Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
File:                     E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json)
Hash identifier:          6bhWOKuBw0uY40XQJNoZhMKFB3Ury8sMu/m+7X+oyMs=
Subject key identifier:   88:C0:5C:BD:E7:64:CC:9B:86:47:71:DE:47:06:BA:CE:16:D9:26:82
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Certificate issuer:       /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial:       30A07A2B2C34CED400713AA4B45E053E298A3035
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
Manifest number:          0442
Signing time:             Fri 28 Mar 2025 03:21:12 +0000
Manifest this update:     Fri 28 Mar 2025 03:16:12 +0000
Manifest next update:     Mon 31 Mar 2025 15:15:12 +0000
Files and hashes:         1: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: BLD+hI86dkWQNCoX4wPtDquU0FJZKqBfRcLwJM03Uvo=)
                          2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=)
                          3: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: pIrm7aPUPJFZ4XifD9qRVgfWPMQmX5/I7DSyyV9fZas=)
                          4: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:7a:2b:2c:34:ce:d4:00:71:3a:a4:b4:5e:05:3e:29:8a:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
        Validity
            Not Before: Mar 28 03:16:12 2025 GMT
            Not After : Mar 31 15:15:12 2025 GMT
        Subject: CN=88C05CBDE764CC9B864771DE4706BACE16D92682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:d7:e3:51:e9:6c:0c:85:34:5a:68:eb:52:
                    a0:b6:49:ab:8c:16:06:62:8e:de:06:bb:7e:7a:7b:
                    29:60:2c:af:81:c7:fc:db:39:64:16:61:0d:60:ec:
                    79:1b:01:bb:5a:42:3e:95:78:7b:27:ce:76:8e:50:
                    06:63:51:33:fc:3b:07:31:2b:62:f7:7a:2b:1b:1c:
                    63:44:e3:ad:7a:83:06:86:e4:aa:aa:73:16:28:5a:
                    4d:89:dd:75:22:bf:f1:dd:e4:21:f1:87:5c:fb:57:
                    75:f5:71:13:08:a5:fe:ab:da:fd:0b:8e:eb:b5:31:
                    5c:40:be:e6:d1:36:e7:1f:ce:24:f8:d9:51:ef:7e:
                    37:39:5f:9b:c2:e7:e0:18:be:45:cc:39:43:e3:14:
                    56:21:eb:b2:1e:53:59:ba:25:de:26:a0:41:b3:f4:
                    e2:ce:94:05:9e:91:c5:79:dd:7a:4d:aa:18:74:d4:
                    5a:c1:97:82:13:dd:b3:47:96:38:52:2f:e5:6c:77:
                    80:f2:f0:cd:3c:16:6b:c3:f8:b7:fb:2a:cf:3e:46:
                    22:60:f6:d5:34:db:d3:aa:18:3b:cf:31:12:80:28:
                    da:00:95:04:01:a8:4a:ff:93:f5:e7:c0:52:9c:7b:
                    47:08:da:96:96:77:18:d9:cb:ba:2d:3a:95:76:94:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:5C:BD:E7:64:CC:9B:86:47:71:DE:47:06:BA:CE:16:D9:26:82
            X509v3 Authority Key Identifier:
                keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:25:5e:7b:b5:b9:02:e6:80:55:61:b8:c6:90:c7:d6:69:
         78:02:61:ea:d4:78:ae:f2:2f:52:85:04:95:1d:6d:44:00:49:
         a0:bf:27:04:b8:06:1d:a0:c6:a9:e4:a8:db:60:cb:8c:9f:95:
         b7:42:35:89:02:2e:b2:96:81:ef:18:1d:70:70:b5:43:ff:a6:
         6a:99:85:ba:f7:46:87:82:68:3b:fa:b2:95:4f:89:af:d9:bb:
         2e:5b:f5:94:27:ee:a6:21:83:29:4f:87:27:3d:79:6b:ef:69:
         4d:49:48:a8:b1:31:f9:a3:e0:1d:99:18:b4:ef:26:b5:78:d5:
         43:a3:41:a4:de:ca:4b:0c:52:f8:8b:01:cb:31:49:d3:b7:f8:
         83:fb:09:3e:82:1d:fd:21:df:2b:65:c7:e4:fa:75:d8:a7:ce:
         f3:66:42:3a:11:52:f7:15:f3:d7:6d:e1:71:1b:2b:a5:d4:bd:
         07:d8:1e:47:0e:1a:84:61:38:0e:97:52:06:32:09:ba:ba:ad:
         31:3d:65:f2:2e:f6:bf:6e:98:9f:2b:ca:68:10:e9:24:03:d7:
         e4:07:07:74:b9:12:5c:af:d2:68:b0:94:dc:14:14:ac:a3:89:
         de:84:0f:33:26:5d:75:2c:75:ec:77:1d:cb:f5:67:31:8f:54:
         a4:ff:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----