Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
File:                     316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json)
Hash identifier:          2eUdLfTZPqYQHJcPNUgrbSuWo3oYo3O5vTEqZwOp8Es=
Subject key identifier:   45:89:21:B1:95:28:B9:19:8C:9B:36:54:0B:55:64:A6:61:E3:24:ED
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Certificate issuer:       /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial:       074F25DBC5D3734C20AA4AA0794BB638C5928ECA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
Manifest number:          0423
Signing time:             Fri 28 Mar 2025 17:50:43 +0000
Manifest this update:     Fri 28 Mar 2025 17:45:43 +0000
Manifest next update:     Mon 31 Mar 2025 19:09:43 +0000
Files and hashes:         1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: HlTH1oYNBnzzcEWhTrgfmDPVe5GE52Vqje71mX4vlFo=)
                          2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: y7PM3p8QhKJmXTNyCfWzCa+3cBxY+126K/JT4kAY5zU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4f:25:db:c5:d3:73:4c:20:aa:4a:a0:79:4b:b6:38:c5:92:8e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
        Validity
            Not Before: Mar 28 17:45:43 2025 GMT
            Not After : Mar 31 19:09:43 2025 GMT
        Subject: CN=458921B19528B9198C9B36540B5564A661E324ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:e6:30:a5:6c:ce:eb:58:a2:cb:7a:4e:cc:
                    0f:af:ea:b1:31:74:ff:fb:75:67:74:75:ee:c9:a5:
                    6c:01:e4:3d:65:54:28:f7:68:fb:99:b2:aa:af:aa:
                    e4:d8:e4:79:f8:f6:14:62:f2:cc:be:7f:c0:ba:18:
                    29:ca:41:4b:67:ad:a9:ce:b6:14:dd:55:e4:b3:91:
                    5f:1c:fc:be:10:f6:de:84:07:67:d8:8e:e5:0c:3d:
                    2f:d9:f3:d3:cb:8d:09:e1:6a:cb:da:9e:ad:a4:ab:
                    df:fd:4b:c9:94:7e:93:51:09:db:11:00:6d:9a:84:
                    b5:1e:3a:86:6a:9a:bc:7d:3e:70:f9:0a:a9:09:bc:
                    81:bc:73:2c:38:d2:31:bb:ad:c1:a9:3e:ef:9d:1b:
                    fe:e1:8d:3c:9b:5a:d3:00:78:87:4d:60:ef:86:69:
                    13:dc:8c:07:42:48:84:c0:ee:05:31:23:97:48:d7:
                    9b:50:a2:fe:23:ed:b7:b5:71:e9:8a:62:f6:4d:40:
                    d8:7d:51:a9:63:e5:05:2e:14:28:a1:39:b3:0c:59:
                    9e:4d:4a:38:d0:55:90:bb:1a:46:1f:e9:96:e9:46:
                    4c:46:d3:22:2b:8b:93:93:1c:75:87:3f:da:71:af:
                    62:d1:91:78:40:54:41:91:44:a5:0a:e6:9e:68:6a:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:89:21:B1:95:28:B9:19:8C:9B:36:54:0B:55:64:A6:61:E3:24:ED
            X509v3 Authority Key Identifier:
                keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:1a:b3:f6:df:c6:5c:fc:4d:17:51:33:31:60:f6:8b:17:
         b9:12:60:4e:2b:52:d8:ac:50:57:47:2e:df:48:b5:e2:4e:b5:
         c5:72:fb:13:a5:3a:a7:29:c2:8c:0a:c8:7c:23:4f:95:f8:d4:
         53:0b:77:1a:d1:f8:6b:4e:07:5d:64:e3:58:af:f1:8c:6e:94:
         0c:0d:23:d4:2c:76:08:97:11:03:bd:c4:73:80:ec:f9:04:e2:
         db:59:58:dc:36:2c:32:88:72:dc:71:03:d0:bf:7b:5f:eb:e7:
         39:cc:3e:b1:00:c5:a2:cf:4e:58:80:bb:66:d2:1e:1b:76:fe:
         ba:5d:b7:6b:35:2d:2c:14:3d:de:d4:4f:d9:6e:80:ea:3f:ff:
         02:1c:12:34:51:a9:77:d7:0d:10:f5:6d:e3:60:30:41:29:a7:
         75:79:ae:c4:03:62:90:59:6e:c2:e2:c3:63:18:fc:67:73:33:
         b6:a9:92:51:01:a6:2d:a2:b5:5e:75:ab:56:e7:8c:93:76:8d:
         1c:d2:37:30:c7:26:ed:26:f2:66:7d:45:4c:76:c0:c4:47:5b:
         1f:e5:76:ee:c3:d1:eb:c0:6b:00:98:2d:51:ad:ce:60:4a:07:
         b0:b5:6a:b4:58:66:f0:20:28:0e:64:32:97:5f:04:5e:d1:e6:
         5c:a2:aa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----