Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft
File:                     4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json)
Hash identifier:          qtFYNlv/j57nxBCWEqhh8ziWQvOlmvkZs382yK76z08=
Subject key identifier:   E4:DB:78:F6:D3:C1:2D:E6:F3:B8:D6:DF:5C:32:83:CB:05:13:48:2E
Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A
Certificate issuer:       /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A
Certificate serial:       651AA4B3AA520B6A7A254482EDE735F6A07FDDE1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft
Manifest number:          04BB
Signing time:             Thu 27 Mar 2025 05:51:39 +0000
Manifest this update:     Thu 27 Mar 2025 05:46:39 +0000
Manifest next update:     Sun 30 Mar 2025 12:02:39 +0000
Files and hashes:         1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: HlhAXI8aNxAWkvjO2Gn6zUH2DNuUbkb87oQxBWRekFU=)
                          2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: tkXv1KgW0pmENYU/rPV6kOYGymjZiF1JU1QAvIFdMGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1a:a4:b3:aa:52:0b:6a:7a:25:44:82:ed:e7:35:f6:a0:7f:dd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A
        Validity
            Not Before: Mar 27 05:46:39 2025 GMT
            Not After : Mar 30 12:02:39 2025 GMT
        Subject: CN=E4DB78F6D3C12DE6F3B8D6DF5C3283CB0513482E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:f6:ca:f3:c5:dc:66:5f:4f:18:04:bb:24:
                    cf:9f:b0:b9:88:1f:f6:84:e3:a5:2b:c9:74:e1:60:
                    ed:cb:e8:53:6d:17:2e:7f:25:a8:74:f3:6b:89:b2:
                    bf:28:a0:55:85:b9:d8:8b:bb:9a:d3:c2:56:56:0e:
                    ef:52:0a:66:bd:bf:86:7b:a6:92:a2:db:5a:e2:fd:
                    7a:40:ef:b2:18:4a:56:bf:4d:9f:52:2e:e6:a4:6b:
                    97:f1:5e:96:ad:73:c6:7b:be:fc:3f:b6:77:ef:28:
                    67:c1:c7:c4:e9:8f:0e:e5:26:9b:20:5b:8e:2a:45:
                    53:f6:06:41:c9:fd:ad:fc:bd:9f:0c:09:1e:f8:f3:
                    64:75:c6:38:ce:18:f2:f9:51:3e:15:1b:e4:bc:ed:
                    6a:c0:19:3f:a4:82:74:15:11:8a:40:09:03:d4:7f:
                    3d:cd:d1:ef:ab:bc:55:8e:73:35:2b:bc:a6:56:2c:
                    85:ea:06:60:61:95:48:c8:bb:b3:7e:34:da:56:17:
                    af:ee:0d:f7:01:47:2e:6e:cf:2b:6d:1b:e8:81:c8:
                    45:43:95:b5:3b:79:ca:1c:95:2d:a2:74:95:11:ee:
                    40:c8:41:90:ca:72:df:06:f7:94:e9:82:2f:c9:40:
                    d6:f7:ed:a0:f2:b5:9e:5f:94:78:90:2b:ef:bd:a3:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:78:F6:D3:C1:2D:E6:F3:B8:D6:DF:5C:32:83:CB:05:13:48:2E
            X509v3 Authority Key Identifier:
                keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:f8:e9:0a:bd:b3:58:0d:1e:49:b4:57:14:62:3d:bf:ae:
         21:3c:ab:7a:02:62:8b:b8:a0:97:92:4d:2a:87:fe:74:74:6a:
         7a:91:5f:a2:92:34:91:5c:25:0f:7a:7c:4f:a9:8f:6a:cb:48:
         86:78:b0:95:d6:ef:d5:43:7f:cf:fa:68:2b:88:90:99:35:04:
         3b:1b:eb:71:74:a7:db:40:ea:24:1d:0c:be:d1:5a:4f:0b:b9:
         7a:5b:32:17:82:40:51:07:eb:72:a9:1b:b2:b4:0d:cf:62:8c:
         81:9c:ce:a8:c3:f1:92:19:28:a6:f0:31:62:ba:5a:71:3e:c1:
         3b:e7:e6:c1:bd:c0:45:d5:3c:24:7c:d1:3a:ee:dc:39:56:c1:
         b9:ee:0a:cc:12:2a:f2:17:d6:02:cd:f5:3a:49:3c:47:18:a0:
         55:b2:66:f7:7f:fe:4d:6d:d9:78:ce:9e:ce:bc:4f:f4:62:93:
         33:b0:75:06:4e:6e:de:42:a1:73:6c:9d:ae:b6:2b:3c:f0:9d:
         6c:1b:dc:fe:60:65:39:53:04:2a:c2:7e:05:f8:d4:a3:9c:6c:
         48:b8:bb:34:19:f3:c8:f8:40:29:06:62:03:f7:69:52:52:c3:
         1b:0b:36:28:6e:5d:73:3c:77:fd:8e:12:2b:cf:92:fe:10:76:
         89:4d:86:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----