Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
File:                     E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json)
Hash identifier:          M4osrKa/ZrqYnFeuEa4vbyJXzPV6OqahRe0plaoWCeA=
Subject key identifier:   5C:B9:0D:03:E3:47:E7:5E:56:55:A8:21:15:8F:A9:73:CB:03:70:DB
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Certificate issuer:       /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial:       711395C7607A5084D9F8DAA2EC32DE3DDCAAA6F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
Manifest number:          01DF
Signing time:             Thu 27 Mar 2025 21:20:55 +0000
Manifest this update:     Thu 27 Mar 2025 21:15:55 +0000
Manifest next update:     Mon 31 Mar 2025 08:57:55 +0000
Files and hashes:         1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: fMn6MiyxOhu/+wtOpUYaAeygghLRqGd2NaJmSTOYEX8=)
                          2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:13:95:c7:60:7a:50:84:d9:f8:da:a2:ec:32:de:3d:dc:aa:a6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Validity
            Not Before: Mar 27 21:15:55 2025 GMT
            Not After : Mar 31 08:57:55 2025 GMT
        Subject: CN=5CB90D03E347E75E5655A821158FA973CB0370DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:14:2a:54:2c:fa:c8:ee:74:ca:55:52:c4:
                    97:c8:86:3a:0b:24:db:f9:2b:d0:6f:c6:f4:23:6e:
                    4e:40:23:ee:ed:ab:64:b0:b5:50:61:0c:02:ab:aa:
                    36:e5:9f:7c:b7:cd:32:78:e7:9e:64:18:18:de:10:
                    12:b5:a6:f3:de:97:93:0d:52:2e:d9:76:e6:ea:75:
                    13:d7:8d:86:b7:88:ae:32:43:a4:13:c9:09:c3:50:
                    eb:82:4f:0a:8b:54:f8:70:a6:bf:19:a8:80:58:3b:
                    63:37:7f:f8:85:f9:0c:5c:7c:e8:c6:17:7c:a6:c8:
                    9a:6c:4f:b7:8f:29:71:64:a2:23:b0:b2:63:9f:34:
                    8a:8a:6a:73:60:5c:f0:1b:04:fe:15:d6:68:c2:ff:
                    cc:56:c2:46:75:4d:59:bb:7e:97:e2:77:45:43:b3:
                    dd:c1:f5:7f:bf:ba:d3:ad:da:84:d0:3b:4e:0e:a3:
                    61:57:83:d4:35:15:16:c5:6a:c6:4e:a5:92:39:a7:
                    ce:cb:c1:0a:86:ba:e8:93:20:78:8c:bb:99:10:10:
                    f2:6f:2c:9c:28:16:3c:26:f9:03:58:bb:8b:03:64:
                    75:b7:c8:67:24:49:05:4e:0d:e8:d7:e3:8c:ee:b1:
                    4e:73:a3:a1:ac:32:eb:b3:2d:cb:f4:c8:0f:68:e4:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:0D:03:E3:47:E7:5E:56:55:A8:21:15:8F:A9:73:CB:03:70:DB
            X509v3 Authority Key Identifier:
                keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:91:18:14:57:52:7e:f1:2f:9c:22:eb:81:04:c6:63:77:
         6e:78:50:62:9b:dd:9e:08:1c:63:ce:ba:ac:04:3b:3c:e7:fc:
         d2:30:b5:31:1c:fe:52:99:2e:b4:d5:4c:34:f3:ca:ee:e8:f7:
         60:85:1b:1e:78:36:e9:ed:ad:ef:2b:9f:a6:07:68:c8:12:12:
         ee:41:8d:26:60:41:2e:5d:74:fe:54:96:a6:8e:f8:88:85:46:
         88:2e:1c:d3:6e:bf:2d:6d:be:c3:df:69:8c:81:8c:b3:1f:ba:
         dc:c9:59:52:fe:ad:82:1e:c9:50:1c:ef:61:1a:30:45:1b:88:
         f8:8c:8b:d6:a5:5a:b0:97:2c:6d:c6:2e:1c:ab:88:1f:c5:d9:
         bd:a0:0f:a7:c7:a6:fe:07:03:1c:9c:c6:8a:c1:d5:cc:6d:92:
         02:6b:a1:c6:41:2f:7d:8b:17:04:e4:f1:4c:13:b3:9f:80:e4:
         c3:aa:30:64:36:e8:9c:7a:ab:bc:ad:79:ac:9d:a1:72:c6:c0:
         d2:6f:37:05:b4:a7:0b:98:44:54:dc:73:43:a0:e4:0e:dc:5a:
         c9:e4:b6:55:bf:0b:ab:89:66:f9:22:20:31:09:4d:82:ce:cd:
         5b:81:23:4a:dc:d9:ef:5d:c3:9b:b0:b5:75:8d:ba:24:89:df:
         de:1a:ac:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcROVx2B6UITZ+Nqi7DLePdyqpvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex
QURBNUQ3MDAeFw0yNTAzMjcyMTE1NTVaFw0yNTAzMzEwODU3NTVaMDMxMTAvBgNV
BAMTKDVDQjkwRDAzRTM0N0U3NUU1NjU1QTgyMTE1OEZBOTczQ0IwMzcwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOhQqVCz6yO50ylVSxJfIhjoL
JNv5K9BvxvQjbk5AI+7tq2SwtVBhDAKrqjbln3y3zTJ4555kGBjeEBK1pvPel5MN
Ui7ZdubqdRPXjYa3iK4yQ6QTyQnDUOuCTwqLVPhwpr8ZqIBYO2M3f/iF+QxcfOjG
F3ymyJpsT7ePKXFkoiOwsmOfNIqKanNgXPAbBP4V1mjC/8xWwkZ1TVm7fpfid0VD
s93B9X+/utOt2oTQO04Oo2FXg9Q1FRbFasZOpZI5p87LwQqGuuiTIHiMu5kQEPJv
LJwoFjwm+QNYu4sDZHW3yGckSQVODejX44zusU5zo6GsMuuzLcv0yA9o5JFrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXLkNA+NH515WVaghFY+pc8sDcNswHwYDVR0j
BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG
MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB
NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1
ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0
N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB7+kRgUV1J+8S+cIuuBBMZjd254UGKb3Z4I
HGPOuqwEOzzn/NIwtTEc/lKZLrTVTDTzyu7o92CFGx54Nuntre8rn6YHaMgSEu5B
jSZgQS5ddP5UlqaO+IiFRoguHNNuvy1tvsPfaYyBjLMfutzJWVL+rYIeyVAc72Ea
MEUbiPiMi9alWrCXLG3GLhyriB/F2b2gD6fHpv4HAxycxorB1cxtkgJrocZBL32L
FwTk8UwTs5+A5MOqMGQ26Jx6q7yteaydoXLGwNJvNwW0pwuYRFTcc0Og5A7cWsnk
tlW/C6uJZvkiIDEJTYLOzVuBI0rc2e9dw5uwtXWNuiSJ394arLc=
-----END CERTIFICATE-----