CCC96C3863B5F5FAEAFA4E38C1E76FB8F2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number:          014E
Signing time:             Thu 27 Mar 2025 18:00:42 +0000
Manifest this update:     Thu 27 Mar 2025 17:55:42 +0000
Manifest next update:     Sun 30 Mar 2025 20:20:42 +0000
Files and hashes:         1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=)
                          2: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 1Dbq526GXWlOfrfOeYEM5vgYsg55YRVMdhQfbyL8lMo=)
                          3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:1c:cc:96:c3:86:3b:5f:5f:ae:af:a4:e3:8c:1e:76:fb:8f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
        Validity
            Not Before: Mar 27 17:55:42 2025 GMT
            Not After : Mar 30 20:20:42 2025 GMT
        Subject: CN=E250DD843E65FA838B6886B6D0EF30479618DEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:9f:92:00:54:25:8e:ae:10:6c:00:8a:78:
                    e0:54:23:57:e5:83:ad:b0:f6:8f:39:0e:13:fa:2d:
                    8e:7c:f9:ee:15:1e:0c:c8:33:eb:5c:a3:1c:9f:d8:
                    b0:ad:31:ea:eb:74:38:c9:b5:f7:e7:ba:0a:9a:e1:
                    8a:b9:78:1f:d5:f5:09:9a:3b:e6:ff:98:5d:e6:d7:
                    53:2c:a6:34:a4:dd:82:2b:96:22:9c:a4:9f:25:e7:
                    32:85:a0:bb:b7:d9:85:d0:d7:78:ca:ec:c1:52:7b:
                    24:e7:4f:4f:82:db:25:4e:52:3c:8a:5d:cc:24:ab:
                    c0:74:05:bc:6f:76:c8:52:1e:03:88:ea:23:4f:a7:
                    d7:9d:b6:ac:db:80:27:65:b8:e6:47:4c:1c:e3:c9:
                    d4:2e:39:0e:60:19:4b:19:18:d5:ef:9e:fd:34:a8:
                    9e:dc:23:fb:ca:6f:31:90:df:b9:04:97:c6:c4:c5:
                    bd:6c:aa:8f:00:39:9a:92:0e:f7:67:d3:21:19:2e:
                    ed:f2:c9:ac:2c:62:12:45:fc:f5:13:7c:9a:96:8c:
                    90:51:87:45:21:65:97:bb:3d:59:4e:7c:da:c0:1e:
                    b8:a0:04:8d:da:ef:17:e5:a1:ba:59:b4:f6:07:59:
                    dd:1c:5b:83:12:ed:00:31:30:0b:97:d6:4e:27:fb:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:DD:84:3E:65:FA:83:8B:68:86:B6:D0:EF:30:47:96:18:DE:A3
            X509v3 Authority Key Identifier:
                keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:89:5b:f6:5c:f9:42:7e:b3:f8:cc:57:73:6b:1f:2d:5c:9e:
         00:98:5c:d6:05:23:c0:84:bb:a5:2c:fb:8c:30:97:ce:93:20:
         4f:94:14:ce:e4:6d:71:85:08:1a:b4:8f:cf:11:7a:8c:c7:53:
         92:d6:04:60:29:75:87:65:f7:b3:b2:a4:90:40:38:3a:7e:6e:
         d6:e6:a1:ac:68:53:e1:6f:51:ee:f6:f2:46:22:bd:97:3a:de:
         dc:5e:b3:8b:8e:70:f1:e9:20:f0:47:c8:ee:63:0d:78:12:b3:
         b9:70:ce:78:2b:b8:ae:cb:bd:a8:09:f1:e3:6e:cc:47:6e:93:
         fe:79:b8:98:0f:99:bf:6a:3b:70:ff:97:c9:89:14:04:33:4b:
         f5:63:9e:7d:3a:02:88:46:4f:c8:07:83:fb:b1:76:15:c2:85:
         92:91:d2:c8:4c:0e:40:c1:88:47:21:08:f6:ff:ff:ef:9a:8a:
         6f:56:3b:28:f8:5b:45:1f:08:5b:a6:94:29:09:fe:46:1f:52:
         38:b7:06:ba:f9:31:6b:9b:a3:f7:bd:95:f7:06:50:0c:19:a1:
         e1:34:d2:ef:bc:fd:98:c4:53:c4:3b:f0:c2:9c:25:06:c0:9a:
         71:76:14:34:7a:e3:00:b9:d0:c5:fd:49:46:29:89:8c:16:6f:
         58:66:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----