Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
File:                     4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json)
Hash identifier:          RfTa2kGRNcxUQotDg32V9+D6W89+axvkIfy3U2A3WH0=
Subject key identifier:   A4:79:32:7B:3A:BD:57:C9:4C:B8:B8:65:C1:B7:44:17:1D:54:AD:1F
Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12
Certificate issuer:       /CN=4FA812FE6A4A85F790CB2740EF08836883716912
Certificate serial:       3D4386452F45F92B4672175D7C4101D89B2AA47F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
Manifest number:          044F
Signing time:             Sun 24 Nov 2024 12:40:52 +0000
Manifest this update:     Sun 24 Nov 2024 12:35:52 +0000
Manifest next update:     Wed 27 Nov 2024 20:37:52 +0000
Files and hashes:         1: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: Yn889qn+UmANcGV2E/BpbVKfjHxMPufnshQv9gi1UsI=)
                          2: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: oMeLoSJYkTTS27i9zqAo4l29kftt3eMvJ5Fk3r50iQ0=)
                          3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: muMEUhzqqugv6Zj6iFpUQ9PcnrfD7MobXuiftjt5U7I=)
                          4: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: mE4j7gpBCxYCzmtebP+W7JvzIm1JCi0eQIsNW6AvGWY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl
                          rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:86:45:2f:45:f9:2b:46:72:17:5d:7c:41:01:d8:9b:2a:a4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912
        Validity
            Not Before: Nov 24 12:35:52 2024 GMT
            Not After : Nov 27 20:37:52 2024 GMT
        Subject: CN=A479327B3ABD57C94CB8B865C1B744171D54AD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:a9:79:88:14:74:5f:b7:42:d1:b3:a4:6e:
                    29:24:11:32:f3:24:a9:de:3e:b6:71:71:04:c3:30:
                    8b:e0:48:b4:b1:6c:8f:f9:6e:75:7a:b8:35:e7:fb:
                    ef:1e:a5:83:db:c1:37:b8:0d:6f:1b:c0:18:17:56:
                    2b:47:57:c9:e5:df:85:20:05:1d:93:65:99:47:78:
                    cf:88:cc:39:34:6a:ed:39:c5:c9:10:97:5e:f4:2b:
                    13:ce:26:40:df:23:a5:0b:c7:d7:48:b0:f0:ca:f0:
                    f9:10:b3:48:2b:f9:cc:81:91:0f:fb:7e:77:90:9b:
                    71:eb:35:61:d6:47:e5:f8:d9:b7:1e:d7:29:81:84:
                    83:7c:8a:e1:8b:86:aa:95:88:45:24:05:c6:3c:2a:
                    67:92:83:3d:60:fe:71:89:29:2f:ba:44:34:70:e7:
                    4e:86:4c:de:af:61:35:9f:f9:1e:9c:aa:e6:75:0d:
                    0b:2d:7e:ad:c3:ac:2f:db:b5:f8:fa:48:a2:50:8b:
                    d0:47:58:39:21:b3:62:08:33:d5:fb:59:0d:cf:56:
                    25:a4:06:ac:3d:9b:30:c6:cc:5b:fe:ad:d5:41:1b:
                    0f:d0:a0:17:39:52:f7:77:90:fb:cf:b6:44:32:94:
                    05:82:e6:60:43:f8:a7:6e:90:e0:f1:24:f3:5a:98:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:79:32:7B:3A:BD:57:C9:4C:B8:B8:65:C1:B7:44:17:1D:54:AD:1F
            X509v3 Authority Key Identifier:
                keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f8:48:cd:eb:0e:da:ff:a2:6e:38:15:dd:a2:b7:ab:f2:c2:
         01:3b:6d:64:57:87:f7:37:b0:38:14:45:28:53:0b:dd:0e:35:
         a6:36:a6:1e:4a:c6:34:a0:d1:77:34:87:89:91:ac:b0:66:28:
         62:25:be:9e:a3:62:3c:88:cc:8b:82:40:12:30:7a:8c:9e:31:
         85:b2:03:d7:44:11:4c:a0:4c:2d:66:f3:b3:a1:9d:5a:c5:46:
         14:82:89:91:2e:0c:9a:02:cd:95:96:fe:a1:83:8b:78:52:9f:
         15:48:d7:36:ca:0c:d8:2c:70:f4:9b:be:35:5e:5c:50:a7:1f:
         be:be:b6:a7:bc:70:89:60:e5:c1:1e:a0:b5:f3:f7:13:46:c8:
         da:60:09:17:8e:65:8c:b4:38:29:12:67:9b:0f:8d:16:b1:01:
         b2:b5:99:87:7e:7e:e5:6a:7a:c6:47:a4:d8:0a:9f:41:5b:bc:
         11:2a:01:1a:86:53:d9:8e:96:b9:85:5f:44:94:c3:8d:af:21:
         04:76:21:d5:1c:cc:49:0e:a4:e4:5b:79:ca:eb:61:17:b0:fb:
         34:a2:b6:4e:05:64:13:5e:2f:ee:01:fd:4b:5d:7f:47:35:76:
         77:59:6e:15:ec:f1:70:bf:7f:bc:e5:ae:3c:2d:3a:1c:4e:ba:
         73:4c:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:09 2024 by rpki-client on console-ams.rpki-client.org