Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File:                     D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier:          t5mlTKY+Ezxyd69kJpFLbW2bTNEw4IzipVlIOcaPLZY=
Subject key identifier:   DF:FC:48:F6:01:B9:48:CB:7B:6D:FA:E9:66:A8:89:ED:ED:1B:3E:A0
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer:       /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial:       3CF7443D1F2E7A79CF1CF67162A0DDF097DF5D0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number:          022E
Signing time:             Thu 21 Nov 2024 01:20:00 +0000
Manifest this update:     Thu 21 Nov 2024 01:15:00 +0000
Manifest next update:     Sun 24 Nov 2024 06:19:00 +0000
Files and hashes:         1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: GzPhe/FHAzKWcFGzhJ3yzciMVW730zuvH2EeYtfsJ1g=)
                          2: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: AL3mieX2o65UslMUW3UMaautsUjIXqrPRAEeKQJUiIY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
                          rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:44:3d:1f:2e:7a:79:cf:1c:f6:71:62:a0:dd:f0:97:df:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
        Validity
            Not Before: Nov 21 01:15:00 2024 GMT
            Not After : Nov 24 06:19:00 2024 GMT
        Subject: CN=DFFC48F601B948CB7B6DFAE966A889EDED1B3EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:74:a3:4b:aa:70:4d:6c:eb:a0:c3:56:fe:
                    8c:ad:d8:45:e4:27:07:73:7e:55:07:c3:ac:e5:e9:
                    38:7e:30:94:e5:b5:66:5d:00:12:33:98:24:f1:a1:
                    f6:88:4b:74:eb:8f:e3:43:b2:7d:2d:ec:48:9c:2c:
                    6d:70:78:c0:2b:be:50:f6:0d:a7:1c:c1:7f:9c:af:
                    67:6d:fb:8c:cc:8a:f1:f2:da:27:5e:b6:3e:77:df:
                    5f:d2:b9:85:64:93:6e:7e:f8:75:0a:b0:45:f4:27:
                    18:72:af:60:41:02:8f:52:cf:96:4d:af:8c:36:e5:
                    61:49:59:94:3a:cc:70:af:9a:3c:55:98:f0:cb:d7:
                    05:0a:55:22:3c:91:3b:68:8b:37:cb:60:51:df:25:
                    23:2f:0b:5f:27:0e:d9:44:f7:43:43:70:09:bb:d0:
                    67:a0:01:db:3c:91:ed:1a:b8:31:7c:07:20:34:f9:
                    61:82:56:08:9b:0d:1a:fb:2d:c1:5c:da:76:58:5d:
                    1b:68:96:aa:52:a1:db:39:03:51:94:97:cc:e5:c7:
                    ec:61:44:df:4b:ca:10:8c:98:07:b1:68:28:4d:86:
                    30:91:15:84:76:86:0d:91:c7:4e:07:d8:00:cf:2b:
                    14:31:67:d0:83:db:84:e4:57:db:7e:9d:24:c5:d8:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FC:48:F6:01:B9:48:CB:7B:6D:FA:E9:66:A8:89:ED:ED:1B:3E:A0
            X509v3 Authority Key Identifier:
                keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:cb:d9:c2:4d:9b:64:ee:3b:2e:e3:ea:05:66:b4:92:14:
         2d:9f:28:2c:19:ab:0a:b1:96:e1:05:d3:55:da:5f:eb:a9:14:
         9f:64:81:7d:ca:45:0f:04:09:83:03:94:40:d4:bd:9c:a6:c1:
         44:64:d3:70:42:5c:55:2a:82:9d:56:67:4b:73:d2:14:c5:d7:
         c1:0c:0e:a3:83:ba:4e:04:39:07:21:c5:70:28:36:19:da:77:
         eb:57:91:e5:4f:b1:6d:76:4e:6a:54:1c:bc:ec:ac:52:c2:26:
         82:be:2a:6b:ef:1f:99:9a:62:04:5c:be:84:a8:76:4d:65:96:
         74:07:52:16:87:cb:ba:38:12:e4:04:94:0a:6c:c5:db:d1:52:
         70:ba:05:ad:87:a5:f5:83:40:e0:f0:1e:0f:6d:3e:a4:24:b0:
         d8:fd:00:f8:0a:9a:bd:96:6e:53:1b:2f:54:14:e7:f3:91:22:
         8f:57:7b:c0:82:fb:08:07:b6:6d:16:6b:2a:7f:df:f7:9e:65:
         99:f5:2b:53:57:44:d5:43:49:f5:44:2e:ff:d2:ab:23:13:49:
         bf:cb:a4:6d:37:1d:83:a5:76:c9:48:14:6d:fc:97:b8:b2:a5:
         04:d1:e9:ef:d0:c5:f1:f3:1d:43:5f:17:8a:52:28:a0:8a:92:
         3f:3b:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org