Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
File:                     98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json)
Hash identifier:          LSltzizqNN8QIDLE+mIHkCFDkMpFjfleAQ/fOjbwers=
Subject key identifier:   49:E4:A3:59:93:A9:22:0F:E1:0A:A1:C0:46:B8:49:FA:BF:53:66:3A
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Certificate issuer:       /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial:       5C0B2E4B949302502FF014A5A5CBC21F956DC75D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
Manifest number:          8F
Signing time:             Thu 21 Nov 2024 10:30:49 +0000
Manifest this update:     Thu 21 Nov 2024 10:25:49 +0000
Manifest next update:     Sun 24 Nov 2024 21:42:49 +0000
Files and hashes:         1: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: qR69PjV06HyJtE+IpgPjo5dSSmhw2+KME3vu4seuNzI=)
                          2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: TUlyBUmKoS7emfKRXRQUQK7YpBX6hhzbdyki5ZLjpVI=)
                          3: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: eZVPgWGbtRdIz5wN62xb4+qGdlqG3oBhV8LgeIV1Ju4=)
                          4: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: aoPmhOo2lxE9LPO1NFc5xx/iR8dBhA/U5fwNzf3UdOU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
                          rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0b:2e:4b:94:93:02:50:2f:f0:14:a5:a5:cb:c2:1f:95:6d:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
        Validity
            Not Before: Nov 21 10:25:49 2024 GMT
            Not After : Nov 24 21:42:49 2024 GMT
        Subject: CN=49E4A35993A9220FE10AA1C046B849FABF53663A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:93:28:e0:87:4a:09:a8:33:74:2e:18:e2:
                    18:86:ae:cb:a3:22:77:0b:90:6b:2f:4a:42:5f:00:
                    28:50:ca:63:8f:e4:52:72:08:14:40:c6:de:21:bd:
                    93:13:c9:3e:ef:59:5c:dd:2e:0a:7a:e2:cc:de:03:
                    56:31:3e:a5:be:e8:aa:72:3a:2a:9d:ea:80:8a:54:
                    5c:59:bf:13:29:a2:c2:f4:50:4f:7a:77:aa:eb:2e:
                    80:ab:d7:7d:43:d2:c0:83:00:16:48:e3:18:21:7b:
                    42:54:ed:a3:7d:02:f8:24:a5:cc:e9:9b:97:39:77:
                    f6:e7:f1:c5:21:cb:10:fd:ae:80:4e:c7:7b:b9:ca:
                    15:11:85:fc:7f:f8:a8:9a:25:f8:29:37:0d:17:6e:
                    bb:c1:7f:a7:f5:e9:38:bb:09:bd:2f:55:b5:13:28:
                    49:fc:f7:c4:19:b6:07:0f:ed:71:b5:cd:10:9e:fa:
                    4f:31:85:94:76:0e:ad:5c:d1:57:51:8e:42:52:7c:
                    db:ea:c2:e3:9f:9e:34:2c:ad:fd:fe:ea:6b:54:c0:
                    e8:7c:fa:1f:00:ff:db:09:df:51:99:0c:3b:91:e2:
                    c7:87:fd:43:a6:f2:66:f3:1c:ab:ae:34:b4:ce:58:
                    6f:50:5b:a9:f5:84:f8:c2:bc:56:43:0c:18:e6:32:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E4:A3:59:93:A9:22:0F:E1:0A:A1:C0:46:B8:49:FA:BF:53:66:3A
            X509v3 Authority Key Identifier:
                keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:72:f4:55:f7:82:5b:bb:5e:24:0a:b9:50:5e:09:75:fb:
         69:eb:49:29:47:87:dd:02:24:40:f2:70:12:b5:8d:37:fc:ff:
         0a:00:7f:26:ba:d4:dc:25:cb:f2:ff:0d:47:b4:cc:37:ef:7e:
         17:db:e6:1a:3e:5c:12:57:10:56:e4:bc:cd:2f:ca:16:4d:30:
         d5:1b:62:68:d0:a7:6d:37:c2:bf:a1:69:04:4a:70:ae:fb:53:
         ee:08:b3:5e:8b:51:9b:3a:c3:e6:d9:11:ae:41:62:cc:6e:c1:
         6d:a8:ba:d9:10:67:77:ae:0d:40:6d:d9:48:6b:78:ea:d9:b9:
         77:86:08:ea:e1:5f:1d:3e:0c:cd:ad:8b:96:02:a2:64:0f:02:
         6d:54:b7:fa:f0:96:2a:09:76:bc:a2:47:25:c4:a9:98:b7:2f:
         2f:4b:0a:60:54:1d:8b:e7:6c:83:78:83:6d:d7:69:3f:c4:30:
         23:2a:74:1a:2d:0c:0e:f6:cd:8e:7d:fd:96:53:c5:76:0a:f8:
         56:b4:cc:aa:fa:77:43:da:ee:78:aa:c8:a3:99:9f:96:14:e5:
         f7:5d:5e:95:ac:1e:e2:5b:3e:28:64:0d:ec:15:ef:25:b8:5d:
         ad:d7:2b:d5:03:c6:8d:4e:3a:a7:c4:98:fc:de:20:a2:a0:d3:
         fd:57:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org