Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
File:                     B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json)
Hash identifier:          Ej2BT01lKAFuJS3dz7w6tm423cumoggQOETBk4Ygi34=
Subject key identifier:   AB:24:D3:51:28:3F:2B:84:38:9E:DF:B6:B4:49:CF:30:7E:9F:14:24
Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Certificate issuer:       /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Certificate serial:       0803EDA5ECA7CA4A9EB007105E1E4E10592AC4CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
Manifest number:          0138
Signing time:             Fri 28 Mar 2025 07:42:12 +0000
Manifest this update:     Fri 28 Mar 2025 07:37:12 +0000
Manifest next update:     Mon 31 Mar 2025 17:55:12 +0000
Files and hashes:         1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=)
                          2: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: Rusa/G8voHFKGtvoLrp1kvMdPeia5OdE+GGuOfN2p9Q=)
                          3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=)
                          4: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: OXNX1WpnGEvTtG2QVsXYBr1o3UirT2JM9Lg+MbGiddU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:03:ed:a5:ec:a7:ca:4a:9e:b0:07:10:5e:1e:4e:10:59:2a:c4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
        Validity
            Not Before: Mar 28 07:37:12 2025 GMT
            Not After : Mar 31 17:55:12 2025 GMT
        Subject: CN=AB24D351283F2B84389EDFB6B449CF307E9F1424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:d0:d3:33:31:6a:85:fc:18:5e:93:29:9a:
                    e4:81:9b:65:02:1f:df:91:10:ec:00:37:1e:2d:e5:
                    af:3e:cd:f2:a9:67:cb:1f:11:02:0b:d3:92:e9:ce:
                    7d:7a:89:90:f1:fc:23:94:58:a5:eb:90:d9:5b:e8:
                    d0:7e:cb:a1:38:3c:86:e6:6d:55:95:f4:f9:6c:ae:
                    32:96:90:71:81:63:68:47:ec:43:cd:ff:57:20:bf:
                    74:02:cb:f5:5e:64:e1:b7:7f:69:f8:84:73:48:c7:
                    f7:6a:a7:67:12:11:7a:93:ae:bf:8f:52:2f:55:44:
                    5d:bc:f1:5b:90:0d:c9:ef:06:84:bc:18:d2:e4:7b:
                    fc:c9:c1:66:9a:5b:98:5d:57:a1:9f:de:36:9a:ff:
                    2d:a3:5d:86:91:bb:33:95:6a:39:a6:c7:ea:29:7b:
                    9f:12:67:ae:9d:2b:93:27:5d:59:27:30:66:41:31:
                    e3:8e:9c:cf:1e:4a:9a:25:d0:a0:cb:96:e8:ff:23:
                    bb:89:28:b7:34:53:b9:8f:07:46:a1:5d:e3:ed:6c:
                    e2:49:23:bb:4d:62:61:92:05:0d:73:d2:c2:de:db:
                    80:49:f7:ad:25:28:51:06:62:39:76:b8:68:b0:20:
                    57:14:e1:fe:a7:e6:cf:dd:98:12:16:7b:d0:b6:89:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:D3:51:28:3F:2B:84:38:9E:DF:B6:B4:49:CF:30:7E:9F:14:24
            X509v3 Authority Key Identifier:
                keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:d1:34:ba:fc:8f:6e:38:6e:e8:5b:6b:09:66:e5:e7:f6:
         76:aa:29:e5:15:91:10:b2:ef:35:15:e0:ef:0d:c6:2b:c7:91:
         51:1e:14:92:de:3d:5c:81:a1:ab:95:b3:01:67:2b:94:ac:1f:
         7a:3d:a5:6f:63:52:fa:67:9e:c2:82:5c:48:33:38:11:b5:62:
         c0:b7:75:81:0f:51:8c:ed:d6:77:10:9b:57:10:86:fc:12:11:
         f8:f8:fd:4f:09:11:dc:7c:63:fd:59:49:db:ea:64:21:71:52:
         ad:da:37:f6:1a:f7:ee:c9:0f:89:46:25:9d:41:e2:4f:82:1a:
         dc:53:64:33:5d:9d:83:bc:8a:bb:6b:17:3e:99:36:7e:b3:2b:
         d1:a1:d5:d8:55:7c:6b:60:1c:2e:9b:b2:b2:76:5b:23:8f:5a:
         d4:30:60:cc:54:08:93:f8:03:98:ca:67:8c:38:47:23:09:47:
         b6:d1:4e:90:00:79:4c:5a:b4:b2:9a:08:ed:69:74:7c:75:2f:
         05:ff:e6:10:fe:33:66:c9:10:74:29:9c:a7:e0:71:35:a2:07:
         55:15:66:fe:10:ee:2d:b1:e6:c2:c9:da:a6:f3:35:0c:6e:5c:
         f3:2b:af:ba:67:6c:2f:96:f0:d1:4d:11:21:87:8e:c0:73:3b:
         6d:97:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----