Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
File:                     7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json)
Hash identifier:          5KTBSGfHvZVqjpd4R4axZRZItWqrymoxYA3OPCxkKFY=
Subject key identifier:   EF:13:8C:A7:26:F5:EE:D5:E7:2C:47:EE:00:6E:28:1E:47:96:4F:DE
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Certificate issuer:       /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial:       7C34DD5114EBA6F14ADA1B88C7728925AB306B6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
Manifest number:          0121
Signing time:             Thu 21 Nov 2024 22:02:22 +0000
Manifest this update:     Thu 21 Nov 2024 21:57:22 +0000
Manifest next update:     Mon 25 Nov 2024 03:28:22 +0000
Files and hashes:         1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: 0C7jpUpVTjmOGuK/oBK6p+XprH86Ru+jIJ70xZk5QLI=)
                          2: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: PxPK46N9MZPurCaPfgI9tELe2G5H+JZ5XdBrUwuav4E=)
                          3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: yyGDJTjbiIw2TBHu2C0tn5QD9FrUbybNbiDsekl6klA=)
                          4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: 2coPKVs6UYgvaRhALb3U6qftTnGIwKrxHvCONmCCP9c=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl
                          rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:34:dd:51:14:eb:a6:f1:4a:da:1b:88:c7:72:89:25:ab:30:6b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
        Validity
            Not Before: Nov 21 21:57:22 2024 GMT
            Not After : Nov 25 03:28:22 2024 GMT
        Subject: CN=EF138CA726F5EED5E72C47EE006E281E47964FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:4b:0c:15:ac:e6:29:a8:4b:e8:e2:8a:08:
                    d4:22:3c:7a:3a:e9:3e:a9:ae:4e:18:e8:5d:a2:f4:
                    28:fe:e3:40:13:d0:c2:d9:2d:4f:e2:af:8b:bb:84:
                    ea:36:62:2b:bf:76:2c:8e:c1:c8:3f:62:fa:a2:4b:
                    d4:b5:e8:98:f1:b6:2b:69:63:0f:a8:2b:53:2c:aa:
                    bc:a9:b4:62:a5:38:a4:41:33:3f:92:54:ff:3b:28:
                    cc:e6:31:47:9c:29:f8:0e:3b:9b:86:01:65:c8:af:
                    7d:b4:aa:47:43:72:98:8d:d9:9b:dd:de:c1:81:f7:
                    f6:12:22:10:f9:cc:4c:0d:49:26:06:ff:8f:3d:5b:
                    6e:ba:ae:34:67:1c:3e:ae:43:29:05:a5:91:36:79:
                    a7:9d:2e:b2:b4:d0:e2:80:5b:89:82:12:f1:3b:b7:
                    21:cc:bb:96:70:2a:3f:a8:c2:d4:2c:9c:e4:ba:82:
                    43:0a:12:26:0c:44:0d:e3:e6:55:7e:cf:95:23:b6:
                    58:4f:a1:ff:8f:ce:11:c8:41:bc:ec:03:81:ad:3e:
                    45:cd:8e:a2:4f:0a:c6:75:72:26:8f:3c:b6:cf:3f:
                    3e:fe:0f:e5:d8:ce:fb:87:53:6e:76:28:79:b0:3c:
                    48:0b:05:1b:72:bd:88:a9:e6:c5:1d:2e:62:58:de:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:8C:A7:26:F5:EE:D5:E7:2C:47:EE:00:6E:28:1E:47:96:4F:DE
            X509v3 Authority Key Identifier:
                keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:d6:8b:04:3d:e9:05:5b:f4:e2:93:69:2b:e5:64:05:11:
         a2:0c:53:17:85:4d:c0:28:d9:af:1a:d1:22:6b:f0:93:73:44:
         b5:e0:87:9a:d4:34:36:50:2b:1b:77:2b:4b:87:9f:e8:4f:c3:
         2b:58:e3:34:03:6b:74:34:5d:79:ec:fa:d8:64:85:aa:0e:47:
         62:a5:f4:14:3a:1f:e7:04:5d:1f:67:52:20:34:3b:a1:f8:93:
         a1:57:ac:f7:97:12:37:61:8a:d6:fe:63:ec:85:92:9c:55:49:
         82:7c:8f:57:b8:39:eb:a8:49:49:86:48:70:47:cb:e2:74:68:
         7f:c4:f9:18:46:6e:ca:ae:a6:22:ed:65:ce:c1:58:e6:dc:03:
         e2:4e:a2:f4:68:41:7d:61:50:35:95:6a:ca:cf:54:f5:45:79:
         db:a8:c1:7b:3d:c5:6b:b9:ee:43:70:66:54:12:91:f3:f3:07:
         92:0d:12:11:7b:38:e3:70:94:28:5c:97:54:e1:73:92:ca:f7:
         d0:bc:13:76:9b:1c:59:78:09:46:f0:91:e8:54:cb:d0:e7:ef:
         df:06:58:64:a7:cf:04:1f:e3:2a:19:e4:d4:9d:7a:68:28:4f:
         d5:1b:6b:80:9a:f8:91:d8:53:74:cc:69:22:01:b4:dc:0f:82:
         b3:40:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org