Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File:                     DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier:          ylSFmVc/V87mOoM7NiToNp6t91ca3V4eGhMi7Rb0rAw=
Subject key identifier:   07:75:76:FC:69:87:31:7A:57:56:99:0A:55:31:4B:93:27:8E:C8:65
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       741A23CD52F17E1A1D3F4D0EA4973A6203EBFD7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number:          D3
Signing time:             Fri 28 Mar 2025 07:01:41 +0000
Manifest this update:     Fri 28 Mar 2025 06:56:41 +0000
Manifest next update:     Mon 31 Mar 2025 08:34:41 +0000
Files and hashes:         1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=)
                          2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: nXswso7kSPwK7PhRIR3TuhS4HfQxT+0q8bZE4XknYkk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1a:23:cd:52:f1:7e:1a:1d:3f:4d:0e:a4:97:3a:62:03:eb:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Mar 28 06:56:41 2025 GMT
            Not After : Mar 31 08:34:41 2025 GMT
        Subject: CN=077576FC6987317A5756990A55314B93278EC865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a0:6c:07:14:74:43:94:53:6e:92:aa:86:86:
                    6c:03:07:6d:fc:37:49:b1:f6:64:af:33:93:20:24:
                    84:f1:47:31:fd:a8:77:a0:d0:5a:18:b9:17:a4:5d:
                    c3:4e:75:d2:b8:c3:7b:f8:51:19:5b:d1:7e:a0:cd:
                    16:13:60:fc:76:40:c4:26:ea:74:51:a1:05:93:34:
                    72:2b:85:46:77:31:17:38:5a:9a:41:f9:5f:b0:50:
                    a6:86:98:81:15:5f:2a:7f:bf:7e:ca:02:e5:10:ff:
                    13:f7:00:29:14:b7:d1:0a:87:11:b0:65:a5:01:1b:
                    a6:65:bd:9c:1b:45:56:d3:4a:99:73:5a:43:d0:04:
                    c2:a9:f9:30:e1:eb:2a:43:23:47:d3:ec:a1:2e:dd:
                    74:aa:29:18:e1:37:21:f3:1e:ee:9a:26:2b:4c:42:
                    0c:aa:cd:b8:7e:20:ad:cc:38:32:e8:ff:4b:dd:ca:
                    db:17:84:37:76:78:15:22:3c:42:cd:3f:bd:4d:91:
                    84:f3:23:58:21:8e:11:e1:26:8d:8d:32:7e:cb:ae:
                    27:2a:e4:03:33:cb:cf:1e:ac:8f:98:8f:58:c0:16:
                    c7:d9:23:12:61:48:37:9e:e0:17:8d:63:58:03:9f:
                    03:50:8c:06:71:14:5a:39:15:ec:56:8c:96:13:94:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:76:FC:69:87:31:7A:57:56:99:0A:55:31:4B:93:27:8E:C8:65
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:85:6c:ba:46:b3:49:fd:63:6e:2d:cc:6f:3d:3c:9e:bc:96:
         79:e9:5b:83:ba:93:32:74:12:12:99:15:7f:7c:80:d2:92:09:
         79:44:98:57:26:26:10:84:c0:82:3c:f5:71:8c:bb:1b:dd:19:
         21:b0:85:67:b5:d1:cf:37:a3:fd:a8:23:38:ac:d2:9c:89:46:
         0e:6a:bf:cd:86:3d:e6:45:96:d3:d1:01:aa:87:43:ad:de:d9:
         ee:18:a6:cd:a2:66:12:02:4d:26:75:e2:23:57:29:5c:60:2f:
         f1:f2:b2:cb:b1:23:0e:e2:39:79:19:34:27:1a:8a:9b:65:8e:
         06:c0:ca:72:de:2f:83:43:6a:c6:ed:10:a1:f1:a7:76:a3:88:
         6a:dd:2d:26:22:04:c6:7c:2d:21:af:92:30:86:40:89:78:6b:
         7f:13:7c:3f:f7:b2:c4:bd:c8:74:81:df:16:ac:d7:de:d6:9d:
         91:e2:37:6d:07:b6:ca:65:00:ef:35:c3:23:7d:e1:d5:08:8f:
         44:67:f1:62:a2:05:c3:a8:99:8e:28:3c:e8:c3:b8:e8:0a:2d:
         df:c1:e7:fd:36:1c:2b:51:3c:dd:80:d9:b0:fc:b5:ab:79:a9:
         49:f9:a8:b2:49:14:d0:52:ef:05:36:04:c9:11:3a:77:9f:bf:
         bc:9e:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----