Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
File:                     3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json)
Hash identifier:          DisewnM19klj51H4uBxwGkm2s/I74gbpr92n1EkmoAE=
Subject key identifier:   49:A2:7F:B7:B9:C1:5A:59:86:E7:DD:AC:98:6B:15:C2:F2:8D:CA:6B
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Certificate issuer:       /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial:       469CDE70512431C08BF12CF6216A41874DAC0A74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
Manifest number:          01CA
Signing time:             Fri 28 Mar 2025 16:22:04 +0000
Manifest this update:     Fri 28 Mar 2025 16:17:04 +0000
Manifest next update:     Mon 31 Mar 2025 22:50:04 +0000
Files and hashes:         1: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 8/tgLOnoMp+urH1V1amUU4kNinrXZeDiPjaPmGQqDTg=)
                          2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=)
                          3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:de:70:51:24:31:c0:8b:f1:2c:f6:21:6a:41:87:4d:ac:0a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
        Validity
            Not Before: Mar 28 16:17:04 2025 GMT
            Not After : Mar 31 22:50:04 2025 GMT
        Subject: CN=49A27FB7B9C15A5986E7DDAC986B15C2F28DCA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:01:a2:3d:14:d9:2d:c5:03:9e:4b:79:40:
                    21:e1:41:9a:fb:3c:c1:b2:75:86:3f:32:ef:9c:9f:
                    6e:e8:c9:18:08:59:39:f6:f1:5f:bc:e7:6e:66:c6:
                    f6:7d:1b:eb:63:f9:c3:a1:e1:56:94:43:55:b3:d1:
                    8f:b3:17:1e:5e:ad:8b:66:70:2d:91:e3:36:b9:05:
                    df:39:de:57:88:da:0f:d1:97:d5:2b:07:12:25:1a:
                    74:33:3a:5d:97:cf:03:1b:89:29:d0:73:8b:f5:85:
                    c3:02:4b:92:3b:f3:04:34:24:eb:72:f3:65:ba:06:
                    ab:53:2a:21:56:c1:b0:64:25:3e:aa:9b:d4:6a:e1:
                    dc:11:e6:a7:7a:af:d6:e4:fe:6c:2a:ae:3a:ab:25:
                    c5:a7:59:0e:fd:ae:09:ed:9b:a4:47:7f:fc:02:79:
                    e1:c2:ef:7c:84:b1:5d:c5:45:41:83:ad:6d:fb:ce:
                    7b:ee:4f:4c:4f:84:e3:27:b6:fe:76:22:00:c8:c6:
                    df:c2:a0:87:f6:b9:62:69:9b:34:66:4e:43:74:1e:
                    9f:e6:90:35:b8:5c:74:18:7e:10:63:b0:b1:10:fe:
                    c9:57:b4:5a:67:41:f3:a2:f0:7f:1c:41:c3:31:2b:
                    61:50:3f:93:36:a2:f0:ba:ec:cc:ce:46:57:09:4e:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:7F:B7:B9:C1:5A:59:86:E7:DD:AC:98:6B:15:C2:F2:8D:CA:6B
            X509v3 Authority Key Identifier:
                keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:9b:86:8a:d5:08:5e:fe:f8:9a:9e:e3:19:5f:b2:7e:20:
         2e:a9:d3:00:8b:dd:e5:46:d8:8a:0c:cd:b1:e5:ef:f3:25:32:
         2d:21:3f:6e:56:00:5e:43:80:d0:4d:5f:27:86:21:eb:6e:91:
         b6:b5:ef:c8:dd:9b:4b:f9:07:13:1c:b0:ec:5a:c8:55:90:90:
         55:ca:20:55:10:7f:4b:f6:03:78:8e:fd:4c:0f:8e:cf:93:0b:
         55:f0:a8:c4:32:7f:37:e4:14:87:24:e7:7c:08:45:a9:23:22:
         36:7d:bc:97:3f:13:91:5a:97:b4:1b:82:cf:67:66:6b:e7:20:
         ad:3e:06:53:2a:68:52:0d:1f:02:9d:cc:00:cf:da:25:81:7e:
         a4:b6:74:0f:bc:d3:5e:a2:98:40:a6:40:82:0c:ee:e6:30:87:
         cf:a8:f7:3b:20:5e:32:60:a7:23:27:c8:da:81:5e:c6:c2:36:
         e6:1b:a2:5a:39:d8:09:14:b0:d3:d2:8a:62:c8:d8:17:45:7f:
         73:64:39:83:ba:41:74:31:0f:2e:a1:03:0d:33:de:0a:dc:a1:
         5a:98:5b:de:66:4f:26:68:b1:1d:bd:9d:e1:40:6c:20:9c:a8:
         46:a5:fe:be:84:ab:e9:1e:7c:40:ca:a5:f0:5e:fd:c3:89:af:
         25:b0:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----