Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
File:                     5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json)
Hash identifier:          SXDUA+oCgmcuF12z+1sYpma1QvxFPac4gIUnPSn6eis=
Subject key identifier:   A0:3F:AC:A5:99:51:77:AB:DB:E5:DE:12:AE:8B:D7:F9:B8:81:BD:98
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       7895E8F5EFFAD8140762A4A413E4E056DC25C67D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
Manifest number:          0127
Signing time:             Thu 21 Nov 2024 14:01:23 +0000
Manifest this update:     Thu 21 Nov 2024 13:56:23 +0000
Manifest next update:     Sun 24 Nov 2024 21:03:23 +0000
Files and hashes:         1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: 3A078AA014GsGF4GIsembbWsz4KNNOqKrGR40shJYsA=)
                          2: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: j3c7OitxuKvIpFGS9jKK2X/pOGi+fYKXTMgr7Tiyp6A=)
                          3: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: WMAKfdW0olIi1Xr61mEmycN2hri5WJZoY66/9dOBn5o=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:95:e8:f5:ef:fa:d8:14:07:62:a4:a4:13:e4:e0:56:dc:25:c6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: Nov 21 13:56:23 2024 GMT
            Not After : Nov 24 21:03:23 2024 GMT
        Subject: CN=A03FACA5995177ABDBE5DE12AE8BD7F9B881BD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:4b:65:e0:61:3f:7c:47:d5:c3:03:52:0d:
                    95:62:40:60:1c:fb:31:d3:86:2c:40:a1:a2:53:3d:
                    05:95:67:3f:78:b5:aa:ba:ec:b2:62:9d:ac:09:c2:
                    f3:cb:7b:0d:79:46:44:37:22:bc:aa:87:fd:d5:90:
                    75:70:62:4f:61:53:c3:cd:eb:95:dd:89:6a:6e:25:
                    66:6f:8a:38:ab:93:c1:07:84:89:56:47:54:8e:4a:
                    32:49:ab:15:59:3e:08:11:82:98:1f:f1:f3:85:ba:
                    bb:88:12:cc:62:8c:b3:bd:45:57:e9:a9:66:6d:b4:
                    5c:dd:20:a6:89:5f:71:6b:ce:fd:c2:0b:6c:1b:dc:
                    7d:54:9e:9e:64:46:bb:28:5b:7c:f0:0f:fe:89:69:
                    3c:af:0a:27:13:9a:88:71:e7:bc:fa:1e:9c:bd:5b:
                    71:25:5d:c4:ac:59:40:7d:e5:34:0b:8f:4d:33:ac:
                    17:b5:e6:47:d1:60:39:32:55:30:e5:32:1d:f9:c5:
                    9b:ca:ba:bd:0c:21:f2:02:bf:06:ba:ee:b6:17:2d:
                    d6:d9:1f:33:f7:9d:dc:11:0d:c4:9b:58:b8:b9:03:
                    90:3a:e5:2b:cc:63:8b:d9:80:5f:7b:e1:f9:2f:42:
                    37:8e:10:d9:bd:ff:ea:ca:6d:f2:e4:24:31:b0:72:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:AC:A5:99:51:77:AB:DB:E5:DE:12:AE:8B:D7:F9:B8:81:BD:98
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:69:f5:ec:89:45:31:58:37:e7:5d:fb:46:95:26:bb:3d:ef:
         6b:9d:9c:8e:55:6e:2f:ce:bf:90:8f:9e:ed:ca:81:36:15:fe:
         3d:76:3e:8f:93:3d:36:d6:11:55:c5:51:a6:56:aa:9f:b1:b2:
         d9:c4:ec:a2:b7:5f:63:89:a2:3d:d5:21:4a:5a:0f:01:89:33:
         f9:65:74:dc:68:d2:4a:31:30:ff:90:c5:23:b0:a0:27:b3:17:
         95:3a:81:3b:65:bf:bb:6a:1a:1f:51:08:e9:87:43:84:52:d6:
         9d:49:46:70:13:e2:ad:01:c1:ab:ea:51:69:8c:72:ae:82:d3:
         63:ad:15:70:b9:8a:02:7f:33:42:ab:15:a5:31:6b:55:04:8f:
         05:1f:ba:c8:8a:11:2b:48:4f:70:80:52:4f:2d:b0:46:54:e8:
         97:c6:63:3b:f3:63:39:8d:8c:ba:6b:e8:c5:56:2f:a5:b8:1e:
         1a:4f:2c:f2:2a:07:1d:b4:af:73:ea:51:e4:6a:44:77:7a:74:
         eb:14:e1:b9:f8:08:bd:2e:56:d4:f1:84:24:fb:e3:4c:f0:ae:
         df:54:69:1c:38:94:5e:4e:cf:60:36:b5:34:ed:88:10:6b:07:
         35:02:38:ae:23:83:cd:93:03:d6:fe:8c:2b:67:56:3e:63:84:
         ce:40:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org