Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
File:                     FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json)
Hash identifier:          25ytY8ndyrNRh98qS59aWnhRt4sp66+naY9fq2FlmIk=
Subject key identifier:   22:4A:A9:8F:CB:EE:1F:2C:9E:A6:A9:67:E0:2C:CF:60:C8:12:DB:9F
Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE
Certificate issuer:       /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
Certificate serial:       1D8AA1AC22F93AA438FA7E91B7001F7B8CCB74D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
Manifest number:          04BD
Signing time:             Fri 28 Mar 2025 09:02:11 +0000
Manifest this update:     Fri 28 Mar 2025 08:57:11 +0000
Manifest next update:     Mon 31 Mar 2025 20:53:11 +0000
Files and hashes:         1: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: kNSI/R1121HrazcftmK6uD3WFw5geZ6ZQUAT6lj2p5M=)
                          2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: xYvlr5pZjidZLbV3xWDKr9GCYRZmkQJEpxTWLCj2OY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8a:a1:ac:22:f9:3a:a4:38:fa:7e:91:b7:00:1f:7b:8c:cb:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
        Validity
            Not Before: Mar 28 08:57:11 2025 GMT
            Not After : Mar 31 20:53:11 2025 GMT
        Subject: CN=224AA98FCBEE1F2C9EA6A967E02CCF60C812DB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:12:5d:fa:9e:23:6d:91:72:38:63:0a:be:
                    e6:79:11:a0:96:c8:aa:73:69:37:99:2e:5b:0d:08:
                    8d:2d:c7:ba:f4:b8:f7:fb:22:a1:7c:25:f9:b7:27:
                    b3:f9:9d:b8:3e:b9:33:3d:78:3b:d8:a8:66:e1:2a:
                    d8:a2:9f:d4:2e:3c:ce:5a:ae:88:37:01:44:57:93:
                    f2:68:3c:0c:f6:16:7c:bc:65:00:60:7f:43:a1:9d:
                    1c:f2:e0:cc:b1:45:2a:ca:2d:88:cf:11:83:b1:c3:
                    58:e4:2b:8a:ed:ab:e2:2b:9a:aa:ca:95:72:b5:e8:
                    86:bd:ef:82:51:85:25:95:88:6a:04:d3:50:53:74:
                    d6:46:f7:97:66:fe:c9:d0:14:86:c7:66:f7:ad:65:
                    20:25:63:aa:21:36:5e:f0:9d:77:20:8b:e1:78:00:
                    56:95:cd:50:00:2e:92:37:15:17:19:9d:b1:ed:5a:
                    96:9d:b6:3d:cb:6a:8c:11:84:48:bd:f5:26:3d:96:
                    fb:07:12:a0:73:dc:da:c1:4d:12:e8:24:65:d0:00:
                    b3:ac:d6:f5:b0:6b:c7:26:b9:86:50:b0:ad:ce:11:
                    e1:e3:14:b8:eb:d4:d0:4e:d0:17:d6:67:1e:79:73:
                    d3:59:f0:77:03:ea:88:96:e2:2e:5f:e0:e6:15:77:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:A9:8F:CB:EE:1F:2C:9E:A6:A9:67:E0:2C:CF:60:C8:12:DB:9F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:08:51:f0:23:b2:ca:ea:b8:32:82:a0:ee:bc:e4:7c:bc:
         f8:97:16:02:42:67:5b:82:28:bb:92:5d:cd:97:e5:e7:ea:d9:
         ae:b7:fe:1b:4d:04:85:97:d0:c9:20:bc:e4:8a:8c:2a:0c:eb:
         2a:dd:60:d2:3a:59:36:b3:89:31:db:5f:04:a7:9c:29:e5:ef:
         d9:33:47:a2:dc:2c:59:8e:a1:17:69:21:93:38:89:0a:fd:9d:
         1a:f0:ec:fb:38:4c:f5:88:fb:2a:40:84:6c:b1:3f:7a:2f:a1:
         a2:3f:af:77:ae:28:37:5e:d5:c1:1b:c7:9d:b4:9e:bc:89:65:
         f5:e5:fb:49:09:0f:1d:ff:65:1e:ab:6a:77:10:93:88:83:92:
         33:e2:a5:9a:55:d5:31:d6:d8:d7:ca:2e:34:99:df:33:8c:a1:
         5e:14:b3:37:a4:c9:ea:31:7c:7a:65:9b:5e:78:43:83:ca:4a:
         f6:99:d1:06:0b:94:66:38:be:43:1b:9a:14:0d:86:5e:7e:96:
         1b:f2:90:12:6c:fb:e5:3d:e1:2f:67:f3:a7:c9:a7:36:b8:67:
         c7:9f:87:40:75:f0:dc:53:6f:da:81:ef:34:2c:84:40:5b:be:
         3f:8f:01:a7:8c:c2:e8:e8:12:b2:5f:63:f3:bc:4e:d9:c9:6f:
         17:bf:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----