Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
File:                     722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json)
Hash identifier:          ay00mVDDEIRie8rnfIsU6wDCJTH9JRzEt9G5pJ5xeIw=
Subject key identifier:   D7:67:31:62:52:02:2E:5E:5D:A6:54:65:82:09:73:BB:CE:E2:E5:66
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       62EE61B7535DF7151A8D041930C32C74E70917D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
Manifest number:          0141
Signing time:             Fri 22 Nov 2024 12:11:53 +0000
Manifest this update:     Fri 22 Nov 2024 12:06:53 +0000
Manifest next update:     Mon 25 Nov 2024 12:14:53 +0000
Files and hashes:         1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: RLqDYSROiX/iW1iDgVMZse5cz8Qfa0jUC/3cQYMHSe4=)
                          2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=)
                          3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: NnyYzXzSxdzxhfpnF1FgqkZdDhlXPV+OeQvDx0/A5o0=)
                          4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: y7PMYAIFmxnzMdE0N9b5mJiefI/ryB5sD6DxyVuFDiY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:61:b7:53:5d:f7:15:1a:8d:04:19:30:c3:2c:74:e7:09:17:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Nov 22 12:06:53 2024 GMT
            Not After : Nov 25 12:14:53 2024 GMT
        Subject: CN=D767316252022E5E5DA65465820973BBCEE2E566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:db:33:82:c4:08:c1:ab:cc:8f:c6:46:94:
                    e6:cb:e2:8d:91:97:36:69:e8:f6:55:68:92:6e:df:
                    74:f8:f5:c9:7f:5d:73:23:1c:c4:aa:07:8f:22:1c:
                    68:40:f4:75:3e:64:62:5b:41:50:2c:7e:2a:f8:f7:
                    30:e3:74:20:69:69:8d:1a:a6:fc:ae:4c:50:39:08:
                    7b:d7:93:a0:e2:9e:43:0b:b5:b4:9d:f7:1e:46:a2:
                    94:9f:8f:dc:2e:ff:b7:bd:d8:c6:f3:28:b1:02:70:
                    cb:eb:60:af:75:a8:1e:d0:65:83:49:29:55:e1:39:
                    1b:62:ac:e9:50:00:d4:4f:db:24:e9:a2:bb:15:b4:
                    fd:16:18:9e:2c:eb:ed:f4:96:88:a2:f5:07:46:7d:
                    2f:10:9c:87:fc:1b:b0:7c:e7:5d:20:4e:8e:c7:ae:
                    10:f1:88:68:56:38:70:91:23:7f:e3:3e:a8:20:1d:
                    39:55:32:55:ff:a6:11:c4:90:cf:d9:df:3b:e2:52:
                    3d:44:31:45:f2:2b:a1:5c:c5:59:4c:58:4e:a8:20:
                    2a:41:07:a9:e6:b8:79:28:31:54:93:c7:25:b5:a1:
                    52:6c:93:f9:dc:0a:5b:dd:cf:ee:fd:eb:9c:14:74:
                    60:67:4e:5d:a9:f1:b2:dc:57:dc:2d:d3:d5:56:d6:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:31:62:52:02:2E:5E:5D:A6:54:65:82:09:73:BB:CE:E2:E5:66
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:22:20:0f:61:16:d8:91:88:7c:ae:b1:42:14:fa:30:35:d5:
         04:82:21:6f:59:eb:31:a2:d3:c7:e9:8a:72:93:79:92:66:85:
         54:dd:aa:8b:4c:fd:b6:37:8b:10:f7:b2:dc:a6:fd:90:cc:aa:
         64:dc:b6:ae:1f:d3:43:66:a3:13:fe:b5:16:26:fe:35:d2:dd:
         05:1f:f2:02:a5:6a:8a:42:d9:cf:6f:ab:ef:9e:22:65:4e:42:
         01:80:4e:b8:4b:b7:0d:43:92:a9:36:4b:06:df:3d:e5:54:4d:
         ce:f8:24:3e:58:de:42:8e:5f:c4:9e:4a:2b:09:a2:76:80:36:
         cf:57:91:4c:1f:72:37:8d:97:41:f8:23:1f:5a:49:ff:64:72:
         d5:32:dd:25:98:45:ec:c5:83:7e:6e:b4:fd:19:19:19:6e:ba:
         12:c8:a7:13:e5:b7:20:8d:e3:68:05:1a:37:5d:73:c9:10:35:
         fd:87:9e:b5:f0:ba:44:a6:93:41:c4:82:53:f3:0f:7d:d1:f8:
         14:31:f3:55:13:bb:40:1a:7d:37:57:89:d2:77:2a:98:1f:d2:
         15:65:df:54:a3:02:ab:7e:21:f0:37:a7:08:c8:42:7d:06:aa:
         3c:92:57:31:a5:39:d9:7f:60:dd:19:52:d1:ce:5a:72:40:fb:
         d8:d0:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org