Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
File:                     094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json)
Hash identifier:          CrsFdBKhCXfxd7BaZHVWr66dz2IE0li3w6lal14PVyE=
Subject key identifier:   73:7C:74:7A:9A:7C:AA:39:73:AE:E8:88:3B:A4:55:C4:FB:7F:6C:64
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       2EE23D83F5C776D2F790E40938F6E4A5494C0DA5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
Manifest number:          016C
Signing time:             Thu 27 Mar 2025 15:32:20 +0000
Manifest this update:     Thu 27 Mar 2025 15:27:20 +0000
Manifest next update:     Sun 30 Mar 2025 16:51:20 +0000
Files and hashes:         1: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: fx6rHN0G8IOTLLu9CMOtJG1c5g3iG1RY/9HC8/xxOiI=)
                          2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=)
                          3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: efQGExmEhnoXJray3dn6zshoqzcOBC7xZAkaxJJj1q0=)
                          4: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:3d:83:f5:c7:76:d2:f7:90:e4:09:38:f6:e4:a5:49:4c:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Mar 27 15:27:20 2025 GMT
            Not After : Mar 30 16:51:20 2025 GMT
        Subject: CN=737C747A9A7CAA3973AEE8883BA455C4FB7F6C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:82:d1:f3:9a:79:8e:9f:22:b7:19:57:c5:
                    45:c4:e6:d1:ec:f6:61:e9:cc:00:de:f9:fb:d7:73:
                    1d:43:a7:26:1d:87:80:b9:5b:c9:8c:9d:75:d2:87:
                    3a:f9:8e:c8:0a:2b:de:47:b3:6f:a3:33:12:51:a5:
                    b5:bc:fc:25:d4:ff:d0:b7:47:ee:e3:57:cd:25:a3:
                    f1:aa:68:48:36:77:c4:e8:21:f5:83:aa:84:c1:bf:
                    f9:33:34:c1:ef:4e:9e:6a:8d:fa:ff:74:53:e0:ba:
                    a7:77:f4:b1:77:09:9e:4e:20:9d:bc:ea:9a:d4:54:
                    67:be:23:47:bc:fb:d5:91:5c:cb:b4:ea:4b:70:91:
                    db:1f:d9:61:c1:78:c8:35:e5:4d:57:95:b3:c5:d0:
                    35:64:c1:d9:9a:75:60:a0:5f:62:8f:fb:4a:8a:0c:
                    bd:19:89:08:c5:52:8e:8b:b6:52:37:c1:19:2e:7b:
                    d9:81:e9:32:1a:d4:81:6c:8b:99:8a:e3:50:6e:b1:
                    b2:65:28:fb:84:eb:11:6c:12:44:da:ea:cf:67:32:
                    d7:cb:b0:48:91:cc:36:e4:7f:82:ea:6a:b5:99:6c:
                    b1:e2:11:a8:e1:45:05:bc:97:84:08:ed:27:1c:b1:
                    a5:5c:8f:a3:f1:f5:5f:5e:7e:c8:49:fe:9c:bf:cf:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:74:7A:9A:7C:AA:39:73:AE:E8:88:3B:A4:55:C4:FB:7F:6C:64
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ea:12:d6:cc:fa:03:8d:dc:a5:e3:36:af:96:21:84:4f:7c:
         ee:45:f7:ce:e1:37:1c:12:43:8f:b9:4e:49:b9:7e:93:eb:d6:
         93:89:5c:6e:41:cb:e6:89:50:ee:55:4d:90:91:89:4d:74:75:
         52:4f:d8:47:73:75:0a:06:60:5c:b9:20:68:9e:9f:10:65:9b:
         f4:9a:4a:ea:51:2f:ac:72:8e:5f:c5:7f:8a:5f:a0:aa:20:6a:
         df:de:a2:11:1b:d6:13:c2:94:b8:41:e4:ec:6b:ff:17:33:30:
         3d:2e:1f:b6:2b:39:73:87:35:95:a9:05:bf:be:27:17:d5:3e:
         88:5b:c5:fe:f2:1f:97:b7:8b:8a:75:f8:6a:ef:f9:9b:58:bb:
         3d:1d:4f:bf:0f:11:bf:08:ca:5c:05:02:e4:6d:59:1f:f9:f5:
         f0:83:e7:e5:8b:67:b1:d0:1b:1a:29:25:0a:44:cd:4a:4e:e0:
         d8:d5:3c:b6:e0:86:e5:9b:60:0c:70:b8:c8:28:04:03:92:94:
         61:72:2e:69:26:d8:12:2e:59:c1:21:9e:c6:3e:c4:62:dc:b7:
         44:1f:75:78:73:3f:91:e6:93:c9:51:d4:7f:4c:7c:03:23:2e:
         10:ea:68:2b:7b:b1:b9:9b:47:7a:99:0f:8d:13:34:60:fa:b6:
         20:8f:64:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULuI9g/XHdtL3kOQJOPbkpUlMDaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC
MkM5ODEzQzAeFw0yNTAzMjcxNTI3MjBaFw0yNTAzMzAxNjUxMjBaMDMxMTAvBgNV
BAMTKDczN0M3NDdBOUE3Q0FBMzk3M0FFRTg4ODNCQTQ1NUM0RkI3RjZDNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnILR85p5jp8itxlXxUXE5tHs
9mHpzADe+fvXcx1DpyYdh4C5W8mMnXXShzr5jsgKK95Hs2+jMxJRpbW8/CXU/9C3
R+7jV80lo/GqaEg2d8ToIfWDqoTBv/kzNMHvTp5qjfr/dFPguqd39LF3CZ5OIJ28
6prUVGe+I0e8+9WRXMu06ktwkdsf2WHBeMg15U1XlbPF0DVkwdmadWCgX2KP+0qK
DL0ZiQjFUo6LtlI3wRkue9mB6TIa1IFsi5mK41BusbJlKPuE6xFsEkTa6s9nMtfL
sEiRzDbkf4LqarWZbLHiEajhRQW8l4QI7SccsaVcj6Px9V9efshJ/py/z9PbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUc3x0epp8qjlzruiIO6RVxPt/bGQwHwYDVR0j
BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew
QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5
ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx
NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw
MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHPqEtbM+gON3KXjNq+WIYRPfO5F987hNxwS
Q4+5Tkm5fpPr1pOJXG5By+aJUO5VTZCRiU10dVJP2EdzdQoGYFy5IGienxBlm/Sa
SupRL6xyjl/Ff4pfoKogat/eohEb1hPClLhB5Oxr/xczMD0uH7YrOXOHNZWpBb++
JxfVPohbxf7yH5e3i4p1+Grv+ZtYuz0dT78PEb8IylwFAuRtWR/59fCD5+WLZ7HQ
GxopJQpEzUpO4NjVPLbghuWbYAxwuMgoBAOSlGFyLmkm2BIuWcEhnsY+xGLct0Qf
dXhzP5Hmk8lR1H9MfAMjLhDqaCt7sbmbR3qZD40TNGD6tiCPZNw=
-----END CERTIFICATE-----