Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft
File:                     9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json)
Hash identifier:          PvPNsA5AWHDf/p5LovC41q+/rlvyoAoxepVy694lsGM=
Subject key identifier:   1C:A1:FC:2B:43:A2:B9:21:23:11:41:FC:14:86:0B:2B:42:F0:26:EC
Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49
Certificate issuer:       /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549
Certificate serial:       6C6E562525501664A9269114601DF034446D396A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft
Manifest number:          3E
Signing time:             Fri 28 Mar 2025 04:10:45 +0000
Manifest this update:     Fri 28 Mar 2025 04:05:45 +0000
Manifest next update:     Mon 31 Mar 2025 07:37:45 +0000
Files and hashes:         1: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: Ld536fU9XrAQ/WPFgeHdv0/iNTkU2963BdLK9E9cUNk=)
                          2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=)
                          3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=)
                          4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6e:56:25:25:50:16:64:a9:26:91:14:60:1d:f0:34:44:6d:39:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549
        Validity
            Not Before: Mar 28 04:05:45 2025 GMT
            Not After : Mar 31 07:37:45 2025 GMT
        Subject: CN=1CA1FC2B43A2B921231141FC14860B2B42F026EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:f3:f1:58:dc:74:71:4d:cf:6c:b1:8e:ad:
                    cf:8c:ea:33:d7:bb:84:7d:17:5a:4d:0d:ce:bd:3c:
                    c4:a8:3e:32:13:b3:a4:1c:b7:f0:2b:d0:ef:9a:d1:
                    c1:dc:9e:c6:5d:1e:e9:d7:a4:5d:50:24:5c:c3:45:
                    ff:9a:fd:0e:5c:19:f2:87:66:55:05:99:c8:90:a6:
                    20:69:80:cd:52:f0:ad:1a:f3:1c:8b:be:37:ef:12:
                    6d:bd:d5:e1:c4:9e:bd:ba:9a:bd:aa:57:b7:1c:0f:
                    a5:b0:f9:b5:0d:3c:83:02:15:cb:bd:4f:d9:b5:5c:
                    22:f5:59:00:96:e2:54:fd:bf:eb:bc:1f:de:37:35:
                    81:5e:86:fb:6a:b2:84:d8:cf:f5:dc:c5:2a:17:07:
                    3c:ac:36:76:07:76:7a:91:96:03:f3:1f:30:4c:35:
                    0c:03:1b:bc:00:76:a1:a2:a8:07:ca:9a:f2:73:1f:
                    41:63:9b:fd:e6:97:cb:2d:80:80:1e:1e:42:34:76:
                    27:7c:ce:1f:54:b7:3c:f4:88:97:28:83:c6:16:aa:
                    2a:b0:1a:bb:a0:a9:43:de:83:ee:6c:03:9d:53:0f:
                    c0:cd:46:d6:f1:8f:2a:e2:f7:31:22:b5:11:06:99:
                    cc:4b:2b:a1:43:cc:19:2b:b2:7a:25:4a:1e:44:aa:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:FC:2B:43:A2:B9:21:23:11:41:FC:14:86:0B:2B:42:F0:26:EC
            X509v3 Authority Key Identifier:
                keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d1:8e:73:dc:a1:c4:1c:65:20:95:37:7c:2d:b2:34:0c:3c:
         8d:f4:72:92:44:57:2d:85:8e:af:db:72:94:48:26:53:80:32:
         21:cb:6f:ea:4e:d1:b6:7e:96:ea:da:89:dc:92:01:28:f3:b3:
         66:73:0a:53:10:0b:5c:34:9e:a8:56:1b:35:bc:48:09:5b:4a:
         99:5a:e9:58:81:fc:06:95:ed:5c:f1:f6:74:7f:a7:15:9a:e1:
         23:bf:9d:23:7d:5f:e9:94:e8:34:14:17:d3:de:5b:b0:d2:14:
         5a:47:4b:27:29:c8:bf:bd:18:aa:ae:53:cb:7e:1b:dd:dd:28:
         4a:f8:23:39:66:2a:2c:94:1c:8d:96:c0:99:39:55:df:db:88:
         02:6f:31:ff:6b:ed:70:49:29:bb:d2:12:3f:7f:23:80:0a:76:
         e1:b3:a7:b6:ed:6f:29:6d:2d:10:b0:73:39:82:e2:64:d5:fb:
         97:ee:ae:7c:e5:1c:5a:52:d3:64:5a:12:1f:8b:a8:11:67:cb:
         ba:01:dd:89:c5:f9:84:a8:f2:52:3e:df:2d:a3:fe:d7:70:dc:
         d0:f1:45:07:66:75:9b:84:4f:c8:d7:f5:65:05:7a:87:05:46:
         6a:40:f1:d9:b4:6e:8e:14:38:77:c7:38:a9:20:b0:5c:86:0a:
         74:21:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----