Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
File:                     41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json)
Hash identifier:          OIG1Esca+PoUhUBBbqiIf98PwtA9PjBlN0jXZWYZhQU=
Subject key identifier:   FA:AE:D6:60:CD:3C:7E:56:F5:2F:FF:C3:0D:DD:BB:62:88:79:0D:5B
Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
Certificate issuer:       /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Certificate serial:       4BA80E8D69D5E14C34371C844C29E2ECAABE3293
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
Manifest number:          01B3
Signing time:             Fri 28 Mar 2025 02:52:08 +0000
Manifest this update:     Fri 28 Mar 2025 02:47:08 +0000
Manifest next update:     Mon 31 Mar 2025 08:20:08 +0000
Files and hashes:         1: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: WzHv+l1oqxZWGHfnttCTjhup1wfymAbaYr4dTWNJ6T4=)
                          2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: q2Yb4yMAQtfwd6naBrfG63XhT4cy5Z0/X6q/WuK9T+Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a8:0e:8d:69:d5:e1:4c:34:37:1c:84:4c:29:e2:ec:aa:be:32:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
        Validity
            Not Before: Mar 28 02:47:08 2025 GMT
            Not After : Mar 31 08:20:08 2025 GMT
        Subject: CN=FAAED660CD3C7E56F52FFFC30DDDBB6288790D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:0a:52:5c:52:83:37:64:1c:f0:83:ac:62:
                    c7:3c:96:ef:cf:3e:80:6d:d0:6e:a2:8b:51:ec:0d:
                    83:a8:2e:fb:67:bc:ca:da:3d:49:94:55:6b:fb:e6:
                    65:29:7c:cd:70:a7:79:8d:33:b1:43:e7:a6:89:75:
                    1f:a2:22:31:c2:03:29:1d:cf:68:35:01:b8:a4:c1:
                    93:4d:85:e8:57:ee:bb:06:d0:0d:84:cb:7d:db:d3:
                    e3:4a:3d:be:b3:24:d8:ed:c8:f1:b8:bb:c0:d2:c8:
                    9b:b3:b4:50:8c:c6:a7:f0:9c:d1:d1:fb:8a:75:79:
                    d4:d8:f2:50:99:17:2c:3c:c6:0b:2d:57:8e:44:1a:
                    9e:e4:b8:5a:55:b4:71:0f:83:97:b1:9a:be:4c:c5:
                    d0:86:be:ba:f9:b6:d5:e0:1a:37:24:98:ef:3b:a1:
                    e4:99:68:69:e4:f9:a5:d5:d2:72:c8:e0:1c:c3:44:
                    80:ec:85:ca:72:4b:36:a6:61:ae:19:79:18:e1:14:
                    bc:65:31:06:78:f6:08:dc:00:40:ae:03:2a:9b:03:
                    71:4d:af:71:da:e3:58:6f:2c:18:07:94:5f:c9:ac:
                    4b:dc:23:fe:2e:52:40:da:ec:cf:54:f6:9c:65:b5:
                    93:be:94:0e:9b:06:f3:19:7c:56:cf:f6:3f:3f:56:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:D6:60:CD:3C:7E:56:F5:2F:FF:C3:0D:DD:BB:62:88:79:0D:5B
            X509v3 Authority Key Identifier:
                keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:21:dc:b1:03:66:d6:8e:61:c7:79:62:97:f5:4a:4f:7d:e9:
         3b:25:01:2e:44:93:b4:57:1b:13:fd:f1:8b:43:ac:7b:4c:b6:
         db:df:5e:3c:d6:97:7f:19:2e:4b:dd:31:df:8c:ec:92:6a:ac:
         90:fa:cf:a8:05:19:00:89:46:d5:4a:42:2e:77:12:b0:78:ac:
         7a:00:d0:75:82:ce:1c:82:07:43:7e:e9:35:0f:3e:3a:a0:c5:
         fc:33:f1:2b:5c:59:47:08:b9:34:a9:c6:0e:83:04:43:50:f0:
         fd:4d:43:88:14:67:31:45:ca:da:1c:4a:4f:76:77:97:1c:f9:
         34:dd:5a:54:b1:05:6c:dc:f2:9b:0d:66:66:fd:ee:22:11:a8:
         26:f6:f6:e1:eb:7c:2e:16:a9:1d:0a:6c:e5:41:4d:5e:11:cd:
         77:4a:96:f6:9e:dd:1f:3d:96:a2:23:5b:d6:2e:17:c5:f3:64:
         ca:92:d1:af:76:c4:39:bb:d7:01:b3:55:1d:c8:5d:79:37:2c:
         ac:da:00:32:7e:8c:55:27:85:13:dc:c2:d8:60:84:0a:24:63:
         42:c5:40:e8:90:f6:e0:dd:5b:8a:ee:9d:fb:8a:d6:63:2b:23:
         d2:7c:bb:2b:91:2d:f3:c3:b9:1b:14:b1:96:ac:ad:68:bd:10:
         84:6c:2e:52
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS6gOjWnV4Uw0NxyETCni7Kq+MpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC
NEI0RTc4NjAeFw0yNTAzMjgwMjQ3MDhaFw0yNTAzMzEwODIwMDhaMDMxMTAvBgNV
BAMTKEZBQUVENjYwQ0QzQzdFNTZGNTJGRkZDMzBERERCQjYyODg3OTBENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIQpSXFKDN2Qc8IOsYsc8lu/P
PoBt0G6ii1HsDYOoLvtnvMraPUmUVWv75mUpfM1wp3mNM7FD56aJdR+iIjHCAykd
z2g1AbikwZNNhehX7rsG0A2Ey33b0+NKPb6zJNjtyPG4u8DSyJuztFCMxqfwnNHR
+4p1edTY8lCZFyw8xgstV45EGp7kuFpVtHEPg5exmr5MxdCGvrr5ttXgGjckmO87
oeSZaGnk+aXV0nLI4BzDRIDshcpySzamYa4ZeRjhFLxlMQZ49gjcAECuAyqbA3FN
r3Ha41hvLBgHlF/JrEvcI/4uUkDa7M9U9pxltZO+lA6bBvMZfFbP9j8/VvntAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+q7WYM08flb1L//DDd27Yoh5DVswHwYDVR0j
BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD
MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0
RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh
NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2
MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFAh3LEDZtaOYcd5Ypf1Sk996TslAS5Ek7RX
GxP98YtDrHtMttvfXjzWl38ZLkvdMd+M7JJqrJD6z6gFGQCJRtVKQi53ErB4rHoA
0HWCzhyCB0N+6TUPPjqgxfwz8StcWUcIuTSpxg6DBENQ8P1NQ4gUZzFFytocSk92
d5cc+TTdWlSxBWzc8psNZmb97iIRqCb29uHrfC4WqR0KbOVBTV4RzXdKlvae3R89
lqIjW9YuF8XzZMqS0a92xDm71wGzVR3IXXk3LKzaADJ+jFUnhRPcwthghAokY0LF
QOiQ9uDdW4runfuK1mMrI9J8uyuRLfPDuRsUsZasrWi9EIRsLlI=
-----END CERTIFICATE-----