Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft
File:                     3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json)
Hash identifier:          peZ87XziASLUBsWnioS4QRRxVf3YREB+Lz9c2UNe6So=
Subject key identifier:   A3:E8:D7:D3:1C:3F:5C:A7:B9:99:E9:B7:74:E3:D3:B6:9D:F5:F7:49
Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64
Certificate issuer:       /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64
Certificate serial:       4164A53B0B4B62AB094AFC6089C52F460811B830
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft
Manifest number:          BA
Signing time:             Fri 28 Mar 2025 05:41:56 +0000
Manifest this update:     Fri 28 Mar 2025 05:36:56 +0000
Manifest next update:     Mon 31 Mar 2025 15:56:56 +0000
Files and hashes:         1: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=)
                          2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: ZKTCzLOn1y0aUHOom52Tu9S4ROtjL6Mx5BOnU+SW7Hw=)
                          3: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=)
                          4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:64:a5:3b:0b:4b:62:ab:09:4a:fc:60:89:c5:2f:46:08:11:b8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64
        Validity
            Not Before: Mar 28 05:36:56 2025 GMT
            Not After : Mar 31 15:56:56 2025 GMT
        Subject: CN=A3E8D7D31C3F5CA7B999E9B774E3D3B69DF5F749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:48:ff:dd:ca:ce:c0:d0:e7:b1:c2:94:1a:
                    fa:d8:a4:9b:9b:29:41:76:6e:31:9e:55:18:7f:82:
                    e9:3e:7e:fc:f2:69:d2:20:2d:a8:d5:aa:91:92:bf:
                    c0:92:ff:33:95:2f:60:39:db:35:ff:c1:12:a9:fc:
                    43:74:6b:ff:49:a7:b6:35:52:0f:08:37:65:0f:d7:
                    7f:e7:0c:77:99:21:cc:e8:96:2a:e9:61:d7:2b:c7:
                    f1:cd:b7:d0:17:7d:a4:c9:63:1b:06:1d:c5:7e:48:
                    2d:b9:28:29:1d:1d:69:f1:73:e1:1b:12:46:70:60:
                    ff:b1:97:c1:02:70:b9:27:12:30:0e:19:a5:f7:df:
                    b4:1c:0e:cf:24:1e:60:31:81:13:e7:9e:64:11:2c:
                    0e:2b:ba:68:ec:5d:2e:5c:bf:ca:63:e6:4a:d9:df:
                    b4:4f:b7:78:dd:f9:26:02:40:10:76:3a:19:2f:ef:
                    a2:aa:61:8e:16:45:05:f4:60:2a:43:13:b0:90:c5:
                    0f:9f:2d:ef:60:a7:1e:08:6a:db:ac:b9:48:c6:0d:
                    da:d4:27:a6:72:e0:ed:17:03:13:f0:3e:8b:fa:f8:
                    20:a6:d5:78:30:58:c8:d2:44:39:17:ed:93:17:2e:
                    78:52:81:99:0c:1e:3c:e5:20:9b:ac:c4:9e:73:4e:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E8:D7:D3:1C:3F:5C:A7:B9:99:E9:B7:74:E3:D3:B6:9D:F5:F7:49
            X509v3 Authority Key Identifier:
                keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:cb:0b:e5:95:af:cf:70:90:d5:0b:f2:e4:22:b2:fa:b8:
         e7:20:18:e7:51:dc:50:68:23:a7:f0:17:6b:b7:de:f2:a7:56:
         c1:84:06:c9:6d:47:a1:23:2d:af:93:9d:d8:55:33:11:04:22:
         bd:b0:b8:d8:16:58:14:30:b4:92:c4:33:2d:e8:d7:90:96:fc:
         3c:00:80:e5:4d:7d:8f:ba:05:75:1e:08:e3:52:b9:bd:da:0e:
         4d:68:a7:64:fd:b9:e7:d3:06:dc:d4:65:14:5d:6e:b3:d1:c6:
         75:74:f6:12:c9:e9:62:ff:5d:05:bd:c2:a3:2b:3c:77:4f:a6:
         ea:51:a8:b1:ba:9f:28:ba:d3:c4:20:2b:54:f6:2d:45:4d:66:
         cd:59:c0:63:79:29:63:92:58:6e:cc:0e:7d:53:87:30:a4:32:
         d4:f6:6f:24:d2:5b:14:0c:4a:bb:f7:3f:c1:8c:1b:f0:06:de:
         92:90:5e:0e:10:f0:ed:98:0e:a9:51:7e:b9:b1:1a:29:f2:04:
         3e:ea:15:97:b7:65:08:a5:d2:f4:d5:94:8f:2b:cc:85:55:2c:
         bf:6b:0c:e1:16:45:69:d9:1d:64:d5:1e:85:7d:d4:4a:e1:3d:
         ea:e9:45:76:d8:43:13:9a:09:08:a5:af:c1:5d:ba:23:d4:1c:
         9c:7b:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----