Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
File:                     64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json)
Hash identifier:          9thCPrc1BQaLD9uhwZRXNwQpGBGv+s0/z2zhz9oMJH8=
Subject key identifier:   92:FB:91:A6:E3:44:33:8B:42:73:8D:85:60:2B:67:C5:E8:E5:3D:F4
Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5
Certificate issuer:       /CN=64848BA7A76415C6458AAC267B0A57658022C3C5
Certificate serial:       30D9B44CC07F60031C3610D69BDB21F1CCD399A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
Manifest number:          01E8
Signing time:             Thu 21 Nov 2024 23:22:14 +0000
Manifest this update:     Thu 21 Nov 2024 23:17:14 +0000
Manifest next update:     Mon 25 Nov 2024 10:59:14 +0000
Files and hashes:         1: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: MoleqmTTlTOueZty6VEIkfNkUFvGo2//U/VTqEVf9Lo=)
                          2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: qSBErkc+YmE96+YNp3stuWS6LNkBq7zVOQLn2fcpQx8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl
                          rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d9:b4:4c:c0:7f:60:03:1c:36:10:d6:9b:db:21:f1:cc:d3:99:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5
        Validity
            Not Before: Nov 21 23:17:14 2024 GMT
            Not After : Nov 25 10:59:14 2024 GMT
        Subject: CN=92FB91A6E344338B42738D85602B67C5E8E53DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:5e:d9:27:7d:a9:3f:c3:c3:b4:fa:84:ee:
                    dd:40:e1:4a:89:1c:09:73:81:66:1f:2a:26:78:46:
                    c2:43:e9:ca:b3:78:15:aa:e7:95:f4:60:f2:fd:1b:
                    9c:6e:bd:c6:72:e2:6e:44:32:2d:c8:0e:e8:55:23:
                    5e:8d:82:87:d2:bc:d8:ee:e6:44:d6:d3:bf:5d:ca:
                    40:8e:fb:0a:14:7a:32:d4:3a:9b:d4:2f:3b:8f:fd:
                    e5:f4:89:36:e6:21:e0:6f:f7:ef:80:61:ea:bc:0c:
                    f4:fe:35:35:59:70:fb:d6:47:89:54:15:94:29:a3:
                    23:46:b4:85:b1:a9:e8:7f:49:0a:ac:23:77:57:48:
                    88:c7:71:2c:52:39:bb:2b:79:36:14:c1:82:bb:7e:
                    1f:34:dc:99:16:54:a9:79:8f:2d:1d:31:29:43:bc:
                    fb:e7:15:e5:94:02:80:c0:f4:13:73:81:8a:da:ff:
                    b7:53:d0:9b:f2:d5:45:23:d8:93:da:9a:f9:cd:3f:
                    70:c3:75:f3:22:80:6d:b2:97:ca:86:d2:eb:74:e8:
                    8e:fb:3b:64:c9:cd:8f:c1:e9:ae:64:f0:22:99:8e:
                    51:eb:30:4f:94:40:cf:86:51:bc:03:85:76:93:25:
                    f6:8d:be:b3:7e:bc:4c:de:0c:0e:df:3a:8a:60:7e:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:91:A6:E3:44:33:8B:42:73:8D:85:60:2B:67:C5:E8:E5:3D:F4
            X509v3 Authority Key Identifier:
                keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:30:26:dd:cd:b1:0b:f7:e2:79:fb:37:f5:75:87:dd:f3:3d:
         44:42:e0:7b:b9:7e:d5:9b:3e:fe:b1:71:3c:92:26:4f:d9:75:
         25:76:18:7a:2e:2e:54:65:1b:c3:c7:fb:ba:15:2c:bd:4b:a9:
         fc:89:9b:ac:8d:97:7b:fd:55:c8:4f:5b:be:ae:7e:4d:a3:cd:
         7c:72:7f:fe:47:19:88:3f:0e:8a:b6:b1:38:07:9a:67:73:aa:
         77:fb:1e:63:49:5d:dd:fd:2f:1f:e2:29:84:3e:f2:16:51:68:
         ac:b1:f7:8f:8d:df:84:f7:b8:55:68:58:33:bd:9a:d9:07:f6:
         8d:2a:c8:49:55:ee:b2:f8:d5:8b:77:b4:59:c9:56:19:40:cb:
         d0:d1:25:6b:2e:d8:db:15:1d:34:3f:d1:90:8e:a7:a0:99:4c:
         ec:28:37:e2:3b:ca:41:f5:54:38:1c:a2:1d:c9:04:21:55:57:
         e9:7e:dc:1d:e4:d5:08:42:2d:bf:40:c3:86:d0:6c:c0:7f:92:
         b5:12:cf:17:8a:37:46:c1:fd:54:1a:16:31:0b:1f:fe:1a:3b:
         e2:9d:3d:00:ef:db:39:9d:5d:de:0f:20:2e:76:d9:a6:35:6e:
         56:ee:cf:ad:5b:a7:43:69:33:00:0f:62:2c:47:f6:82:10:ec:
         31:81:0b:07
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMNm0TMB/YAMcNhDWm9sh8czTmaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4
MDIyQzNDNTAeFw0yNDExMjEyMzE3MTRaFw0yNDExMjUxMDU5MTRaMDMxMTAvBgNV
BAMTKDkyRkI5MUE2RTM0NDMzOEI0MjczOEQ4NTYwMkI2N0M1RThFNTNERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mV7ZJ32pP8PDtPqE7t1A4UqJ
HAlzgWYfKiZ4RsJD6cqzeBWq55X0YPL9G5xuvcZy4m5EMi3IDuhVI16NgofSvNju
5kTW079dykCO+woUejLUOpvULzuP/eX0iTbmIeBv9++AYeq8DPT+NTVZcPvWR4lU
FZQpoyNGtIWxqeh/SQqsI3dXSIjHcSxSObsreTYUwYK7fh803JkWVKl5jy0dMSlD
vPvnFeWUAoDA9BNzgYra/7dT0Jvy1UUj2JPamvnNP3DDdfMigG2yl8qG0ut06I77
O2TJzY/B6a5k8CKZjlHrME+UQM+GUbwDhXaTJfaNvrN+vEzeDA7fOopgfusBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkvuRpuNEM4tCc42FYCtnxejlPfQwHwYDVR0j
BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3
NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy
QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3
MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3
NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHQwJt3NsQv34nn7N/V1h93zPURC4Hu5ftWb
Pv6xcTySJk/ZdSV2GHouLlRlG8PH+7oVLL1LqfyJm6yNl3v9VchPW76ufk2jzXxy
f/5HGYg/Doq2sTgHmmdzqnf7HmNJXd39Lx/iKYQ+8hZRaKyx94+N34T3uFVoWDO9
mtkH9o0qyElV7rL41Yt3tFnJVhlAy9DRJWsu2NsVHTQ/0ZCOp6CZTOwoN+I7ykH1
VDgcoh3JBCFVV+l+3B3k1QhCLb9Aw4bQbMB/krUSzxeKN0bB/VQaFjELH/4aO+Kd
PQDv2zmdXd4PIC522aY1blbuz61bp0NpMwAPYixH9oIQ7DGBCwc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org