Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          xOKsOz5s+WhzsZ9ht2qlQq4Vu7JPiwunD5eInnKUoMM=
Subject key identifier:   E7:43:BC:79:CF:91:13:2B:F1:A8:5C:89:D9:C1:05:FB:9C:77:FF:BB
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       2B3B0D1F2DD41A50E7A312FB44CFAE7B961C4109
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          02CE
Signing time:             Thu 21 Nov 2024 00:42:00 +0000
Manifest this update:     Thu 21 Nov 2024 00:37:00 +0000
Manifest next update:     Sun 24 Nov 2024 03:30:00 +0000
Files and hashes:         1: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: aSmELMjbVbrJYcy5WtWo7WJdkIRQbL5hFTNoqcM9u0M=)
                          2: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: cnBSWq1WLG6w1aYMzM7AP79gan6sEM7gvU+1j7GxjsI=)
                          3: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dwbWFoPjhBYm0ICnwf9B5oheJbD6wcLhrl82urARAfs=)
                          4: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: 5dD8EGyHNmiFesdS/SYN09R1SP4j1b0qW/Ps1YwTmj0=)
                          5: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: f1VfutGWK+MmJIOFReGmSZ7CZFeUlYEkRNGpDfRCgtg=)
                          6: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: 286KYuIyb4bfw/6gsV2UX49JI0TQ4UjnfosBxVwHmEU=)
                          7: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: hMpLLtpO0oKLTbRKOkSHJXF1x8epTWtVi5DYgjm9EB0=)
                          8: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: qwYhWre2jUxxbf1iiwlBxUAXUDCHQW/mg82Aj0D9ySA=)
                          9: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: v5KX1icvJWNCbLzmbitXFe0DuvImFbQ1kbd/fQM4aLI=)
                          10: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: 0kVf8GpXZpL1PMSPUzRz/oXDktaONvVx68WdNeLShWA=)
                          11: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: y95B3NY3RXZzYL13rMMgNhTE08tIkXfckcaTOzD7GLs=)
                          12: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: cniuIY1LCT7CAFaIMPVwi1Spcg4vtQerVs1WPUcxU2Y=)
                          13: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6LTj/EfLo04qgpysgaD80PV6eg40XKfgvN9M6Cg9Ecc=)
                          14: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: C89Nj2SgtW/Dq6dpcLjR/Ja0X+mRfhCiSEVzBdp+lWk=)
                          15: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: XOJX4KCkQu5IrooRwgxTDccEtscZEDwf39FMK440o4I=)
                          16: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: /tGos7w3O3Cc2rEeSWTt2hXixFy8jLbVfKIMCGGSlCU=)
                          17: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: JOYeyaEFOhJ64FjhlHl91Nb9dqegO9BUrkdFkwuvAtI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3b:0d:1f:2d:d4:1a:50:e7:a3:12:fb:44:cf:ae:7b:96:1c:41:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Nov 21 00:37:00 2024 GMT
            Not After : Nov 24 03:30:00 2024 GMT
        Subject: CN=E743BC79CF91132BF1A85C89D9C105FB9C77FFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:7c:2b:91:2a:9f:c1:2e:2c:4d:15:63:a1:
                    b0:11:8b:e1:db:76:9f:c0:bb:41:8a:d4:9d:92:4d:
                    bd:b1:e0:de:b9:40:18:7e:bd:19:34:c8:ce:90:19:
                    5b:48:a4:82:8f:79:ae:ca:b3:9f:85:c0:ef:b6:dc:
                    2b:a6:44:34:cf:a2:70:b8:37:c6:c1:9e:3d:dd:31:
                    bf:25:a3:c9:43:d2:f3:a1:6f:8a:be:fa:c2:89:e1:
                    23:54:7d:76:02:b9:df:4d:a7:7c:e8:93:5f:9a:4c:
                    ea:da:2e:56:27:8e:0b:26:1c:fb:88:4e:be:f1:24:
                    49:a2:e0:40:19:5e:6d:4a:c2:1a:97:97:68:16:fa:
                    c8:1a:2a:49:96:1e:79:d4:25:59:70:18:43:99:c6:
                    c0:d0:3f:29:89:db:5f:2d:a5:71:e1:03:7c:8e:e8:
                    7d:f6:8c:95:13:47:73:1c:c9:24:b1:63:a8:44:e8:
                    ae:a6:99:30:cb:f3:b3:b3:b1:9d:1a:49:96:eb:cb:
                    66:59:a6:c8:6a:88:28:4e:e8:c0:ec:32:dd:f6:5b:
                    92:34:c7:70:a0:6a:e1:a3:ae:da:05:0f:c1:94:e9:
                    d7:cd:aa:03:57:3d:fa:cb:29:25:26:44:f5:76:2e:
                    a1:0c:2b:c6:a2:07:85:a5:a6:25:7e:22:0f:d5:14:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:BC:79:CF:91:13:2B:F1:A8:5C:89:D9:C1:05:FB:9C:77:FF:BB
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:88:9b:a9:a1:8d:b4:2e:d2:f7:c1:0a:3c:c2:b1:6b:db:97:
         81:08:ce:55:17:1f:a8:82:f8:2a:35:c3:80:74:63:b9:83:7a:
         70:c9:61:68:92:b3:41:a8:93:29:68:26:bb:4a:56:ef:66:f3:
         b9:b8:e4:9a:65:fa:b1:f0:f5:66:53:06:f2:1f:f4:a4:cf:b2:
         f8:ef:83:dc:e7:e3:f6:58:58:fd:84:38:36:98:ba:af:c2:70:
         70:eb:08:5a:28:8b:70:8a:b5:7e:20:ca:60:e0:b2:3e:b3:ec:
         e1:d4:a4:94:a6:d6:d1:9e:33:45:1e:88:49:11:0f:04:9f:87:
         72:e1:ed:21:74:6d:a7:52:55:d4:18:c1:c3:9b:40:46:a8:0a:
         01:cd:77:e9:ac:ed:99:85:70:e2:cf:52:0f:69:ec:04:63:63:
         aa:6f:f8:20:8f:22:13:a7:16:a5:fc:aa:46:8e:fe:18:29:ee:
         f9:a3:9a:19:32:63:89:0e:2f:db:9d:e1:e6:99:2e:f7:64:98:
         d6:30:4c:8f:bf:c7:5f:39:41:b7:69:1d:ed:0a:dc:06:c1:d5:
         aa:c9:c1:70:25:09:11:c0:96:e6:6d:0b:19:10:aa:e6:e6:9a:
         36:c0:bd:cf:4d:be:ca:e2:58:95:bd:3d:8c:9b:f6:28:36:0e:
         90:6c:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org