Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
File:                     BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json)
Hash identifier:          quF0sGL48xQ61ma4fZlioQoUq+Vs/yzdEJ1dn6WBtN8=
Subject key identifier:   56:B5:24:7E:26:DF:DF:B9:BA:DC:00:C1:D4:A9:3F:C0:1B:87:84:29
Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C
Certificate issuer:       /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
Certificate serial:       35A763CEA1B88E61A18C1025BF59B292D0479D83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
Manifest number:          4E
Signing time:             Fri 22 Nov 2024 05:32:08 +0000
Manifest this update:     Fri 22 Nov 2024 05:27:08 +0000
Manifest next update:     Mon 25 Nov 2024 14:10:08 +0000
Files and hashes:         1: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: FEhjZkMiGLlLLnkMlvhdRq66NHYMIVeWK07ZVTOZp+M=)
                          2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: gRswT0x3O6GcGZIvbZdYbGTZFJLbdzQZujtUrtLFlm4=)
                          3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: B/M7idIsXn1tlMayHLhcJxcEuPWxgqoWAm4pZDr7kYw=)
                          4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: /98MLFLi0kiWuGxGiywhSbj3ZdX9t0rrFDtPGZH2n4Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl
                          rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:63:ce:a1:b8:8e:61:a1:8c:10:25:bf:59:b2:92:d0:47:9d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
        Validity
            Not Before: Nov 22 05:27:08 2024 GMT
            Not After : Nov 25 14:10:08 2024 GMT
        Subject: CN=56B5247E26DFDFB9BADC00C1D4A93FC01B878429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:95:60:0d:3c:83:a4:ab:e2:b2:91:40:66:
                    5f:89:f2:51:a4:92:75:7e:20:33:a7:1b:c6:f8:9e:
                    10:06:fb:0c:3e:7f:9c:60:0b:2c:6e:16:fa:5f:3c:
                    c7:5b:26:17:9e:f8:99:78:65:02:c0:18:ad:13:47:
                    eb:e1:cb:8f:40:bf:c6:e5:b8:5b:03:4d:dd:6f:df:
                    60:71:af:83:e4:e1:55:74:92:97:fb:65:99:2a:4a:
                    c2:19:df:dc:54:d8:55:0c:35:cf:95:7e:0d:c0:68:
                    32:43:24:9a:2b:84:5a:b5:9a:86:2e:f5:b3:63:aa:
                    82:91:0f:79:5c:e6:fe:c2:54:63:e1:2f:85:95:12:
                    a1:2a:5d:91:18:46:8a:ad:2a:4b:e6:c8:77:3c:7d:
                    35:4c:c4:b6:f2:45:b7:f8:73:7e:88:59:be:8a:5d:
                    e5:47:2d:fd:5e:a5:7d:ff:f9:0e:2a:d0:32:8f:0d:
                    e9:1e:99:6e:e9:14:62:63:9d:a5:4b:b9:f1:36:40:
                    45:ad:0e:08:c1:7e:d6:08:a5:2d:6b:03:a4:56:19:
                    f4:9b:4a:e8:3b:82:e1:b3:09:08:dc:49:f8:96:2d:
                    7b:36:aa:92:0b:cc:4f:b6:df:7f:39:67:3b:89:d0:
                    1d:cf:88:55:35:82:31:d5:cf:f0:6c:5a:48:22:b1:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B5:24:7E:26:DF:DF:B9:BA:DC:00:C1:D4:A9:3F:C0:1B:87:84:29
            X509v3 Authority Key Identifier:
                keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:ab:13:71:0e:f1:7f:b3:b0:ce:8e:c4:c5:e1:8c:b2:47:
         96:9c:e6:84:b8:3f:ff:6b:a6:1f:74:67:a8:05:be:6a:2e:58:
         22:64:d9:df:1b:d9:a7:57:0d:ae:c4:47:7c:d6:fe:e9:9b:16:
         a9:e2:fa:84:f2:af:bb:3a:14:b2:b0:cf:81:5a:3f:f4:b1:a6:
         e8:40:6b:53:40:eb:eb:8c:23:66:18:7e:aa:07:14:a2:c0:f0:
         84:05:de:b0:a9:99:59:fa:6f:4b:0c:35:46:84:4e:c4:86:f7:
         af:a0:57:98:e2:75:b8:ab:f7:1d:fc:db:86:40:18:03:98:6b:
         d4:b6:e5:0e:0b:54:df:55:77:19:27:69:63:a4:ee:0a:2b:a2:
         93:a2:30:3d:3b:df:bd:2d:b2:66:c5:3e:18:b7:5b:d9:b9:e9:
         70:fa:5d:d9:22:35:a9:78:4a:38:5c:1a:58:3a:00:53:8c:5c:
         ed:54:81:4d:e0:ea:3a:1a:99:c5:e1:07:10:9b:7a:64:3f:09:
         52:ab:b9:c4:cb:67:c4:a5:28:be:44:d2:cb:39:c0:84:12:e7:
         56:eb:7b:44:93:f6:e1:6a:7f:57:97:03:93:00:31:3a:bf:26:
         ad:64:29:6b:e2:0b:63:ba:06:50:7a:44:88:28:c8:fd:68:3f:
         84:c0:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org