Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
File:                     3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json)
Hash identifier:          ZsV4gDuPpnvn3wFBrEqbQqE1HDLQtvAV9phnvAD90kA=
Subject key identifier:   AA:12:90:4E:B8:35:89:DF:90:D0:A4:7F:20:10:5D:32:28:C7:EE:6D
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       77FF78927132CC7D8C8B6C76BF2C65EFFEF7AF20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
Manifest number:          01AB
Signing time:             Fri 31 Jan 2025 10:41:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:36:50 +0000
Manifest next update:     Mon 03 Feb 2025 15:37:50 +0000
Files and hashes:         1: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=)
                          2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=)
                          3: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: XlayIgRxz7MX6HS9GG13Y+LFIFiViEdStXrMCRojouE=)
                          4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=)
                          5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ff:78:92:71:32:cc:7d:8c:8b:6c:76:bf:2c:65:ef:fe:f7:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Jan 31 10:36:50 2025 GMT
            Not After : Feb  3 15:37:50 2025 GMT
        Subject: CN=AA12904EB83589DF90D0A47F20105D3228C7EE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:ca:f3:17:7a:7a:91:dd:a0:48:2e:e2:53:
                    d8:8e:83:ae:c5:8d:83:0e:bf:86:6a:d9:9b:e0:42:
                    7c:63:f3:31:5f:76:1e:d8:4a:a5:ea:a5:cf:eb:bf:
                    22:0e:12:39:73:47:57:d7:30:57:da:4d:7d:c5:3a:
                    ae:69:9f:ee:02:cd:15:6f:0d:89:9c:6a:37:6a:94:
                    3d:b8:35:aa:3f:c9:c9:c3:fe:c7:70:66:0c:a5:d0:
                    96:82:da:e5:5c:54:87:9e:ff:15:d4:0c:a4:81:26:
                    c6:3c:c7:8b:87:ad:e7:f1:cf:aa:44:9d:8e:03:c6:
                    f2:2e:fa:08:7f:2b:ec:0b:ac:ca:94:8c:5f:d7:85:
                    58:a0:9a:fb:29:c2:4f:a3:7b:62:3f:43:af:41:58:
                    f3:e8:1d:4e:f6:76:c7:58:d1:1a:ae:e0:3c:8f:83:
                    af:eb:71:68:1c:84:a9:08:19:35:60:87:36:ad:01:
                    1a:f4:2a:34:da:df:fb:58:57:c9:36:0d:60:30:3a:
                    0d:b5:0e:16:33:ce:7e:36:7c:17:50:78:be:90:ac:
                    22:15:bb:5e:34:d0:7a:aa:50:9b:b1:a3:e6:df:ed:
                    5d:a8:01:58:91:62:e7:d8:f2:23:c7:c0:1c:64:f3:
                    e3:93:ee:e1:71:7f:f6:de:92:19:30:66:f7:4a:d8:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:12:90:4E:B8:35:89:DF:90:D0:A4:7F:20:10:5D:32:28:C7:EE:6D
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:78:84:5f:80:82:a7:26:4b:4b:5b:c4:e3:4c:dc:23:3b:
         ae:e2:a8:40:da:a7:e4:dd:ee:92:5b:0a:5e:50:93:67:47:03:
         ee:2e:73:fb:4a:fb:ea:e6:1e:13:8b:c0:f8:08:fd:a2:4a:b3:
         57:d9:8e:e9:4c:ae:28:dd:93:ac:8f:6c:ab:0f:70:c7:39:9c:
         9d:28:7d:a5:66:3c:78:de:7f:ab:61:59:cd:b9:08:f7:c6:e6:
         f6:79:50:a7:c1:8f:75:fc:67:d2:d6:2b:c0:5f:1d:ac:09:b0:
         3d:06:0b:3a:9e:53:dc:f0:08:fc:58:a0:6a:4a:cd:f1:eb:97:
         34:19:9e:55:78:58:cc:c3:ab:86:82:a0:bf:35:fd:65:64:8f:
         6c:67:90:52:06:30:56:f2:47:97:12:3d:56:0a:6f:cc:a5:be:
         10:f2:af:66:85:fb:d6:ee:13:15:31:20:30:8d:af:31:ba:36:
         d2:de:9a:bc:cd:7a:a4:14:bd:77:e4:92:67:fa:c0:88:d6:e2:
         02:ad:ea:37:b4:53:32:b6:65:10:df:64:c4:c8:70:e7:c8:4e:
         bb:24:47:25:14:07:65:ad:f7:68:73:4a:df:26:db:46:30:bc:
         75:84:6a:e0:32:a6:41:18:ca:9d:05:54:99:1c:0c:0a:6e:c3:
         63:36:ee:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd/94knEyzH2Mi2x2vyxl7/73ryAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy
M0FFMjBBQzAeFw0yNTAxMzExMDM2NTBaFw0yNTAyMDMxNTM3NTBaMDMxMTAvBgNV
BAMTKEFBMTI5MDRFQjgzNTg5REY5MEQwQTQ3RjIwMTA1RDMyMjhDN0VFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWcrzF3p6kd2gSC7iU9iOg67F
jYMOv4Zq2ZvgQnxj8zFfdh7YSqXqpc/rvyIOEjlzR1fXMFfaTX3FOq5pn+4CzRVv
DYmcajdqlD24Nao/ycnD/sdwZgyl0JaC2uVcVIee/xXUDKSBJsY8x4uHrefxz6pE
nY4DxvIu+gh/K+wLrMqUjF/XhVigmvspwk+je2I/Q69BWPPoHU72dsdY0Rqu4DyP
g6/rcWgchKkIGTVghzatARr0KjTa3/tYV8k2DWAwOg21DhYzzn42fBdQeL6QrCIV
u1400HqqUJuxo+bf7V2oAViRYufY8iPHwBxk8+OT7uFxf/bekhkwZvdK2KtJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqhKQTrg1id+Q0KR/IBBdMijH7m0wHwYDVR0j
BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2
NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF
MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2
N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz
OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE3FeIRfgIKnJktLW8TjTNwjO67iqEDap+Td
7pJbCl5Qk2dHA+4uc/tK++rmHhOLwPgI/aJKs1fZjulMrijdk6yPbKsPcMc5nJ0o
faVmPHjef6thWc25CPfG5vZ5UKfBj3X8Z9LWK8BfHawJsD0GCzqeU9zwCPxYoGpK
zfHrlzQZnlV4WMzDq4aCoL81/WVkj2xnkFIGMFbyR5cSPVYKb8ylvhDyr2aF+9bu
ExUxIDCNrzG6NtLemrzNeqQUvXfkkmf6wIjW4gKt6je0UzK2ZRDfZMTIcOfITrsk
RyUUB2Wt92hzSt8m20YwvHWEauAypkEYyp0FVJkcDApuw2M27i0=
-----END CERTIFICATE-----