Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
File:                     6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft (raw, json)
Hash identifier:          UUCYRbqWsSS8kJZ8sqJNUMTcSMDTh58RnIkWSj0Ny1Q=
Subject key identifier:   94:38:D9:C9:25:3C:10:A0:36:EF:10:D0:F1:A0:73:97:18:3E:4B:48
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       2F2BAEA5A1598584B9A6CD19299EBFFB78938A38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
Manifest number:          0256
Signing time:             Thu 21 Nov 2024 01:11:41 +0000
Manifest this update:     Thu 21 Nov 2024 01:06:41 +0000
Manifest next update:     Sun 24 Nov 2024 05:53:41 +0000
Files and hashes:         1: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: 0TXvmS9XRzFPQg7VBjdDhocXuAjOCXrahzSe/hBS+kE=)
                          2: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: W7qMjGU5xZ9Oay/8WGxeZxhy9LWBi2AIkynmyghqxgo=)
                          3: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl (hash: qw8+thzaRdv+bLKFLrAxiBjrrpa0Yrj0SifHppBtg0g=)
                          4: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: naA5lUlBRat5ef0vI8voPPjFrMHR9bpoQ6w5VRUzIn0=)
                          5: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: S1cBeAs22M4tp80YuorgB0+AcJDw3MCEnBRK/ppPOnI=)
                          6: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: TioKn3OEWrA5HJc/rJ0Sfo3o6zbghNv33aandwoul2U=)
                          7: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: kHw5hH5+IfpLbksfP3QZEjTxkepAiasbWHMw4A7m3b0=)
                          8: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: oYKRgeAiMpYufzUDpAVrBlt6W1jyPeS9JOxxuQtOwZY=)
                          9: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: nxdAn3jn+XYvc4duvxuDcKKQ6L/WvqrTreEgfRLbG3Y=)
                          10: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: VMgB9Kb4EVQHlb3VDwgkZg7RdNnVVkcFEhqcUkw3BMY=)
                          11: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: QUgb+3auw+3QXbybWiXjJyrqBHMbQrgJpf1sSivTg0g=)
                          12: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: US1SXV+hgdxuRQjfdZVl4UlTanx6B6V1We4A6nIE/aU=)
                          13: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: 3xHj2Za1UQ2hx7TMbM6D07YNJ7NH1FcliBdFRmqQm1g=)
                          14: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: 0z+M+MfV31ApunTcr4X9MYd8Du/BJdShdW8aFWf3OwA=)
                          15: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: cavEBNoqdWm4+qj32f5KrdV3SRB82I9b1uyElL7U3P4=)
                          16: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: kLmEQPQ/od1FdskOnhWMMgPU8rf3JMAMKcmeKR1b8o8=)
                          17: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: k7IX0Qk2FOuOVzRprd9f61ijmH6GpFS+ZFebBdrrRIM=)
                          18: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: YgVLRg3O7QRj5xGJQiVJq81SI0VTcACtqesTlVxXavs=)
                          19: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: Jsc0sEwnIvfzafDdx5P/GKzvW0lqzmukEooIoZhkd4I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2b:ae:a5:a1:59:85:84:b9:a6:cd:19:29:9e:bf:fb:78:93:8a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Nov 21 01:06:41 2024 GMT
            Not After : Nov 24 05:53:41 2024 GMT
        Subject: CN=9438D9C9253C10A036EF10D0F1A07397183E4B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:fa:8f:db:b1:4c:9e:6e:34:2c:fb:ac:d4:
                    be:f2:b5:ba:d6:0f:81:34:9d:62:3b:75:d4:51:16:
                    4e:c2:23:27:02:7a:8b:5a:da:de:e3:5c:b9:fd:a3:
                    9d:1b:fd:fb:ca:8f:cf:84:21:0a:78:70:39:73:65:
                    2f:b5:b0:2e:8d:c3:87:62:6e:77:4a:a1:ae:8e:3f:
                    71:be:45:c8:cb:4c:7e:57:35:97:61:1a:fa:0f:5b:
                    90:74:41:0b:5d:f8:79:75:fc:b0:1e:94:ed:46:0a:
                    a2:c7:38:49:72:1f:92:cf:b1:9e:11:33:44:73:17:
                    b8:1c:36:58:fe:5e:91:79:80:84:63:08:d9:9a:d9:
                    34:92:99:0d:2e:fc:8a:77:45:d3:c9:bb:96:63:b9:
                    5c:07:34:f8:ae:c4:dd:af:36:dc:eb:e1:4d:44:89:
                    cb:5d:d4:32:82:c2:f0:ac:a2:13:cb:32:38:3a:c8:
                    64:11:3e:b4:c5:c3:36:66:4b:a8:16:93:43:34:b0:
                    36:7d:96:27:15:e6:ce:20:49:f1:71:91:67:85:e5:
                    c6:f7:0f:16:35:ad:fc:eb:76:96:fa:ef:a1:38:45:
                    24:57:00:8d:9e:63:13:a9:21:d2:d6:59:d1:57:05:
                    31:07:90:c5:94:f4:e1:36:ac:f6:ef:03:85:85:e5:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:38:D9:C9:25:3C:10:A0:36:EF:10:D0:F1:A0:73:97:18:3E:4B:48
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:c2:08:8c:bb:c1:94:eb:4c:23:b9:8c:25:6d:9e:91:7b:
         8e:dd:ae:dc:60:05:c4:de:5d:5f:f2:88:f9:bd:ca:26:37:80:
         79:7e:b4:b3:52:49:e3:93:cb:5a:c4:6c:22:13:84:a4:b6:b4:
         f8:dc:8b:b5:61:8a:bf:f1:49:06:f2:8b:a1:b6:b1:9d:bd:f3:
         63:d0:67:f5:1d:ff:11:ea:4d:87:dd:a2:49:af:71:c5:cd:19:
         53:f1:72:df:f9:3b:5f:db:de:93:13:57:6a:18:08:00:ed:fa:
         74:ab:9f:79:56:bb:a0:06:19:bb:b1:01:1f:e7:f4:d6:84:e6:
         4c:50:f1:9d:16:83:cb:aa:2d:de:8a:1a:50:05:ce:9d:2a:21:
         d1:e5:fd:e9:6f:af:cb:64:53:40:96:47:74:42:82:53:03:a4:
         0e:70:a4:a7:02:a7:be:01:a9:7a:0b:74:ac:1d:1a:6f:80:c1:
         15:48:4d:a8:fc:35:75:10:3f:e8:0a:f6:d6:3a:20:36:6e:db:
         03:41:a7:ca:56:87:c1:92:e8:aa:0f:d4:ec:0e:a5:24:87:ae:
         0d:4d:83:9d:dc:58:72:9b:a4:c4:a1:54:56:e8:82:91:62:b8:
         6d:81:ec:06:fd:1e:46:87:3e:c5:1f:4f:62:e9:e7:81:4c:13:
         24:52:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:33 2024 by rpki-client on console-ams.rpki-client.org