Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
File:                     F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json)
Hash identifier:          YqqQKIC0dRug5p/j/NZmY+cbTq9/n4Jmw9KyzpSbBmY=
Subject key identifier:   B8:D8:B4:EE:53:F3:AE:81:9A:88:A6:81:2C:5B:80:9D:BA:3A:16:6F
Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49
Certificate issuer:       /CN=F03C1838587677BF6505C46715F42F8B8416F949
Certificate serial:       6C16958EEB5E9FAA3687BE525C43AF1EA48BA24C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
Manifest number:          0153
Signing time:             Thu 21 Nov 2024 03:11:52 +0000
Manifest this update:     Thu 21 Nov 2024 03:06:52 +0000
Manifest next update:     Sun 24 Nov 2024 07:59:52 +0000
Files and hashes:         1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: IwYVvleYOXDE1KvxJlP/VyImH81zWBJgWu/EFn3XzgQ=)
                          2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: Md2Gwc22wRKTc5mUc5ELs7bt6G77R7I0eKIAvlpl/5s=)
                          3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: aVBlwTaCFDqtulCIU8ycbJkNqyqNvOwqKoTf/cOeoYE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl
                          rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:95:8e:eb:5e:9f:aa:36:87:be:52:5c:43:af:1e:a4:8b:a2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949
        Validity
            Not Before: Nov 21 03:06:52 2024 GMT
            Not After : Nov 24 07:59:52 2024 GMT
        Subject: CN=B8D8B4EE53F3AE819A88A6812C5B809DBA3A166F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:e6:10:79:2f:f8:65:0d:73:18:41:f3:e3:
                    3d:c3:07:50:83:31:78:13:ed:fc:c2:34:80:05:67:
                    59:82:c3:44:8c:98:8e:31:27:20:f6:83:57:f3:b2:
                    53:0e:6c:31:24:66:72:ec:9e:35:b5:ca:fa:7a:65:
                    a8:43:57:b5:27:41:0e:d6:b0:94:e3:0c:ff:32:be:
                    97:39:04:80:70:bd:1f:48:38:14:04:f1:e6:1f:14:
                    ee:94:b9:e9:d4:ff:35:9c:f6:d0:a4:5f:52:7d:b1:
                    f8:f8:69:ac:d9:99:33:cb:7d:09:16:07:81:e5:ad:
                    b7:a7:9e:c9:d9:6e:d5:d8:32:b0:a0:43:f5:c5:71:
                    cc:c6:f1:4b:88:7f:7b:36:c3:0c:1e:70:a7:e7:2b:
                    ff:64:4c:59:60:64:a7:0f:81:00:78:1d:90:ee:de:
                    72:18:b1:cb:b9:61:fd:3c:f9:82:c6:5e:16:f2:3a:
                    fa:c4:f9:91:93:1a:d7:f1:fe:0a:f1:ae:2e:cf:0c:
                    ee:35:51:00:a4:12:c8:a5:68:95:5f:bb:8f:21:c3:
                    f9:d0:c5:c9:75:a3:3b:1b:98:7c:1c:18:be:a6:c0:
                    3a:1f:00:c8:74:ef:c1:22:28:ae:99:81:04:46:6a:
                    4b:34:08:48:33:50:21:62:bb:bb:a1:b1:bd:74:21:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:B4:EE:53:F3:AE:81:9A:88:A6:81:2C:5B:80:9D:BA:3A:16:6F
            X509v3 Authority Key Identifier:
                keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:3c:e9:8e:27:e6:c8:ea:c1:11:2b:c3:db:aa:8b:79:01:
         cb:9c:75:18:c8:32:c1:6b:23:85:3f:f4:2a:a1:66:84:d5:a7:
         ea:c1:92:2d:75:01:ed:77:9e:31:8f:9a:9c:e9:01:c1:37:84:
         c8:59:b5:44:e8:d3:6e:3d:20:0b:e1:07:4c:37:10:81:8a:22:
         75:17:e1:60:7b:0f:8c:1d:34:99:2f:86:81:de:e4:ca:b8:69:
         ed:5f:91:69:d1:df:bf:47:cc:b6:92:66:3a:28:e6:a1:99:40:
         4f:b0:a0:54:0f:fd:74:98:a4:75:24:71:d1:5a:11:81:15:b3:
         d9:e9:cd:6e:77:38:40:82:0e:53:97:79:29:0f:e3:fd:95:78:
         35:94:34:b1:57:e6:24:30:03:e9:53:3b:8d:9e:1e:84:27:8d:
         a2:15:20:7d:68:6d:cd:11:7e:78:ba:d9:0c:ae:f2:4c:c9:62:
         a4:b7:b3:5e:81:14:cc:84:7e:62:a2:44:fb:75:6d:f8:6f:ed:
         ca:41:eb:67:54:9d:ba:15:fd:8e:32:b4:8e:b3:46:68:9d:ba:
         e8:12:71:0c:56:cc:aa:e9:50:47:ed:3a:2f:27:6a:75:7e:38:
         9e:9a:ee:8b:0d:60:42:f5:bf:96:6f:3b:f0:34:65:24:13:51:
         c8:56:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org