Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
File:                     D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json)
Hash identifier:          zwZKWDWXgfnwiNZLVMmac8T1S1dcVw2XvXaqXisNu/E=
Subject key identifier:   27:B6:A7:AB:BC:29:16:DE:CC:47:AA:97:D8:AB:68:C8:AA:44:38:64
Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0
Certificate issuer:       /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
Certificate serial:       60DAB28CEE328B0EF72AA4C1CB6466B3106C8A03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
Manifest number:          3E
Signing time:             Thu 27 Mar 2025 14:30:02 +0000
Manifest this update:     Thu 27 Mar 2025 14:25:02 +0000
Manifest next update:     Sun 30 Mar 2025 20:21:02 +0000
Files and hashes:         1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: Kg77J3T/ivC3QNGvpSg+XqcaaC6rpr2PByiSBrCUGrs=)
                          2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:b2:8c:ee:32:8b:0e:f7:2a:a4:c1:cb:64:66:b3:10:6c:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
        Validity
            Not Before: Mar 27 14:25:02 2025 GMT
            Not After : Mar 30 20:21:02 2025 GMT
        Subject: CN=27B6A7ABBC2916DECC47AA97D8AB68C8AA443864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:30:c7:75:a9:fd:9f:5b:7f:59:b8:69:82:
                    c0:e9:93:39:06:92:f6:ca:b7:4c:57:79:b5:0e:20:
                    13:5e:ba:06:fd:0d:b0:3c:91:c5:62:24:c0:62:fc:
                    39:56:c6:59:5c:b4:6b:03:c1:43:70:13:bd:07:01:
                    67:00:45:20:5e:5f:35:15:25:64:6f:c0:df:3b:23:
                    59:83:c1:df:38:38:a9:47:88:b0:5a:46:36:7d:56:
                    0f:93:26:6b:e3:88:ef:4d:75:de:6e:23:f5:ce:4d:
                    f3:81:27:a4:af:3c:bc:ef:17:21:99:86:ea:8b:fe:
                    3e:d9:ed:7d:e0:32:c0:e6:2c:b0:b4:61:c9:f7:a5:
                    d2:4a:49:a0:c4:6a:b9:8c:5d:1b:c6:b7:53:6b:0e:
                    c7:f9:ee:7d:b1:6a:cb:52:13:3b:13:8f:5b:de:27:
                    61:45:d9:6c:d4:88:33:81:ca:fa:62:e8:af:b1:9d:
                    87:a3:0c:9b:8b:ab:e4:73:68:fe:21:20:0c:1f:68:
                    48:83:0a:26:a9:3a:4f:78:53:09:31:89:cf:ea:e0:
                    25:1b:e5:99:b1:1e:3f:ad:70:47:a2:6a:2e:1a:42:
                    3a:df:99:1e:14:2d:df:10:92:16:2a:16:61:64:a2:
                    ea:ba:d0:32:fa:56:c6:ee:1d:95:a0:1b:81:62:44:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B6:A7:AB:BC:29:16:DE:CC:47:AA:97:D8:AB:68:C8:AA:44:38:64
            X509v3 Authority Key Identifier:
                keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:48:5d:c7:97:24:8d:bd:3f:dc:68:b8:64:d3:c2:91:aa:
         bc:ca:9a:8f:d5:dd:e5:eb:f5:64:4e:7b:87:92:1c:59:56:34:
         b5:7f:fd:23:19:7e:4b:14:a1:68:09:87:a5:82:9c:be:65:0c:
         6e:db:52:45:72:f1:f7:73:cb:7c:52:d1:38:d4:3c:52:33:a7:
         06:da:dc:8f:c5:ef:be:2a:21:57:d8:bf:62:b9:48:6e:ad:8d:
         50:9e:a9:fd:c4:c6:66:b9:11:c5:a7:80:11:4a:15:d5:19:3a:
         26:70:d6:c5:d1:17:5f:10:88:b0:36:78:24:09:98:57:5b:fd:
         af:73:8c:af:74:4a:58:84:24:aa:a7:78:ed:db:5f:a9:5e:db:
         b8:e7:e2:44:01:ab:8c:3b:ae:ba:cc:17:20:0c:75:ee:ef:51:
         89:26:a0:77:21:ea:a7:b7:ca:08:f0:25:f2:f7:42:db:49:02:
         69:17:1a:5c:aa:5c:33:f0:4c:05:7f:64:50:32:96:c6:b9:4c:
         2b:fe:ef:3d:68:6a:08:d8:11:11:ef:4f:e2:93:d4:18:0e:dd:
         96:1c:0b:c0:5e:2a:69:ab:f4:b5:da:6f:e4:5b:b3:1f:c2:40:
         15:90:cd:dd:6b:f0:f0:63:a3:7e:87:20:8b:ba:6e:7e:51:58:
         4f:37:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----