Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
File:                     EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json)
Hash identifier:          98PvEk043m9nAf/0588HrU0IeOypWm/K3sLF5R6iCHg=
Subject key identifier:   FA:C4:0D:44:E7:EB:90:EB:7A:57:5A:DF:D3:6D:54:68:6F:23:72:9D
Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27
Certificate issuer:       /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427
Certificate serial:       4969C256AA6E68184C8F639FFD3AA84F61FB9BCC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft
Manifest number:          A4
Signing time:             Fri 28 Mar 2025 13:51:50 +0000
Manifest this update:     Fri 28 Mar 2025 13:46:50 +0000
Manifest next update:     Mon 31 Mar 2025 15:12:50 +0000
Files and hashes:         1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=)
                          2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: 8VzG1S3ZO4E4LYbMJbR3zbZs8XZOpb7tmHoTHPmqu0Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:69:c2:56:aa:6e:68:18:4c:8f:63:9f:fd:3a:a8:4f:61:fb:9b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427
        Validity
            Not Before: Mar 28 13:46:50 2025 GMT
            Not After : Mar 31 15:12:50 2025 GMT
        Subject: CN=FAC40D44E7EB90EB7A575ADFD36D54686F23729D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:7b:b1:07:d2:91:0e:08:81:22:8f:12:85:
                    ec:38:ad:87:5d:e1:0f:d7:37:3d:80:7c:5c:9b:91:
                    34:ac:97:8a:2d:34:26:75:4f:37:e1:4c:bc:00:aa:
                    d6:59:88:34:45:13:48:21:4e:80:ff:50:2d:0b:58:
                    97:6c:1d:b5:61:74:b3:b6:d0:d7:c9:e9:ec:35:54:
                    54:12:34:ea:24:ad:58:6f:80:c7:2d:b2:52:32:61:
                    f2:ea:f8:8b:6b:a1:64:a4:fe:f6:80:f9:0a:cc:07:
                    98:a0:0e:e9:84:32:92:66:bb:58:0d:f3:d7:57:7d:
                    21:44:80:b4:f5:4d:a9:9c:e0:3f:59:ca:44:4a:0d:
                    8e:21:b8:f0:25:82:eb:98:53:23:0f:5c:28:9b:3d:
                    cb:71:b1:f0:dd:1b:31:cd:43:cf:00:e0:29:ff:a8:
                    92:80:10:f3:a1:b7:f3:e9:80:27:24:d4:ff:48:85:
                    5e:d8:20:77:b0:77:f3:c3:d9:9c:3b:af:fe:22:df:
                    48:1f:0f:53:db:2d:e6:b9:c9:3f:f8:4f:f2:21:20:
                    13:2b:87:02:f0:ff:ac:c4:00:1b:4c:5a:2f:ff:c7:
                    60:c0:49:c8:7f:8f:82:db:22:2f:aa:a4:e6:73:50:
                    61:6b:06:ba:1d:c2:b7:18:3b:5d:05:1b:45:bf:bb:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:0D:44:E7:EB:90:EB:7A:57:5A:DF:D3:6D:54:68:6F:23:72:9D
            X509v3 Authority Key Identifier:
                keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:b8:45:d5:12:f8:da:b1:af:fa:de:8e:9d:1a:59:e2:59:
         b8:5b:ca:01:9b:92:1e:b6:11:e9:44:59:2d:1f:c6:44:59:16:
         20:3e:f5:25:1d:d0:41:2b:76:3e:9c:88:dd:26:68:ac:9d:ef:
         cb:4c:45:51:5d:98:e3:e7:63:04:70:63:fb:6c:7e:01:8e:18:
         41:d8:01:1c:26:e0:38:a7:85:b5:9d:5b:cc:d0:57:d2:6c:b4:
         da:bd:d0:07:72:09:ec:21:d7:5a:98:1d:c6:eb:9a:ec:be:85:
         0f:d0:4f:39:c0:b1:aa:3b:f8:a0:87:8d:18:17:9c:b5:41:b4:
         3c:f1:02:dc:7e:f1:c9:17:25:5f:f6:c6:67:e7:10:1a:45:12:
         c9:82:95:e1:87:cb:ba:22:69:9d:db:f9:6f:66:e8:6e:38:32:
         de:14:51:2c:dd:f5:0e:e9:99:f3:e1:29:71:d9:d3:cc:bf:bf:
         ed:ce:e9:e1:a1:53:a3:c2:6b:61:5f:f4:51:80:8f:2a:00:43:
         a6:df:de:35:57:68:de:0d:5f:22:3b:e8:eb:78:99:9e:e7:fd:
         ed:8b:bc:a9:d4:8f:2e:d0:00:26:84:9c:af:c7:b2:89:ca:17:
         e7:1a:1c:1c:b1:4a:5f:94:d9:8b:a2:62:82:5a:02:14:45:ae:
         c4:52:2f:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSWnCVqpuaBhMj2Of/TqoT2H7m8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0
OThDODQyNzAeFw0yNTAzMjgxMzQ2NTBaFw0yNTAzMzExNTEyNTBaMDMxMTAvBgNV
BAMTKEZBQzQwRDQ0RTdFQjkwRUI3QTU3NUFERkQzNkQ1NDY4NkYyMzcyOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIonuxB9KRDgiBIo8Shew4rYdd
4Q/XNz2AfFybkTSsl4otNCZ1TzfhTLwAqtZZiDRFE0ghToD/UC0LWJdsHbVhdLO2
0NfJ6ew1VFQSNOokrVhvgMctslIyYfLq+ItroWSk/vaA+QrMB5igDumEMpJmu1gN
89dXfSFEgLT1Tamc4D9ZykRKDY4huPAlguuYUyMPXCibPctxsfDdGzHNQ88A4Cn/
qJKAEPOht/PpgCck1P9IhV7YIHewd/PD2Zw7r/4i30gfD1PbLea5yT/4T/IhIBMr
hwLw/6zEABtMWi//x2DASch/j4LbIi+qpOZzUGFrBrodwrcYO10FG0W/uymbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+sQNROfrkOt6V1rf021UaG8jcp0wHwYDVR0j
BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD
MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD
ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz
ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE
OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACHXuEXVEvjasa/63o6dGlniWbhbygGbkh62
EelEWS0fxkRZFiA+9SUd0EErdj6ciN0maKyd78tMRVFdmOPnYwRwY/tsfgGOGEHY
ARwm4DinhbWdW8zQV9JstNq90AdyCewh11qYHcbrmuy+hQ/QTznAsao7+KCHjRgX
nLVBtDzxAtx+8ckXJV/2xmfnEBpFEsmCleGHy7oiaZ3b+W9m6G44Mt4UUSzd9Q7p
mfPhKXHZ08y/v+3O6eGhU6PCa2Ff9FGAjyoAQ6bf3jVXaN4NXyI76Ot4mZ7n/e2L
vKnUjy7QACaEnK/HsonKF+caHByxSl+U2YuiYoJaAhRFrsRSLx4=
-----END CERTIFICATE-----