Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
File:                     6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json)
Hash identifier:          QI5xUE1E6E020vRyi1NqMjojkVzZ3NKmrNGKKX4z0lo=
Subject key identifier:   AA:B1:AD:0E:9C:91:81:9C:10:52:C2:E4:E1:C7:10:BD:4B:B2:46:2E
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       5C0A076EFFB3E15E2F56971292A692174BE8C9D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
Manifest number:          014B
Signing time:             Fri 28 Mar 2025 07:21:45 +0000
Manifest this update:     Fri 28 Mar 2025 07:16:45 +0000
Manifest next update:     Mon 31 Mar 2025 16:32:45 +0000
Files and hashes:         1: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=)
                          2: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=)
                          3: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: gSk1IeoutCV+fKsTHbMU5V7p7ulGgAMcLuTdqzvnNx4=)
                          4: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=)
                          5: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=)
                          6: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=)
                          7: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0a:07:6e:ff:b3:e1:5e:2f:56:97:12:92:a6:92:17:4b:e8:c9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Mar 28 07:16:45 2025 GMT
            Not After : Mar 31 16:32:45 2025 GMT
        Subject: CN=AAB1AD0E9C91819C1052C2E4E1C710BD4BB2462E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:a3:a4:88:a1:ce:63:0c:54:63:e2:82:bf:
                    48:9d:0b:6a:29:7a:56:c0:85:5d:b2:67:0e:71:1a:
                    1c:a0:06:b6:39:62:b1:4d:ee:c5:eb:9a:65:84:44:
                    c0:52:ed:15:99:48:d8:1c:52:08:61:45:43:1c:31:
                    01:65:0d:f3:38:41:18:08:50:fb:4d:fa:b7:13:12:
                    64:d4:3d:a6:ca:0b:79:12:37:66:c4:95:de:da:f4:
                    a4:90:18:60:8f:49:cb:81:b4:6d:c1:bf:f3:f3:e3:
                    69:92:3f:62:7e:63:14:8b:8a:6e:8d:52:af:29:07:
                    46:6c:02:62:21:10:55:5b:b4:c0:2f:2a:96:6e:80:
                    cd:d0:39:ab:0d:d7:5a:b2:8a:bb:8f:ff:8b:94:56:
                    86:9e:2d:69:1f:c4:af:6b:aa:f9:d5:ee:b4:1e:58:
                    96:81:d9:3c:c1:01:34:9c:d1:7d:01:31:a0:d2:11:
                    47:01:ee:22:85:9b:1e:1d:73:a0:11:a6:7c:d0:7e:
                    7e:35:65:e4:06:28:17:4f:39:69:fc:c8:04:03:9c:
                    9a:7d:46:d4:8f:ac:8a:e5:16:80:f8:55:7a:75:69:
                    b9:71:64:2a:05:c9:f6:02:31:22:c9:a5:65:85:a5:
                    ae:87:42:df:08:9e:2d:0c:f3:37:76:d7:bf:21:77:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:AD:0E:9C:91:81:9C:10:52:C2:E4:E1:C7:10:BD:4B:B2:46:2E
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:18:fc:01:8e:0f:bb:e9:b7:fd:eb:1a:7a:24:8f:1f:38:18:
         d9:3f:82:f5:38:5b:f4:6d:74:ab:33:71:db:cd:6d:de:5d:e6:
         57:7a:15:40:1e:98:89:0b:20:0a:13:ec:99:5d:b6:e3:42:b9:
         7c:a5:c8:f2:66:a9:ec:1e:75:77:fd:f0:67:79:0d:02:d8:7e:
         12:0e:1d:d5:a1:17:6a:6d:0f:e0:63:43:41:cb:ac:b0:0f:7b:
         4e:e2:df:76:44:a8:71:59:b0:9b:cb:64:f4:05:48:7c:56:43:
         88:b5:70:b2:f1:0b:95:13:df:20:3f:d2:fa:fa:a4:56:98:27:
         7e:e2:08:98:fa:9e:0d:34:37:21:13:c1:98:07:8c:a1:f8:ae:
         5e:f4:b1:94:77:69:36:a2:78:fc:8c:0a:0e:79:6b:07:b0:e7:
         59:26:10:79:ba:f1:48:64:52:c7:53:3f:39:68:96:7e:b6:db:
         76:8a:83:5a:ec:a2:6b:4e:a2:8a:45:78:17:cd:d0:78:78:c2:
         31:4c:c1:54:24:ae:e9:58:04:10:7c:9f:ab:7d:b1:2f:94:15:
         19:88:cc:76:5c:a2:f2:61:4d:f2:a4:9f:5a:1c:b2:39:df:3f:
         3c:54:a4:79:58:99:84:53:1d:e2:b3:d5:9f:21:23:87:ad:e7:
         6b:e9:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----