Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
File:                     658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json)
Hash identifier:          YtXgzNpZJRkuC44gIS3nDIIwJHBzyzQg2lVBv8oBTYM=
Subject key identifier:   08:CB:9A:F6:46:16:E5:F8:82:D5:90:52:CB:CF:D2:7B:7C:80:B3:0E
Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
Certificate issuer:       /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Certificate serial:       445608FC0A3C7E8685D19C85143E5538FD0095C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
Manifest number:          0166
Signing time:             Thu 21 Nov 2024 03:11:51 +0000
Manifest this update:     Thu 21 Nov 2024 03:06:51 +0000
Manifest next update:     Sun 24 Nov 2024 13:34:51 +0000
Files and hashes:         1: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: 48+L1G8c0vPJ3Xwh9g6Jvkl9utn16OoluFEE7IOJhNo=)
                          2: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: AZNdxmCYaLWaHxBjgJHMu6n2swPpWGp9vmUbS5DLkRM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl
                          rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:56:08:fc:0a:3c:7e:86:85:d1:9c:85:14:3e:55:38:fd:00:95:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
        Validity
            Not Before: Nov 21 03:06:51 2024 GMT
            Not After : Nov 24 13:34:51 2024 GMT
        Subject: CN=08CB9AF64616E5F882D59052CBCFD27B7C80B30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:ab:5a:2f:ee:7d:06:f4:ac:51:2d:d5:fe:
                    6b:45:6e:5d:7a:33:d3:93:ce:85:1f:b1:01:91:82:
                    cc:5b:2c:72:42:83:e8:73:89:e0:3c:3f:9e:2d:55:
                    7d:de:21:b8:4c:23:7b:e8:65:cb:0d:a7:66:ab:e1:
                    52:97:77:54:fe:30:37:a2:77:9e:b5:9e:87:55:39:
                    c3:da:7a:82:fc:6a:86:4f:00:16:07:07:88:a8:e9:
                    a3:66:c9:23:73:d5:24:67:87:d9:c9:9c:0f:a2:f6:
                    2d:47:4f:20:07:1c:75:1d:d5:aa:ae:44:41:f4:97:
                    06:53:aa:f6:2b:e0:8f:24:98:e1:f2:f7:e0:b2:7d:
                    fc:6f:c3:53:3b:56:ad:60:bf:29:2b:05:90:a0:85:
                    fa:41:83:14:8a:a2:12:3e:6b:64:88:82:b3:02:74:
                    bf:9a:5e:c5:c7:ed:fd:26:e3:f5:19:af:9f:51:df:
                    f5:7a:b9:58:7f:0d:06:60:da:ad:14:2d:0c:68:c9:
                    c1:df:91:04:fd:82:22:a8:e8:58:16:c3:31:43:22:
                    57:5a:40:f3:ce:f6:26:33:03:9b:40:e7:37:20:46:
                    c3:fc:52:7b:66:f7:92:0e:7f:78:c1:5f:c9:58:61:
                    e2:9d:4d:39:c0:bd:55:f2:d4:d2:2c:9d:f7:64:a9:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CB:9A:F6:46:16:E5:F8:82:D5:90:52:CB:CF:D2:7B:7C:80:B3:0E
            X509v3 Authority Key Identifier:
                keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:ea:57:96:17:47:c6:9e:5c:97:f8:da:93:de:6c:2b:11:
         9e:62:12:ed:2a:4b:17:07:21:b9:7d:81:38:ed:e9:f2:f7:5d:
         ee:59:d8:fc:18:6e:eb:c0:16:5a:73:c0:02:2e:44:34:c1:98:
         0e:4b:fb:35:3e:7c:de:6e:72:69:14:5f:f8:0d:e7:e8:fa:95:
         c1:f8:6a:f9:07:52:cd:32:7d:0d:31:0e:79:43:1a:78:38:1c:
         f4:d4:e1:f3:f8:e7:62:fc:da:cc:7c:d2:f3:b4:0b:00:ba:09:
         67:90:2e:bb:91:bb:4d:2f:2d:56:cc:9b:3a:50:95:9a:6c:19:
         49:52:0a:cd:eb:e9:cd:e1:13:b1:0c:14:ab:28:e1:a0:38:4d:
         d0:11:e8:61:4e:4f:d2:f4:7b:e2:f0:f7:6b:0f:45:1a:20:7c:
         84:67:4b:d0:15:5d:87:b1:0c:65:1b:1a:c6:4e:d9:75:56:fe:
         33:76:5a:bd:92:5a:a4:6f:73:21:a6:25:ec:14:94:ca:cc:85:
         18:7d:86:0d:e9:f2:ed:95:b2:3c:fd:a0:d4:73:27:34:e6:1b:
         b4:4c:68:bb:4d:22:a6:f9:0f:48:ad:41:36:49:e1:bd:20:cf:
         47:57:ca:0c:e7:40:89:fb:c6:93:2c:28:9b:b7:f2:41:ee:42:
         06:07:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org