Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          IxNRB6dHA6uUwCtmOV0l4B/a1uuCpJZzLyQiyJ9/HDo=
Subject key identifier:   98:DF:23:59:21:FD:45:0C:6E:A8:F9:BB:B3:2B:90:DA:E7:9F:AE:54
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       5B355E5CD1D891C93AF477512D8A572FC13E2A77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          01DB
Signing time:             Fri 22 Nov 2024 11:41:58 +0000
Manifest this update:     Fri 22 Nov 2024 11:36:58 +0000
Manifest next update:     Mon 25 Nov 2024 13:56:58 +0000
Files and hashes:         1: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: TPr77EoAIVHtCQKiAjmbt5bRWqc/2aluWcJV4D10c/Y=)
                          2: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: Q0qOJ/lZFg5h7UgexbzOBngIpLcaN5DOfBR3Xnw+miE=)
                          3: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: tuC8MEUEcdj4aejYW8E3scwSN6FZSzAw4TVHzmh9NqA=)
                          4: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: 1LTZq4OamLGaIEc7s8hORwOna9UqTifBlZPqeEuXpEA=)
                          5: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: Dq3ZweN4eaXldfHOXeJL7ihUBPd4FlfCuwvOxZvmYmE=)
                          6: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: qx0GKHW1FS5tHrsvUCVWgH7+ott04Nq/cKPKtOYX9sQ=)
                          7: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: KNR1sf2xgaU64i1QqHXkD93qwABtoPzzciEEipK9gP4=)
                          8: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: s5VhGyqquShG7gVjj17riZ/dr+Nk1vl6gg38DZ33Yns=)
                          9: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: SAfpSIUp+m9cDpattC9UKh8vYdlXrj1UghtimfFlLxg=)
                          10: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: BzFu2n43chglMdGgc1jSFgViLyWmM8uXCxYjJL33VPs=)
                          11: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: m+iFf6x78xMNG3cgj5SBa8woS/ACjDi5PHEdG0OXJdQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:5e:5c:d1:d8:91:c9:3a:f4:77:51:2d:8a:57:2f:c1:3e:2a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Nov 22 11:36:58 2024 GMT
            Not After : Nov 25 13:56:58 2024 GMT
        Subject: CN=98DF235921FD450C6EA8F9BBB32B90DAE79FAE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:23:50:51:3e:17:88:6c:7a:39:77:be:04:
                    61:b8:7d:03:ff:47:37:d9:af:df:8b:e0:d2:2f:37:
                    63:69:7c:0a:74:ba:75:52:00:4a:21:85:c1:cb:f5:
                    36:5c:bb:e1:ba:6c:97:6e:e5:12:7b:c1:4f:df:9e:
                    de:ec:b2:3c:e4:f9:6b:f3:48:8a:b0:f0:11:08:f7:
                    6e:5e:56:9b:a1:1c:48:a9:6d:ae:c1:a8:e8:a3:be:
                    2f:54:16:7f:4a:9c:cc:38:c8:bb:97:b8:35:8d:3c:
                    7c:63:1a:47:e6:15:de:1e:4a:e1:50:ce:22:2a:b9:
                    fd:c1:95:c7:ba:04:12:9a:3f:23:b7:33:07:71:02:
                    03:35:fa:11:a7:b4:57:5e:01:08:54:0d:da:b1:d4:
                    cb:45:e3:fb:27:a7:27:38:9d:76:30:a7:4e:8a:4c:
                    9b:e8:80:1e:b6:2b:85:8b:0a:6f:29:f7:bf:84:8a:
                    f5:e3:96:11:2e:e1:32:4e:3f:8d:cb:4c:88:d4:ba:
                    6d:2f:7f:77:65:cc:98:61:3e:c4:f5:9b:13:10:39:
                    33:24:c2:50:36:4a:e9:74:1d:83:3d:63:52:c9:7b:
                    01:ed:f6:6e:ff:3c:1e:d6:d3:72:22:ee:3f:b4:f3:
                    6e:b0:7b:c6:ad:ed:3f:93:f0:b1:99:c2:54:b6:4d:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DF:23:59:21:FD:45:0C:6E:A8:F9:BB:B3:2B:90:DA:E7:9F:AE:54
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:1c:bf:42:80:c3:ef:a6:8b:cc:ad:92:92:0a:b8:73:4f:
         36:f1:d4:61:6e:be:78:9a:18:8e:33:96:ce:67:8c:2a:66:96:
         e7:3e:fd:9c:60:55:59:f5:aa:88:ea:6a:fa:26:a7:65:e4:ca:
         e0:b0:e6:6c:9d:35:a7:b0:a1:a8:5a:b6:05:49:6a:ab:48:c0:
         79:bf:9c:41:d3:fb:fa:ce:64:e0:29:6d:72:fd:a8:72:14:95:
         ce:50:56:69:1c:ee:52:49:17:bc:9e:65:44:bd:80:64:8a:5c:
         7b:4a:20:4b:aa:90:07:bd:9e:fd:d0:e9:87:4d:19:a0:e8:75:
         f9:fa:2f:cf:79:68:a3:b2:a0:55:21:a2:80:2f:b3:c3:54:86:
         a5:05:a4:e4:74:03:65:aa:04:ea:9e:15:b3:3a:57:65:67:9d:
         60:2e:d7:e9:a1:b3:d1:3d:76:77:77:9c:8e:f2:03:c8:b1:b7:
         eb:11:15:2a:66:f4:ab:e1:e1:bf:f9:a4:9f:a5:84:cf:5a:f8:
         bc:f3:61:90:60:e9:77:d9:7a:10:f1:65:5d:6d:c3:a7:fd:ba:
         e3:df:66:5c:a2:c7:7d:f4:16:23:ce:97:70:04:eb:4b:be:48:
         68:ea:8a:72:25:3c:39:5b:50:e5:d6:a5:52:af:88:9d:56:c8:
         60:a3:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org