Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
File:                     0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json)
Hash identifier:          MVAO63YFqf1+yaZvwng57ubSD33ClnuKPlIumUviXFc=
Subject key identifier:   52:6D:53:F9:1E:62:04:9D:AD:02:66:7D:19:DD:B4:7A:E4:83:21:C0
Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
Certificate issuer:       /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Certificate serial:       46C9010D50E4260F763C6C264E66DAE24DD65A5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
Manifest number:          01C7
Signing time:             Fri 28 Mar 2025 13:51:12 +0000
Manifest this update:     Fri 28 Mar 2025 13:46:12 +0000
Manifest next update:     Mon 31 Mar 2025 16:44:12 +0000
Files and hashes:         1: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: qMwDESwi6UgRdQdWdrKSXuc4TAI9cyku0ED2Xzhz1Q4=)
                          2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=)
                          3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:01:0d:50:e4:26:0f:76:3c:6c:26:4e:66:da:e2:4d:d6:5a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
        Validity
            Not Before: Mar 28 13:46:12 2025 GMT
            Not After : Mar 31 16:44:12 2025 GMT
        Subject: CN=526D53F91E62049DAD02667D19DDB47AE48321C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:b4:af:ce:a1:ab:90:00:19:80:a6:3d:9d:
                    30:33:d2:05:56:66:e7:c3:35:27:4c:f3:5a:89:36:
                    24:4e:27:99:9a:4b:66:6d:8a:67:e7:1d:61:cd:39:
                    29:04:e7:d1:89:39:a5:db:d7:09:1d:bb:9f:be:6c:
                    f8:1b:f6:37:07:45:1d:33:85:3f:ff:7f:4d:26:70:
                    f5:a1:3f:0f:ab:67:e0:bd:36:64:64:9f:7d:46:14:
                    87:a9:b5:3c:4b:be:6a:9b:bf:fb:0f:79:0e:84:3a:
                    c0:29:cf:67:25:23:2f:30:95:45:6d:d9:e0:31:4a:
                    42:6b:c1:ba:13:fa:59:ee:94:cb:58:ae:1c:50:37:
                    cb:e5:4e:0f:c8:d6:e8:3c:2a:b0:ae:b7:63:e3:b6:
                    48:e4:8a:2c:1f:d2:b4:ea:ad:ee:ee:72:5c:8d:da:
                    7e:57:29:ae:49:15:7f:da:7c:db:3e:c1:ff:5e:17:
                    3c:57:5a:a3:36:0c:45:cc:3b:ab:de:18:60:ef:14:
                    be:03:31:09:e7:85:56:a1:8f:de:8c:f3:d0:61:b1:
                    8c:ff:fb:5c:83:c2:b3:ff:b0:85:37:11:10:98:4b:
                    69:2f:f2:21:da:fa:92:5e:08:08:6b:6c:9b:40:04:
                    9d:24:54:52:1a:ea:a9:86:f8:61:da:df:bd:d6:d7:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6D:53:F9:1E:62:04:9D:AD:02:66:7D:19:DD:B4:7A:E4:83:21:C0
            X509v3 Authority Key Identifier:
                keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:68:be:19:65:5b:4a:c9:49:64:cb:a3:45:53:40:92:ee:58:
         b5:94:a9:f7:25:6e:f7:fd:f4:f5:5f:01:ff:70:e7:dd:67:a4:
         a4:7c:75:8a:30:b7:53:08:90:58:89:44:93:82:70:ea:f6:e4:
         d8:8e:99:c7:54:68:be:52:08:a5:c9:af:7d:99:5a:a1:79:3b:
         62:94:be:d0:8f:c5:00:17:0b:36:6b:b6:c9:c9:93:6c:7e:54:
         76:d8:ca:2f:5e:93:18:15:7c:d5:23:f4:32:54:1c:03:93:c0:
         c8:29:e7:93:0f:29:ae:73:be:90:f5:ce:2e:6b:e3:15:e7:44:
         f8:ed:23:cd:43:94:88:31:56:9c:e7:bc:05:02:05:7f:34:7b:
         ab:93:eb:61:0e:a8:10:a1:c1:4c:4d:cc:7e:a6:9e:d9:82:76:
         ad:4d:70:05:b1:7b:76:e3:09:f2:12:53:ae:c8:8c:66:f1:00:
         5f:f9:33:b4:1b:8a:72:c1:59:cf:15:3e:35:7f:4f:38:da:71:
         aa:5a:bf:8d:a7:03:a2:c8:75:8a:f4:9a:a6:33:46:67:74:1f:
         03:d8:08:c0:3a:5f:57:7e:d0:87:7f:3d:73:63:e2:f7:0f:8f:
         12:2a:4c:98:d5:e0:a9:6b:32:5a:54:2c:e9:33:c7:7d:97:90:
         d6:be:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----