Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft
File:                     F95ABFECD1F2CDA83B975C1651646721A611A82E.mft (raw, json)
Hash identifier:          AT3QFwu6GkYaEj/g02Qm2ZeExIScuGtzDECY4Opgabk=
Subject key identifier:   B7:B6:EC:F5:AF:21:3A:70:C2:3D:29:67:FD:52:D7:CF:32:47:20:B9
Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E
Certificate issuer:       /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E
Certificate serial:       5CA9E13A16F7A3F360386F881B1B1AC3D48D3E91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft
Manifest number:          0154
Signing time:             Fri 28 Mar 2025 00:01:54 +0000
Manifest this update:     Thu 27 Mar 2025 23:56:54 +0000
Manifest next update:     Mon 31 Mar 2025 04:03:54 +0000
Files and hashes:         1: F95ABFECD1F2CDA83B975C1651646721A611A82E.crl (hash: VevyZKh6S40LDybtkCtLs6125xaE9jTcA+JImWOYQrI=)
                          2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: tm8KpVxjH8x1iLsNzcul7bx7S9NInDujRQmtZCZqtDA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:e1:3a:16:f7:a3:f3:60:38:6f:88:1b:1b:1a:c3:d4:8d:3e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E
        Validity
            Not Before: Mar 27 23:56:54 2025 GMT
            Not After : Mar 31 04:03:54 2025 GMT
        Subject: CN=B7B6ECF5AF213A70C23D2967FD52D7CF324720B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:0a:74:5b:2a:8a:ad:08:f9:9d:26:55:cd:
                    81:1f:ad:69:6c:7f:52:0c:6a:00:f9:42:50:55:ad:
                    ea:7d:32:4f:b8:ab:ff:ae:81:97:c9:60:8b:72:70:
                    21:ee:b9:7b:a5:5e:66:c5:d1:68:55:19:af:c4:ef:
                    87:37:46:df:f7:ea:37:19:20:1e:29:15:12:b1:51:
                    53:6a:9e:59:35:f7:40:b3:d4:91:6c:05:68:04:6f:
                    22:8d:a2:07:db:e2:ba:8d:59:50:20:84:6b:8c:4f:
                    38:07:ae:e5:4c:54:b3:03:5b:7e:20:8f:52:2f:c2:
                    bd:35:04:7c:7a:cc:17:e2:7b:d3:59:d5:71:09:34:
                    a1:66:d6:9b:0c:84:80:3f:75:71:bc:01:50:01:cc:
                    b4:a6:de:9c:97:0e:aa:4c:64:e2:f1:8d:5b:95:95:
                    1a:86:59:55:73:cc:64:c5:34:94:fb:53:01:44:3b:
                    3f:5b:d7:5c:30:59:c6:d5:36:1c:f3:c2:39:3f:d1:
                    50:66:c5:66:0f:ff:3b:d2:6f:14:36:a5:23:d1:f4:
                    1d:e2:5d:09:4e:da:95:6f:51:75:0d:12:dd:ec:0a:
                    43:f1:73:e1:50:00:27:65:d4:9c:fa:22:20:92:33:
                    bf:9f:49:fb:fb:a5:80:36:d7:2b:e3:ce:15:c6:dc:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B6:EC:F5:AF:21:3A:70:C2:3D:29:67:FD:52:D7:CF:32:47:20:B9
            X509v3 Authority Key Identifier:
                keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:12:14:8b:a4:0d:e2:33:74:33:9f:d2:ba:69:b6:0c:ea:c6:
         19:07:62:b0:b7:68:bb:f7:0f:b6:12:5e:65:a5:f1:aa:8c:93:
         b1:2f:cc:a2:07:25:5a:a7:f3:14:af:68:39:d9:6f:a0:96:15:
         49:7b:c8:00:b6:05:80:ab:0b:e8:8b:14:a6:da:d7:0b:fa:3a:
         da:04:87:01:d1:3c:c6:de:92:79:3e:a6:94:b8:08:53:37:b9:
         51:61:07:ab:b1:8c:fe:7c:62:41:c2:76:a1:6e:05:88:b7:d8:
         40:25:bc:fc:ef:92:72:c9:66:fe:fd:49:38:19:18:dc:55:fd:
         fa:60:16:60:e4:b2:ca:4a:00:6f:df:bc:ed:a6:9c:97:9c:d9:
         6f:28:ba:02:86:e9:a9:21:47:f9:4d:1e:f5:45:b0:46:39:d8:
         9e:50:e7:99:e3:76:db:2c:a4:8c:c9:54:6c:d0:aa:79:37:84:
         e5:9d:36:03:3e:3d:b6:48:57:4e:78:a1:ce:fd:d0:90:7f:d8:
         33:f2:9c:cb:b4:28:4f:63:00:3c:87:65:8c:cb:5c:af:bb:3e:
         ba:1c:01:09:ab:81:4c:1e:5d:3d:fe:2f:0a:78:49:ec:cd:57:
         e9:8b:03:36:71:b5:23:6b:02:f6:f8:43:55:de:79:95:54:c0:
         02:0d:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----