Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
File:                     0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json)
Hash identifier:          NCE9NhdueS7rTFSvtey3Pb8BIAl//zy3ZVrVUGe6WAI=
Subject key identifier:   2A:5A:C5:A0:9D:3F:B9:E2:FB:CD:E1:6A:96:5D:99:CF:79:51:66:2C
Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
Certificate issuer:       /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Certificate serial:       067FCEAD8F870E5EB2B4D34501B5C5525D61FE72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
Manifest number:          EF
Signing time:             Sat 29 Mar 2025 09:11:48 +0000
Manifest this update:     Sat 29 Mar 2025 09:06:48 +0000
Manifest next update:     Tue 01 Apr 2025 20:23:48 +0000
Files and hashes:         1: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=)
                          2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=)
                          3: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=)
                          4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=)
                          5: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: J545g4zW6HxpOPKYTq4b9BoYYteMyyQ4F7Ez2OQWzQg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:ce:ad:8f:87:0e:5e:b2:b4:d3:45:01:b5:c5:52:5d:61:fe:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
        Validity
            Not Before: Mar 29 09:06:48 2025 GMT
            Not After : Apr  1 20:23:48 2025 GMT
        Subject: CN=2A5AC5A09D3FB9E2FBCDE16A965D99CF7951662C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:fc:e0:29:2b:30:d5:eb:c6:e0:e1:5e:01:
                    79:fc:e1:98:72:d7:da:e4:e4:8c:ac:d3:51:b2:9f:
                    9d:4e:85:b1:44:75:e4:cd:2c:5e:ad:4a:0f:06:3c:
                    a5:90:27:4d:d9:47:fe:77:27:74:b6:34:20:a0:4e:
                    a7:5a:6d:19:90:bb:0f:9b:ba:e4:1a:74:f1:8b:5f:
                    23:97:6a:04:4f:77:30:d4:8a:82:21:61:4e:02:38:
                    d7:78:b0:69:bb:ed:26:7e:d2:59:13:3b:41:44:26:
                    6d:3d:21:71:4b:71:52:99:da:51:64:79:7e:7d:a0:
                    74:ce:a1:98:b9:da:b7:b0:91:e1:51:52:06:8d:0b:
                    08:b1:b2:cb:b7:a5:4c:45:e8:a0:7b:c2:aa:30:55:
                    01:2b:08:87:62:39:fd:5a:a1:7f:04:6c:a5:80:bc:
                    7d:21:d7:44:dd:83:a7:fa:d4:3b:02:52:4b:23:8a:
                    5f:33:41:27:93:6e:04:53:8f:43:39:e0:72:1d:f8:
                    c0:06:cc:db:e0:56:7a:a2:0e:25:40:55:fa:10:73:
                    30:16:ee:98:af:54:83:d9:fc:68:60:ee:1c:2f:46:
                    8a:d0:f2:eb:52:28:9b:bd:6e:d5:b4:20:ea:a8:87:
                    ea:df:49:d3:3a:2b:4d:21:65:e7:a1:92:56:8d:65:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5A:C5:A0:9D:3F:B9:E2:FB:CD:E1:6A:96:5D:99:CF:79:51:66:2C
            X509v3 Authority Key Identifier:
                keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:75:4e:41:12:6a:46:7c:7c:7b:e8:cf:e1:ab:69:79:1d:57:
         46:c3:f3:b7:7c:6a:20:9e:a9:13:60:f7:d6:39:b3:5b:89:a9:
         64:52:1a:82:9b:06:d8:27:13:bb:44:02:f3:7c:e2:7c:c7:a4:
         9a:25:04:df:33:d5:a1:48:4a:9e:48:99:5f:5c:f2:d4:6c:0f:
         c2:69:ca:9f:f9:fe:96:94:98:df:97:6a:28:20:81:5a:c3:1e:
         6e:28:2b:54:79:d7:a6:23:34:e8:6d:68:02:ae:6e:99:4b:c3:
         89:79:d3:b3:9f:50:0a:28:b0:17:3b:b4:40:f8:17:51:ce:ba:
         0f:2c:17:15:ed:41:e7:38:0c:23:27:14:78:25:13:50:fc:75:
         8b:c5:b2:d8:65:0e:5b:3b:b5:08:a1:8a:96:e0:06:a8:8c:eb:
         95:f4:b3:f5:10:04:1c:ea:6e:5a:ca:36:7e:fe:6f:0c:82:f4:
         34:d1:39:7c:71:88:50:57:24:f7:cc:c8:bc:28:33:35:84:e3:
         8d:f0:ae:87:12:15:63:5d:a1:08:0d:1c:68:7e:40:d9:3e:06:
         48:5b:67:1a:26:ae:e4:67:d6:43:cb:03:19:2e:f9:60:e5:93:
         14:dd:7c:cb:42:a8:7c:aa:e1:48:d8:60:7b:3a:f6:58:fe:7d:
         91:ca:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----