Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          RmiLsTgq/l2HLXho7qASm+ate0zsATs3EvZ8wQbq3lQ=
Subject key identifier:   20:9D:8D:88:3A:A4:ED:B8:87:A5:F2:43:A9:7A:EA:E5:56:DA:7D:81
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       6AF6667BCB63B6CBB3D9281349DCFC57DCD47E0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          048B
Signing time:             Thu 21 Nov 2024 07:21:43 +0000
Manifest this update:     Thu 21 Nov 2024 07:16:43 +0000
Manifest next update:     Sun 24 Nov 2024 17:15:43 +0000
Files and hashes:         1: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: M8Jg7RXp9q2IokSrSE72Qz1D7tYQ3VERLgs0YJ8PYrM=)
                          2: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: P7Z6XRJZfWLIwLc37QAohPD8GShqj3t7azYOQZsaPgs=)
                          3: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: lUfoM/pRuCg3rZdYujSBnmar8bmPJa89d81Q5wXnn9c=)
                          4: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: T0qy24Jw4nMkx0vavFP/FymLrM7UIs0+axCAYFq5t24=)
                          5: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: d4njcKCxXvuiPQpiLgPI2iTaalRvfXwt51s7xl9S/7E=)
                          6: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: LB+inrTHl++NnxWQECwpAACSUffhvv+u+a57RRWlJlI=)
                          7: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: jz9bRPv/zLjyU9FsvsRyL3PZwV3PEvUTAwe8YNTtT00=)
                          8: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: nBKHI+10Ut06FOJtH41J5R/AAE9svDrS9ER1fZDd350=)
                          9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Ccc9Rz2j35EkvfbNz2T6X50a6oTWv2x4bbeSyVrqI+E=)
                          10: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: gU2bGz0QcfX7jz+4pmy6dDNu6epMK9rp4iwrG6+Vboc=)
                          11: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: UDms7HIaDGeGiYCJtIOU53UdSKHvDK+0OFralrpfjuY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f6:66:7b:cb:63:b6:cb:b3:d9:28:13:49:dc:fc:57:dc:d4:7e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Nov 21 07:16:43 2024 GMT
            Not After : Nov 24 17:15:43 2024 GMT
        Subject: CN=209D8D883AA4EDB887A5F243A97AEAE556DA7D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:42:95:0e:fe:8a:9a:ff:e6:16:20:b7:e8:
                    08:cb:18:6f:0e:98:b0:e4:e6:fb:2f:34:ac:8e:6f:
                    ea:e2:ab:cd:85:1b:b8:2e:9f:c3:98:e9:e2:20:5d:
                    89:7c:93:f3:01:13:68:da:14:4d:43:93:f6:13:22:
                    39:2f:fb:db:e6:93:33:19:46:32:bc:7b:9c:93:ec:
                    43:12:9e:fc:11:b6:6c:14:c2:82:1f:5e:52:5f:62:
                    e9:49:63:1f:90:21:7b:03:a2:9f:af:4f:e1:75:a8:
                    15:42:6a:96:2e:44:a0:69:6b:a1:b7:f8:bf:24:40:
                    e1:48:26:99:5a:cb:0c:a5:ca:d9:98:f4:16:f7:a0:
                    4b:70:cb:5f:d4:82:fd:c5:e8:78:7f:b1:c2:60:68:
                    da:ea:7e:9f:1c:f9:7a:21:54:0b:0b:c8:f0:4f:3a:
                    90:9e:5d:c6:22:67:04:93:c1:fb:76:40:c6:a1:16:
                    c7:db:17:33:1e:89:55:51:1c:03:a1:f1:48:0a:dd:
                    bb:63:07:3d:36:8f:1d:f0:a5:d8:df:c3:ce:54:8b:
                    17:86:6b:be:a7:06:fd:28:cd:37:b4:e4:d3:39:e2:
                    c7:c3:00:fc:aa:77:cc:73:b3:2a:b5:ac:35:26:2f:
                    5b:b2:bc:8e:ff:fd:d1:88:b9:66:2e:1b:89:ce:a7:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:8D:88:3A:A4:ED:B8:87:A5:F2:43:A9:7A:EA:E5:56:DA:7D:81
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:42:c2:43:79:fc:24:e3:19:36:7b:f1:dd:29:a3:73:ad:5c:
         06:fa:ad:de:27:d2:f7:eb:e4:e5:b4:74:b6:27:8f:23:ff:7c:
         a8:2e:d3:11:2a:a1:09:0b:b0:3e:e2:77:74:c9:aa:b9:35:43:
         5a:21:79:97:86:be:60:9b:91:c8:42:a8:b3:a3:85:be:08:5e:
         8b:b6:a9:1a:63:3f:c5:7c:95:1b:19:b4:dd:8e:65:00:c0:a0:
         cf:dd:37:15:e4:21:e2:39:7c:de:40:69:39:8e:bc:83:ae:c6:
         5a:46:4e:3a:4f:18:ab:e4:a6:13:cc:20:71:9c:fa:f8:2c:d8:
         c0:d3:3f:f6:07:25:0e:9c:0a:74:c6:f6:02:7c:ed:c7:ea:c6:
         3d:bc:85:e8:4f:d9:2a:bf:e0:27:d5:46:36:ad:4b:84:ea:92:
         05:09:fe:2b:f5:98:89:da:6f:ee:67:55:14:f8:6e:00:b4:5b:
         62:de:2e:ea:ab:3b:56:f2:29:14:df:ea:9f:85:ee:65:80:eb:
         d6:79:97:23:9f:9e:e2:4a:fa:92:e9:1f:27:55:b0:60:12:d5:
         3d:67:b6:33:9c:f5:ac:f8:9e:00:b2:85:39:23:7a:3e:54:a6:
         01:6f:a8:1b:f5:f4:e1:39:4f:e5:6a:ae:e9:a0:4b:7a:1d:23:
         f5:8b:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org