Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft
File:                     B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json)
Hash identifier:          EkUI1KQXCVWo/W//OshMbk4mtSjLuwntNr+A9cstsXE=
Subject key identifier:   CB:9D:6A:36:6B:CC:6B:94:60:78:7F:DB:4D:5D:85:15:1E:A4:A9:6C
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Certificate issuer:       /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial:       1953472711814935198597C266503D0726EA8B96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft
Manifest number:          015A
Signing time:             Thu 27 Mar 2025 23:10:54 +0000
Manifest this update:     Thu 27 Mar 2025 23:05:54 +0000
Manifest next update:     Mon 31 Mar 2025 04:05:54 +0000
Files and hashes:         1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: oQh0kUEqYKheAgwf5qIq6wXJj7edPUZAxt2edqi2QGI=)
                          2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:47:27:11:81:49:35:19:85:97:c2:66:50:3d:07:26:ea:8b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
        Validity
            Not Before: Mar 27 23:05:54 2025 GMT
            Not After : Mar 31 04:05:54 2025 GMT
        Subject: CN=CB9D6A366BCC6B9460787FDB4D5D85151EA4A96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:b6:b6:d4:f7:d6:4e:0f:00:c1:15:bf:40:
                    7e:c7:6b:e2:dd:a5:6e:8c:98:87:20:ed:55:77:f0:
                    2f:64:f4:34:31:0f:4a:e7:41:1a:00:ba:3e:d9:fe:
                    8c:05:3c:2a:54:b5:dc:de:51:e5:fa:6f:ad:28:dd:
                    28:f7:ec:36:03:0a:02:34:b7:32:ca:1a:9a:fe:b3:
                    09:68:31:13:ff:44:bb:c9:c0:de:bd:d0:43:13:cb:
                    3c:93:ab:e0:fe:0d:a2:24:6d:16:9a:25:ff:18:c5:
                    cf:1a:b9:fd:c9:91:b0:9b:6b:37:11:fb:df:44:0f:
                    53:d6:27:c4:00:eb:dd:9b:11:23:bb:13:37:f4:b0:
                    60:bd:a6:47:99:5e:ce:f9:74:7b:c4:48:fb:6d:ce:
                    72:1e:6e:76:17:e8:98:e6:12:eb:7e:18:41:b8:8f:
                    f9:d9:c7:f8:73:ae:dd:57:74:26:da:a5:36:0e:97:
                    f1:0e:c0:65:de:95:8a:76:8e:a2:94:08:ce:99:5c:
                    c5:a3:60:a6:90:c9:a5:48:fd:35:2a:56:ce:52:d8:
                    ec:1b:78:a5:1c:20:5e:48:b7:7d:f8:66:5c:a5:50:
                    f2:aa:67:25:68:85:cc:f4:96:83:2a:fe:40:cc:16:
                    d5:83:37:5e:6f:0f:ec:c3:01:0e:d2:9e:dd:07:92:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:6A:36:6B:CC:6B:94:60:78:7F:DB:4D:5D:85:15:1E:A4:A9:6C
            X509v3 Authority Key Identifier:
                keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:58:57:db:1a:0a:ee:bc:40:bd:be:97:22:5f:d7:82:8c:
         00:a2:23:93:f2:d0:9f:4e:df:fd:57:94:28:13:4b:8e:f5:51:
         d5:b2:40:30:2e:df:e2:fc:7b:4e:59:6f:66:20:33:56:3b:38:
         ba:56:19:60:2f:59:eb:e3:ab:ae:62:38:99:6f:79:5c:bb:c0:
         b5:54:4f:b9:78:0d:a3:64:7a:4d:49:20:99:4a:bb:45:5f:ec:
         e6:e6:33:4d:3f:b7:f6:8a:f4:1f:3a:28:ea:dd:2e:21:31:60:
         74:49:ec:fe:c4:98:67:0a:4b:a4:08:3d:4a:85:59:5b:0e:b1:
         a0:cd:98:e5:27:65:a4:10:d8:19:20:65:a3:c0:7b:d6:04:85:
         79:18:3e:09:ab:40:c5:55:83:2f:cd:7e:47:81:c5:79:88:1f:
         37:d8:a1:25:a3:51:b8:d5:32:ca:99:b1:61:d3:92:f6:a8:39:
         f0:e0:9f:3b:1e:6c:d8:0c:e9:fe:8b:00:f1:3c:e7:ff:ee:72:
         09:4b:27:db:7c:60:54:db:bb:09:95:bd:31:26:69:65:19:ff:
         0f:92:b9:4a:eb:d5:b3:7c:51:f5:1e:20:aa:2f:b4:9b:37:bf:
         5e:92:0f:ae:41:4d:a4:56:0c:fc:98:a0:d6:10:86:0a:ff:f6:
         56:db:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----