Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
File:                     498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json)
Hash identifier:          DgtF6owkkXXNwr3ugWS8Pivsdftb/WH9vOr5ycvKvyI=
Subject key identifier:   BF:0B:89:84:3D:78:F1:84:29:94:C0:38:0A:8C:AE:60:74:0B:39:88
Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
Certificate issuer:       /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Certificate serial:       3A003BB42DBCF66F953660660009DDAAEDB3345C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
Manifest number:          0426
Signing time:             Sat 27 Apr 2024 03:41:40 +0000
Manifest this update:     Sat 27 Apr 2024 03:36:40 +0000
Manifest next update:     Tue 30 Apr 2024 08:51:40 +0000
Files and hashes:         1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: OMaWRHwm/vWxjpYzxGXY2k4LIXQ9AplJgn3ZbNUGCnQ=)
                          2: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: EsCWPHTaoDhMD4mSgANxLGvnqSEab3Fn+VDV4TnFhXk=)
                          3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: rZPduyT8LmU69JMvhmuoepLOx5Bw9UBBh+rXCUuTVSs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
                          rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 08:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:00:3b:b4:2d:bc:f6:6f:95:36:60:66:00:09:dd:aa:ed:b3:34:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
        Validity
            Not Before: Apr 27 03:36:40 2024 GMT
            Not After : Apr 30 08:51:40 2024 GMT
        Subject: CN=BF0B89843D78F1842994C0380A8CAE60740B3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:61:d9:6c:f3:f7:b1:93:ab:96:32:ea:d0:
                    dc:95:7a:81:2e:30:ff:5b:3c:be:38:8c:92:44:43:
                    73:59:7a:8e:26:a1:68:56:2c:b1:49:9b:80:16:2f:
                    24:f9:86:8e:08:75:7f:a0:00:98:b3:4d:8c:c8:ac:
                    e0:1a:96:59:a4:a9:24:7e:8b:89:e0:4a:82:dc:a6:
                    e6:b3:d0:30:6e:ca:37:a6:dd:4a:b5:ee:e6:66:f8:
                    79:04:f3:4a:df:1d:33:0e:ac:08:00:51:63:0d:32:
                    63:a0:78:17:3b:a2:7f:ca:ed:6a:6c:aa:f7:ab:2e:
                    18:3e:50:34:8b:49:57:7a:dd:dc:93:e7:6c:42:6b:
                    4b:ff:6b:07:25:47:d3:d5:e5:fa:4c:b5:8d:ea:ee:
                    c0:e9:c9:88:ce:a9:5f:cb:bf:03:0f:d9:19:7c:e4:
                    f4:51:6c:c4:e7:42:51:0d:bd:82:d4:af:ec:20:c2:
                    be:74:ed:01:91:26:39:71:5f:ef:d7:9d:eb:38:9b:
                    f1:a8:2a:a1:fb:98:75:39:ce:43:25:80:80:70:d3:
                    65:02:34:1a:d4:3a:1b:9b:09:8e:15:c8:b7:22:40:
                    66:f6:c4:25:cc:a1:35:07:e5:3e:d5:06:09:b4:3d:
                    16:49:b8:1f:b2:dd:bd:f8:b7:2c:43:19:5c:43:0c:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:89:84:3D:78:F1:84:29:94:C0:38:0A:8C:AE:60:74:0B:39:88
            X509v3 Authority Key Identifier:
                keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:44:0d:b4:0c:2e:31:5e:db:98:09:35:c6:8b:24:7e:ad:64:
         18:a1:15:70:39:c9:a6:5d:de:57:be:2d:0e:a2:ed:69:38:d3:
         3e:5b:2b:19:d5:20:f8:20:aa:28:12:d9:a1:7c:c9:4a:f7:52:
         e9:b8:b4:c8:8c:29:71:94:29:6d:dc:d8:d2:4b:29:e5:14:02:
         8f:d5:bc:33:b4:d7:5a:bf:b4:52:ef:33:62:f0:90:c6:11:16:
         a1:25:54:21:88:31:91:71:f2:c8:28:4d:e2:2e:fe:31:98:6a:
         e0:ba:9c:ce:e8:36:7c:e2:b2:6a:1b:b1:d9:a6:ce:68:11:54:
         1c:d4:1f:1a:03:69:7f:b9:7a:a5:36:76:30:4f:29:1d:65:cd:
         ff:e4:26:d3:bb:7e:3b:5f:12:f3:b8:7b:68:e4:ec:7e:67:c1:
         88:6f:84:39:14:1d:4c:6a:70:43:2b:33:e5:a3:78:24:77:ab:
         58:92:59:44:e4:51:55:1d:50:ca:7b:af:1a:a7:33:85:77:05:
         d8:47:cd:43:37:67:f7:0b:04:2d:23:2e:10:5a:4e:07:96:08:
         49:1d:d2:5d:71:09:ae:51:25:17:ed:6a:c6:da:92:4f:d4:47:
         a8:ee:b7:57:7f:a5:74:e2:c9:d5:ed:ab:f6:04:83:a7:f5:ca:
         a9:e3:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:43:50 2024 by rpki-client on console-fra.rpki-client.org