Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
File:                     1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json)
Hash identifier:          on2L8wkEgfZDwUEWpQDmFP9ror2k5jkDJRFjVQlpDrY=
Subject key identifier:   4F:9F:C9:E2:46:35:97:CA:C3:48:F1:4B:83:70:ED:EC:0C:EF:7C:0D
Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46
Certificate issuer:       /CN=1D5FBED26611C99226941DBD91139C594B399F46
Certificate serial:       6A6DBFF5C5890D07552DCDC72581FF9FD9FA22E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
Manifest number:          0234
Signing time:             Sun 24 Nov 2024 08:31:40 +0000
Manifest this update:     Sun 24 Nov 2024 08:26:40 +0000
Manifest next update:     Wed 27 Nov 2024 08:33:40 +0000
Files and hashes:         1: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: F+0WVeHdp+PnmjU+ffFLZ/wI6PcmDjn0aJphEsnJD8Y=)
                          2: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: ToPmvFe3FzaJaA8MRzq9WzUcJ4tl57w01NFkekpK9m8=)
                          3: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: myBpd9ohdDlc1v8sPJnjUTXwza2wPNVp2gf1yrokQn4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl
                          rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:bf:f5:c5:89:0d:07:55:2d:cd:c7:25:81:ff:9f:d9:fa:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46
        Validity
            Not Before: Nov 24 08:26:40 2024 GMT
            Not After : Nov 27 08:33:40 2024 GMT
        Subject: CN=4F9FC9E2463597CAC348F14B8370EDEC0CEF7C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:2e:01:2f:37:d1:17:72:8f:12:62:dc:43:
                    05:dc:5d:cf:51:31:b1:f1:35:85:0a:45:1c:bb:59:
                    0d:b6:61:f4:12:7f:d4:3b:b7:78:13:39:8c:b0:a1:
                    50:97:b3:9b:28:f1:e0:a9:af:fd:94:3e:78:8c:42:
                    95:d6:de:c5:25:da:aa:0b:9e:c5:aa:40:ba:2e:8b:
                    0d:95:94:d7:16:42:a0:28:85:86:fe:6c:88:6d:31:
                    0b:7f:2b:7e:73:e7:06:a3:50:92:9c:29:3f:ec:7f:
                    4f:de:14:06:93:54:6b:a3:1b:43:b1:dd:ec:af:32:
                    03:b1:c3:f6:29:1c:61:31:ad:c8:f4:9e:95:58:ff:
                    1b:28:78:62:37:d4:9b:de:26:47:1e:47:18:d9:b3:
                    05:2d:8a:13:99:f6:f1:82:2f:2c:de:d9:b5:56:5f:
                    6a:77:7e:1f:23:80:67:fe:e5:e0:6b:22:ae:a9:3e:
                    84:9a:ec:d0:0e:37:5f:2a:9c:69:0d:f4:c9:b6:26:
                    c5:ae:5e:e7:8f:49:99:1c:6c:54:35:0a:cc:30:11:
                    ca:4e:bb:4b:9e:1f:9b:30:2e:41:58:78:1d:21:7b:
                    4c:08:d1:31:04:c3:2f:e6:2c:52:da:2f:03:32:24:
                    ce:f7:52:ae:bb:b9:db:6a:d2:99:c3:a3:35:c7:1e:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:C9:E2:46:35:97:CA:C3:48:F1:4B:83:70:ED:EC:0C:EF:7C:0D
            X509v3 Authority Key Identifier:
                keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:c0:f5:9f:4d:1a:3f:88:5a:a1:20:8a:27:0b:c5:81:ef:
         87:66:d7:89:0d:c1:fb:81:1e:61:53:03:2a:c6:94:b9:23:d4:
         1b:96:ab:53:41:2f:66:c3:1a:3a:06:99:53:2e:b3:1e:6c:c2:
         67:f7:a7:89:88:ec:b6:e9:2b:e4:77:60:2c:c0:34:52:f5:6c:
         52:f8:c2:d7:6b:3e:8b:c1:02:85:54:3e:0c:a8:49:22:74:d7:
         ce:81:1e:7b:8e:c4:b4:54:12:5d:3e:8e:7c:71:8b:7f:d4:50:
         6e:f9:78:73:36:8b:97:57:37:85:7e:da:07:e5:2a:f0:2e:5e:
         39:9c:c9:c3:6b:73:42:9f:7a:7a:34:c7:4f:fd:09:71:b8:7a:
         1c:00:29:1f:6d:be:cc:b5:24:1b:94:b8:ae:e1:14:f8:30:4f:
         56:34:4e:21:39:5a:c4:1b:f9:ca:12:31:e5:9f:24:2b:6c:1b:
         38:ea:71:3c:eb:32:98:44:3d:cc:f2:09:75:b1:18:75:de:4e:
         0d:bc:45:40:7e:ee:7f:a9:ae:e8:5d:b7:87:f0:86:92:93:47:
         fe:75:bb:39:2a:51:e7:dc:2a:a1:4b:de:7f:c2:1f:d8:61:89:
         47:95:b5:2f:bf:16:ad:d9:a3:11:e3:fb:dd:87:62:ba:ce:ed:
         45:34:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:47 2024 by rpki-client on console-fra.rpki-client.org