Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
File:                     969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json)
Hash identifier:          ySSwgYOeyGO9lyql+NSxxJShzbv43CPMGxytEx+jy4Q=
Subject key identifier:   80:4E:2A:73:A3:17:74:02:72:C9:B8:E4:DD:49:BF:AE:E5:4E:9E:D8
Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1
Certificate issuer:       /CN=969449FF3E24842B0CECC61AB398E88F83709FC1
Certificate serial:       699563772A39BEDF246FE4D3E0F4E3002A73C2E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
Manifest number:          A5
Signing time:             Sat 29 Mar 2025 01:11:47 +0000
Manifest this update:     Sat 29 Mar 2025 01:06:47 +0000
Manifest next update:     Tue 01 Apr 2025 10:17:47 +0000
Files and hashes:         1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: YCj18f8GI7VCjV46hkbUkKBklmGi0Q+sHF+zvd+xwYY=)
                          2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:95:63:77:2a:39:be:df:24:6f:e4:d3:e0:f4:e3:00:2a:73:c2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1
        Validity
            Not Before: Mar 29 01:06:47 2025 GMT
            Not After : Apr  1 10:17:47 2025 GMT
        Subject: CN=804E2A73A317740272C9B8E4DD49BFAEE54E9ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:a4:52:50:75:7e:42:1e:c6:30:e5:cb:da:
                    fb:0b:b3:53:15:d6:ba:ed:57:b9:c5:52:6d:38:7d:
                    33:d2:f2:85:07:01:20:46:8e:72:bd:38:c0:0f:7e:
                    fe:f2:c4:46:46:d4:44:88:88:ea:57:53:1b:11:c6:
                    ae:3f:0c:85:33:09:2f:ce:1d:a7:1b:af:63:53:f8:
                    db:fe:ec:72:08:8a:dc:1f:94:c5:11:86:a3:43:84:
                    6c:5c:ca:1e:05:bc:ea:92:7b:97:87:16:ba:66:ae:
                    ad:ba:1b:73:75:6f:62:bb:fd:27:6b:6a:01:be:8b:
                    f9:bb:a6:c3:9f:12:d3:66:ee:a9:58:bc:6f:69:e1:
                    c4:da:a3:cc:11:f7:4c:9e:ba:9e:48:69:3b:ce:e3:
                    74:07:2b:01:5d:b2:0f:ed:db:4b:dc:50:68:b8:fb:
                    33:a8:3d:14:7a:11:71:f5:ab:d6:2f:c2:82:11:22:
                    56:c2:0f:f7:8a:94:ec:31:4e:a8:25:f4:e0:0f:19:
                    8a:18:9c:74:c6:de:f1:52:30:63:7e:dd:15:b7:b9:
                    73:d1:63:fd:05:1a:72:af:32:22:85:9e:eb:91:49:
                    35:1e:16:6c:fa:6f:48:ed:b0:2e:b7:10:ab:6b:df:
                    d4:27:43:24:0a:ac:67:ac:fc:6d:67:3f:d4:26:8c:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:2A:73:A3:17:74:02:72:C9:B8:E4:DD:49:BF:AE:E5:4E:9E:D8
            X509v3 Authority Key Identifier:
                keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:66:d6:1a:ed:d5:0e:4f:06:58:87:11:12:60:79:9d:a9:
         8e:57:33:78:f9:a1:9e:bd:20:1a:ce:c4:bb:45:2a:15:71:47:
         07:55:46:6f:ec:84:18:33:e7:a7:a2:a2:f7:9a:cc:72:49:49:
         dc:a3:84:34:71:cd:6f:a6:8e:c7:17:66:3a:4a:42:76:fe:52:
         73:f4:cb:e9:e2:75:20:3c:d3:bb:3c:9b:d7:a2:92:3c:33:36:
         7d:49:1e:07:fd:91:de:30:c5:41:5d:26:f6:0a:be:ee:e2:60:
         25:5d:f5:fd:5f:2d:b1:73:1d:1d:ea:51:1e:29:8e:31:52:86:
         91:6c:98:0d:d5:94:70:8d:3a:d3:b3:7e:74:f3:6b:8d:8d:84:
         27:c6:3d:cf:aa:28:d6:bd:47:50:c1:df:78:e2:96:db:a1:3f:
         de:83:7d:f6:3e:ee:92:29:83:ec:ee:e1:f6:ca:82:d6:51:05:
         32:c9:65:c0:fc:6b:d0:62:ee:71:30:34:d9:fb:5d:65:8c:82:
         aa:c0:3b:de:2d:da:96:e3:a4:7f:a1:e8:6c:c0:7f:19:cc:37:
         49:db:1c:f0:24:68:59:d3:07:d1:d5:94:d9:cb:7c:43:45:54:
         c3:72:fd:cd:74:60:43:ca:2d:69:ae:e5:a6:7f:88:c4:64:88:
         f0:d9:12:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaZVjdyo5vt8kb+TT4PTjACpzwuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4
MzcwOUZDMTAeFw0yNTAzMjkwMTA2NDdaFw0yNTA0MDExMDE3NDdaMDMxMTAvBgNV
BAMTKDgwNEUyQTczQTMxNzc0MDI3MkM5QjhFNERENDlCRkFFRTU0RTlFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46qRSUHV+Qh7GMOXL2vsLs1MV
1rrtV7nFUm04fTPS8oUHASBGjnK9OMAPfv7yxEZG1ESIiOpXUxsRxq4/DIUzCS/O
Hacbr2NT+Nv+7HIIitwflMURhqNDhGxcyh4FvOqSe5eHFrpmrq26G3N1b2K7/Sdr
agG+i/m7psOfEtNm7qlYvG9p4cTao8wR90yeup5IaTvO43QHKwFdsg/t20vcUGi4
+zOoPRR6EXH1q9YvwoIRIlbCD/eKlOwxTqgl9OAPGYoYnHTG3vFSMGN+3RW3uXPR
Y/0FGnKvMiKFnuuRSTUeFmz6b0jtsC63EKtr39QnQyQKrGes/G1nP9QmjDrBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgE4qc6MXdAJyybjk3Um/ruVOntgwHwYDVR0j
BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF
MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw
OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz
ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4
OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABqzZtYa7dUOTwZYhxESYHmdqY5XM3j5oZ69
IBrOxLtFKhVxRwdVRm/shBgz56eioveazHJJSdyjhDRxzW+mjscXZjpKQnb+UnP0
y+nidSA807s8m9eikjwzNn1JHgf9kd4wxUFdJvYKvu7iYCVd9f1fLbFzHR3qUR4p
jjFShpFsmA3VlHCNOtOzfnTza42NhCfGPc+qKNa9R1DB33jiltuhP96DffY+7pIp
g+zu4fbKgtZRBTLJZcD8a9Bi7nEwNNn7XWWMgqrAO94t2pbjpH+h6GzAfxnMN0nb
HPAkaFnTB9HVlNnLfENFVMNy/c10YEPKLWmu5aZ/iMRkiPDZEjU=
-----END CERTIFICATE-----