Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
File:                     74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json)
Hash identifier:          mxPpqRGrVZ+GrdOBsW1HlZuco2tDdXHM54OkTU+8tBg=
Subject key identifier:   1C:B7:35:F0:02:6B:D8:D0:43:8D:58:08:3A:C5:5B:C0:D5:EB:CB:E7
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Certificate issuer:       /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial:       5D4EC82A5BAC438A6129423B68AF50FE8DE7D207
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
Manifest number:          02BF
Signing time:             Wed 20 Nov 2024 17:41:43 +0000
Manifest this update:     Wed 20 Nov 2024 17:36:43 +0000
Manifest next update:     Sat 23 Nov 2024 21:50:43 +0000
Files and hashes:         1: 3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa (hash: yNJSdp21QxHQXQ/ZofOt5hJYx3kP1vMmfYB/I1WV2CA=)
                          2: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: 3mCgQ//nZwflNlHRQrzTiT5fQCSfg4v/HNvN063ZuEY=)
                          3: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: no5a8p5/eDhiCX6aNnlAxLlKatq8oiCePA49X6NvOVY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
                          rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4e:c8:2a:5b:ac:43:8a:61:29:42:3b:68:af:50:fe:8d:e7:d2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
        Validity
            Not Before: Nov 20 17:36:43 2024 GMT
            Not After : Nov 23 21:50:43 2024 GMT
        Subject: CN=1CB735F0026BD8D0438D58083AC55BC0D5EBCBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:0f:fc:ab:f9:e4:13:37:87:cb:55:32:6c:
                    6a:0d:f2:bf:45:4a:94:c3:04:5d:bf:01:80:7b:36:
                    fd:1d:dd:b0:3f:08:d3:6f:2a:a7:87:2b:dd:35:6d:
                    7d:c6:02:63:87:da:2d:e7:64:ba:77:1d:eb:3b:93:
                    1f:3f:1b:a2:f1:de:25:d3:23:04:ec:bc:b4:71:42:
                    ab:4a:06:f1:f6:ea:8a:99:c3:0b:72:22:ae:35:6b:
                    a3:16:d6:a9:d9:d1:3c:2c:a0:27:a1:ad:a8:dd:8f:
                    89:e7:77:e6:63:9f:1b:50:23:c9:c9:6e:7f:e8:6a:
                    09:e3:0c:08:bc:24:7b:26:5a:2f:aa:b2:5b:28:c5:
                    e0:55:fc:3b:4f:c7:02:9b:01:43:a8:0c:40:41:f6:
                    6f:1d:15:48:cc:db:7e:98:28:1d:51:da:f7:b6:ff:
                    f5:97:5d:78:0b:7a:80:fc:6b:06:5c:63:5c:1d:90:
                    d1:c9:b5:30:cd:36:b5:0a:40:61:2e:da:5c:d1:2c:
                    2c:54:8d:28:93:1c:f7:52:50:60:35:86:08:c8:b4:
                    62:0a:76:9a:c5:9e:40:82:a0:d2:71:cd:fd:b5:72:
                    35:17:26:ba:5c:67:e3:8e:b9:07:2e:bf:7c:cb:3a:
                    e9:de:9b:16:f7:5d:49:63:af:72:2c:47:5a:2b:9a:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:35:F0:02:6B:D8:D0:43:8D:58:08:3A:C5:5B:C0:D5:EB:CB:E7
            X509v3 Authority Key Identifier:
                keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:7a:50:30:16:e7:ba:a6:84:e9:cd:a6:9b:5a:b4:24:08:
         6e:73:75:82:bc:91:97:82:de:2c:86:47:a9:46:0c:96:ee:35:
         12:cd:09:67:2d:58:92:8e:73:4c:4f:e7:ed:91:ce:00:83:5f:
         8b:1f:a0:e4:6b:52:57:ec:c9:ee:35:de:4c:e9:ab:d1:d5:68:
         e0:94:b5:33:4c:9b:f9:ac:53:f0:26:63:be:78:81:ad:a2:79:
         11:3c:da:c1:b5:fe:b2:8b:c4:84:74:df:0a:48:f7:48:60:61:
         ee:80:a3:53:a6:09:a6:48:b9:14:e5:45:b7:c6:8d:6e:22:c6:
         6e:8d:8c:32:ec:58:da:f4:c3:91:1b:13:98:53:5a:e0:5b:8d:
         aa:63:e8:70:65:2c:a5:7e:39:88:d0:06:75:03:d5:a7:79:5b:
         8d:63:80:45:ad:f8:7d:4d:12:e6:ee:f6:33:d3:f8:2e:c8:30:
         1a:b8:df:07:f2:40:d3:ab:13:80:4b:6f:b5:c8:59:8c:fa:40:
         62:06:9a:4f:5c:9d:ec:91:dc:82:74:9a:50:53:25:78:a0:ec:
         e5:4b:72:07:5d:2c:4e:88:cf:96:f4:86:b1:86:dc:39:80:d0:
         66:a2:09:74:79:37:00:df:fa:0f:55:44:b5:ef:17:fb:6a:b0:
         7f:74:97:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXU7IKlusQ4phKUI7aK9Q/o3n0gcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy
OTJCQ0IzRTAeFw0yNDExMjAxNzM2NDNaFw0yNDExMjMyMTUwNDNaMDMxMTAvBgNV
BAMTKDFDQjczNUYwMDI2QkQ4RDA0MzhENTgwODNBQzU1QkMwRDVFQkNCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KQ/8q/nkEzeHy1UybGoN8r9F
SpTDBF2/AYB7Nv0d3bA/CNNvKqeHK901bX3GAmOH2i3nZLp3Hes7kx8/G6Lx3iXT
IwTsvLRxQqtKBvH26oqZwwtyIq41a6MW1qnZ0TwsoCehrajdj4nnd+ZjnxtQI8nJ
bn/oagnjDAi8JHsmWi+qslsoxeBV/DtPxwKbAUOoDEBB9m8dFUjM236YKB1R2ve2
//WXXXgLeoD8awZcY1wdkNHJtTDNNrUKQGEu2lzRLCxUjSiTHPdSUGA1hgjItGIK
dprFnkCCoNJxzf21cjUXJrpcZ+OOuQcuv3zLOunemxb3XUljr3IsR1ormh7LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHLc18AJr2NBDjVgIOsVbwNXry+cwHwYDVR0j
BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD
QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC
Q0IzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz
MzEtOTc1MDI0Y2QwNDZkLzAvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgy
NDQyOTJCQ0IzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGHyelAwFue6poTpzaabWrQkCG5zdYK8kZeC
3iyGR6lGDJbuNRLNCWctWJKOc0xP5+2RzgCDX4sfoORrUlfsye413kzpq9HVaOCU
tTNMm/msU/AmY754ga2ieRE82sG1/rKLxIR03wpI90hgYe6Ao1OmCaZIuRTlRbfG
jW4ixm6NjDLsWNr0w5EbE5hTWuBbjapj6HBlLKV+OYjQBnUD1ad5W41jgEWt+H1N
Eubu9jPT+C7IMBq43wfyQNOrE4BLb7XIWYz6QGIGmk9cneyR3IJ0mlBTJXig7OVL
cgddLE6Iz5b0hrGG3DmA0GaiCXR5NwDf+g9VRLXvF/tqsH90lx4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:41:49 2024 by rpki-client on console-fra.rpki-client.org