Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
File:                     2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json)
Hash identifier:          DL2MqbbRUZF4ogzZ61DiHDyLKSvVA4tUyes39rVyVAE=
Subject key identifier:   D4:F4:9F:54:40:4A:3E:88:78:91:C9:16:05:AE:E0:A5:08:55:0E:4B
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Certificate issuer:       /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial:       0D36B9B06C550949FA7519CF58C64260A31C1E2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
Manifest number:          8F
Signing time:             Fri 28 Mar 2025 00:11:09 +0000
Manifest this update:     Fri 28 Mar 2025 00:06:09 +0000
Manifest next update:     Mon 31 Mar 2025 05:47:09 +0000
Files and hashes:         1: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: GP3+v4YZFVATJDY28603RjNqKF1UcrGseQwVWHJJFgg=)
                          2: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: P/nYNmWNztuZ1w885Ocy0s0FIiCKtv6xWs3rUQLjCnQ=)
                          3: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: es4te2vVxb4JEToUjIvu0tqHYlVICPMUEJI9fzPo4mo=)
                          4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: wERTTK6PUlbkpsEqvjEF84VPr/7gJTPS8S/scf4WQXU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:36:b9:b0:6c:55:09:49:fa:75:19:cf:58:c6:42:60:a3:1c:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
        Validity
            Not Before: Mar 28 00:06:09 2025 GMT
            Not After : Mar 31 05:47:09 2025 GMT
        Subject: CN=D4F49F54404A3E887891C91605AEE0A508550E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:1b:92:04:98:a9:8f:ae:4b:43:97:55:68:
                    5d:f8:fc:86:92:f5:57:17:15:12:40:8c:e5:57:9e:
                    1e:a3:97:13:40:96:7d:98:ec:ce:a1:bb:24:ba:80:
                    26:78:34:3e:dd:54:04:ab:40:81:0a:27:5d:ab:29:
                    ee:3c:a7:ce:6c:7e:05:c2:c0:94:40:33:3f:64:53:
                    37:4e:78:38:e5:39:27:d6:0b:c2:fb:b9:2d:a7:32:
                    14:35:43:3b:94:39:a9:30:41:61:67:63:ef:3c:bd:
                    9d:d3:63:b4:06:aa:bf:94:09:d3:dc:c9:68:a6:65:
                    6d:1a:38:43:ec:5d:2e:c7:24:db:7f:32:ee:cb:5c:
                    48:42:56:13:01:64:89:ef:bc:1a:99:4b:57:69:0b:
                    6a:f8:29:4e:17:c7:47:5a:f5:23:12:7e:7d:9f:3f:
                    c5:ee:50:de:6b:65:90:2d:14:48:9e:51:7c:a9:69:
                    7b:ee:0f:2b:de:8f:d0:b6:5e:72:41:4a:1d:5f:b1:
                    3c:0a:51:01:14:11:c9:9d:42:0c:e1:36:6d:1d:ea:
                    1c:1c:e7:c7:4f:53:81:f0:61:1f:62:b4:e6:65:bc:
                    36:80:b2:bb:cd:e1:1b:46:01:db:8e:18:db:d7:67:
                    39:e9:4c:ea:6b:6a:02:5b:af:a0:1c:fe:0e:3d:0e:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:9F:54:40:4A:3E:88:78:91:C9:16:05:AE:E0:A5:08:55:0E:4B
            X509v3 Authority Key Identifier:
                keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:9a:8e:38:13:4a:e0:ea:f9:70:5c:f4:b8:23:24:57:23:
         cf:b4:19:23:49:ca:11:40:48:08:e3:b1:a4:c3:ee:32:5c:98:
         90:79:fc:f4:80:a6:3b:46:a2:76:6c:05:7c:00:53:01:07:d4:
         6f:51:c4:7a:6c:0a:5f:2b:30:bc:ec:5b:c8:2b:59:1f:5e:f3:
         de:14:bb:37:f6:5f:75:ca:b2:84:6f:2c:3d:04:2b:53:03:8a:
         ae:dc:62:d5:4f:50:9b:e7:a0:1c:22:ed:e5:aa:a6:a7:5c:99:
         e3:65:e2:ec:e9:26:d2:dd:82:cc:79:9d:c3:ed:9e:69:6c:3d:
         79:3f:fc:ab:56:48:49:28:ac:8a:bc:ce:21:40:63:77:a6:1f:
         7f:46:6f:9a:ed:c2:55:4a:1f:09:be:57:e3:5a:30:62:f1:1c:
         a9:94:3a:e5:f7:39:25:95:59:3c:a0:e0:a8:bc:77:86:fd:64:
         47:68:e0:0b:6d:47:51:d6:6a:23:36:5f:e6:28:bb:0c:f0:4b:
         2e:38:73:24:d4:8d:91:79:aa:24:8d:b4:da:06:f6:2a:9a:b5:
         bb:12:b4:2c:e2:0d:df:05:ae:65:d0:24:dc:af:5e:2a:0a:88:
         46:8d:13:36:7e:76:ab:9f:15:81:a1:75:aa:a9:37:3b:0b:7d:
         dd:59:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----