Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
File:                     FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json)
Hash identifier:          BhOVrdVNzYHQocgpGf4A6gO+H5KkgFisVKhr0pYMk/Q=
Subject key identifier:   E1:B6:7B:A4:64:87:D1:4C:B0:AA:C8:9F:1B:B0:63:F2:0F:0F:92:35
Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
Certificate issuer:       /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
Certificate serial:       40DC58E169C246404C551FEB9EEB16A0A12E4CF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
Manifest number:          01EF
Signing time:             Sat 29 Mar 2025 00:01:59 +0000
Manifest this update:     Fri 28 Mar 2025 23:56:59 +0000
Manifest next update:     Tue 01 Apr 2025 03:47:59 +0000
Files and hashes:         1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: pork3DU33TttNkwrB/sKNqezv/9cUtB/NoDS5OJkLcQ=)
                          2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: 6+qzbxlDEMLlDFF8ZMTBVVGBQ81Jy42r6r5JLNvCfLQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:dc:58:e1:69:c2:46:40:4c:55:1f:eb:9e:eb:16:a0:a1:2e:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
        Validity
            Not Before: Mar 28 23:56:59 2025 GMT
            Not After : Apr  1 03:47:59 2025 GMT
        Subject: CN=E1B67BA46487D14CB0AAC89F1BB063F20F0F9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:65:79:c6:de:88:06:9c:ab:0d:c3:96:bd:
                    22:c7:43:89:22:76:05:d6:cf:ad:f8:32:39:8a:15:
                    96:76:27:f3:ba:cc:63:88:6c:2d:c9:2c:5c:0e:6f:
                    4a:84:36:b6:8f:ea:22:56:d3:61:d4:4f:da:81:85:
                    ab:7c:5a:a0:86:ed:94:ad:62:20:c9:e8:62:2d:82:
                    e3:af:fc:72:04:8f:0d:16:1b:75:05:11:dd:65:c6:
                    ba:4b:69:f3:4e:60:cc:c3:8a:6f:93:94:8b:57:0f:
                    22:fa:0f:21:97:ee:75:6b:c6:fe:9f:23:d4:ca:c2:
                    70:c9:90:ad:a8:5a:02:32:ea:be:e9:dd:fc:1f:d4:
                    e3:7f:94:8b:9f:6b:1c:62:62:38:9b:b9:b1:25:a7:
                    42:90:28:b7:63:c9:26:2d:96:e0:b5:3a:43:10:dc:
                    af:d8:3a:01:f4:32:40:88:7e:90:5f:dd:b4:b9:b6:
                    d3:95:7e:fe:7d:54:85:5a:6f:bd:e0:33:f2:b4:59:
                    10:f0:1f:1b:b9:94:bc:5a:3b:44:ce:5c:78:38:cb:
                    7d:38:9a:c5:b2:82:8b:9c:3b:2f:8b:d2:cf:c8:6e:
                    ec:f5:db:65:28:54:7c:74:c3:83:2c:32:75:35:a2:
                    cc:73:f4:a4:dc:03:4b:bf:23:85:37:50:53:bd:92:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:7B:A4:64:87:D1:4C:B0:AA:C8:9F:1B:B0:63:F2:0F:0F:92:35
            X509v3 Authority Key Identifier:
                keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:63:8e:79:5d:2d:2c:7f:fe:51:09:2a:f5:e1:2b:a0:f4:
         9f:3a:9a:9f:05:91:b9:34:75:85:3d:24:09:7c:53:a4:b7:83:
         b6:ba:7d:66:2a:6b:78:27:aa:70:8d:73:22:20:c7:2f:9d:cf:
         f8:f9:e4:45:ea:8a:67:69:29:7e:fc:31:df:90:f2:e4:75:e8:
         1a:cd:93:0e:c1:cc:e5:c6:ba:9a:d8:d2:19:8b:3b:49:0b:29:
         16:a9:5a:85:3e:a9:5e:31:fe:6d:51:08:64:00:12:9d:0e:12:
         b0:81:a3:66:48:2e:1d:a5:83:98:80:bf:f9:b6:a9:62:e1:c0:
         cd:2c:c4:14:f6:48:9b:37:c0:34:54:d5:5d:cd:7c:44:d2:09:
         c0:06:4e:9d:9e:c6:27:5c:75:fd:c5:90:5c:36:52:7d:85:52:
         96:64:c0:33:d2:1b:29:32:c3:7e:f3:8a:04:f4:fd:f2:7c:0b:
         72:5d:48:59:b8:04:7e:d9:a4:11:f1:7e:b6:f6:61:4f:ee:a5:
         dd:66:01:26:f8:b1:17:f7:4c:4f:04:c4:d2:f6:ed:9c:5b:ed:
         f5:6a:f4:78:b1:4e:24:52:b7:f0:cb:81:43:2f:d5:9c:0c:9a:
         0f:8a:f9:88:61:dc:1d:8f:0a:d9:89:d7:8e:0d:a2:81:87:f8:
         ea:e7:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----