Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File:                     78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier:          DpfKYfJVuKPZ+VeIhFtBDRfkoNxJnb0V0pEDhyIduy8=
Subject key identifier:   27:15:8E:2C:E4:7D:B4:84:BF:1D:3D:1D:6D:D2:5A:F6:0D:23:56:9D
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer:       /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial:       238638723482CBEABEF50B7391BFC830917E3158
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number:          DD
Signing time:             Fri 28 Mar 2025 09:41:31 +0000
Manifest this update:     Fri 28 Mar 2025 09:36:31 +0000
Manifest next update:     Mon 31 Mar 2025 18:44:31 +0000
Files and hashes:         1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: Jz6AVsBVJJ513IqbLsuzcqRWD7j+4eI5A9oApjYZlhM=)
                          2: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: e1JG4uU1iuO6rgmOne6CBOco5jWQCmWhIZVp0+S/uh4=)
                          3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: YXBLniWIP1tEpCZLI2E35OhkhCdsQi0gYJFIjwBZCnk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:86:38:72:34:82:cb:ea:be:f5:0b:73:91:bf:c8:30:91:7e:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
        Validity
            Not Before: Mar 28 09:36:31 2025 GMT
            Not After : Mar 31 18:44:31 2025 GMT
        Subject: CN=27158E2CE47DB484BF1D3D1D6DD25AF60D23569D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:2f:be:05:6a:bc:06:10:e9:51:f8:4f:d5:
                    b3:8a:4a:2b:67:8c:51:9e:a4:eb:e0:43:db:da:6b:
                    00:78:a4:26:e0:81:10:49:11:10:44:aa:3a:63:cc:
                    f0:57:04:4f:ad:45:69:79:78:6f:b2:7b:94:76:1c:
                    27:99:40:ee:88:a7:45:92:3d:f6:d5:71:37:7b:20:
                    1f:c1:03:04:e7:2f:20:66:ad:76:ba:c0:4d:ab:3f:
                    25:9c:e8:5e:31:92:43:65:a9:34:66:fb:0c:07:a7:
                    22:0f:cf:fa:c5:85:70:e6:38:67:37:b7:38:ee:68:
                    55:88:18:63:55:3d:63:f0:e3:fe:b0:1f:a8:f4:c6:
                    44:8b:a3:b9:6a:88:fe:95:a2:e2:53:eb:fd:5c:eb:
                    c2:63:68:21:a5:e2:d3:e8:c5:52:38:01:1e:de:52:
                    ad:e5:34:b5:7c:9c:cb:6f:ff:22:e8:bd:66:f3:06:
                    ed:d8:6f:57:d0:5e:e3:09:10:bf:5e:dc:e2:74:50:
                    74:47:f0:7b:b1:f4:ad:39:41:6e:e2:e7:2a:46:51:
                    75:28:48:55:46:cc:5b:b0:5c:90:11:c9:61:2c:7e:
                    21:b7:ae:83:db:0c:6f:e4:43:c8:b1:46:d5:4a:54:
                    a7:05:87:2c:3c:a1:45:4d:45:e2:33:46:0a:52:a8:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:15:8E:2C:E4:7D:B4:84:BF:1D:3D:1D:6D:D2:5A:F6:0D:23:56:9D
            X509v3 Authority Key Identifier:
                keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:00:97:b0:e5:b4:b3:c3:e4:c4:19:77:65:5b:c0:0b:91:64:
         fd:60:83:fb:53:0d:de:01:b0:d7:64:1b:dc:1c:47:5c:0e:e2:
         29:c4:11:4c:ba:9f:74:9f:33:e8:7c:a5:0f:fa:7b:23:d0:a6:
         04:d2:24:ad:35:55:c8:9b:7c:5e:53:11:ed:23:a4:92:dc:f6:
         1a:c3:0f:9e:a9:31:ef:f1:44:ed:c3:88:79:b2:cf:22:f0:e7:
         49:88:8d:b4:75:10:7a:1d:f4:2a:4a:98:43:cd:11:ac:d8:89:
         63:d8:bd:6c:18:60:77:3e:d3:bb:6c:89:d5:c5:5d:29:f3:d3:
         e4:55:34:e2:d6:21:63:1a:2e:16:37:b6:6c:4b:da:cf:ca:5d:
         39:6a:27:3b:1f:6d:1c:a2:0c:00:e1:93:e1:06:d0:82:2e:8d:
         cd:5e:f7:97:35:27:2c:e4:e4:23:b2:2d:3a:d0:18:43:73:f6:
         60:88:50:5f:96:2b:cf:14:31:13:51:39:ed:28:91:0f:46:5c:
         9d:eb:36:24:e1:65:bf:4f:25:74:fb:cf:2a:3c:de:43:64:b3:
         28:c6:70:f1:42:2e:e3:6d:35:61:21:66:dc:5a:ab:6d:28:04:
         c8:e7:ee:80:98:a7:47:49:82:6c:03:b1:c2:6a:b7:3f:8b:c9:
         41:3b:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----