Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
File:                     D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json)
Hash identifier:          ASkoL099GgCxxCazoo+67X6/vm8LC/fJ0WIX63XTEVw=
Subject key identifier:   A0:BF:AB:95:0A:E4:0F:08:D8:53:18:A2:F5:48:45:A9:08:A8:3F:85
Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
Certificate issuer:       /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Certificate serial:       0BC9D726CA634C0D3FF41C587A2E298A1210D7B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
Manifest number:          0163
Signing time:             Sun 24 Nov 2024 10:11:51 +0000
Manifest this update:     Sun 24 Nov 2024 10:06:51 +0000
Manifest next update:     Wed 27 Nov 2024 21:36:51 +0000
Files and hashes:         1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: XruL81aH+YN1ovypVRcmkN6zvYT5ojMoMI2ZZS2pPEk=)
                          2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: Ncqr66alESlvn4WZuzBcLnHkuCHXVgHEAGxMEQ4/Ft4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl
                          rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:d7:26:ca:63:4c:0d:3f:f4:1c:58:7a:2e:29:8a:12:10:d7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
        Validity
            Not Before: Nov 24 10:06:51 2024 GMT
            Not After : Nov 27 21:36:51 2024 GMT
        Subject: CN=A0BFAB950AE40F08D85318A2F54845A908A83F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:b8:7c:44:5b:a9:f2:bd:1e:83:12:82:56:
                    0a:fc:48:3d:fb:23:36:21:0b:a4:d3:e3:0d:c4:d6:
                    d7:55:29:68:55:fd:f5:ab:73:a4:18:02:5c:3f:bf:
                    27:ea:c0:fe:96:3e:91:4d:f6:89:ca:6a:d4:f8:de:
                    2e:d0:6d:88:d8:e6:99:a3:e6:d4:31:1d:8b:c9:86:
                    70:90:6a:63:e7:a3:46:18:7a:3b:7f:90:02:29:55:
                    f2:61:cc:72:db:9e:ef:08:af:ae:c9:c5:6f:47:27:
                    af:e1:b5:41:7f:ea:97:ba:35:85:ee:69:ba:bf:d9:
                    24:75:57:64:cb:f9:ec:ad:e6:e4:1e:3e:f0:9b:79:
                    a2:c1:64:0d:ab:d7:45:95:bf:2e:94:cc:fe:69:4d:
                    78:20:27:41:c7:28:be:b3:c5:50:0f:32:ba:51:db:
                    b7:47:56:9f:56:fe:18:9c:27:0c:86:ee:bb:e2:95:
                    6c:1c:f1:79:78:f5:33:0c:76:b7:7d:5e:b5:06:56:
                    7e:9b:cc:96:e6:f2:54:f8:30:9a:e5:ce:37:18:2b:
                    b5:70:29:9e:cf:75:c0:ef:05:04:7b:4d:62:23:03:
                    e6:c9:ef:e6:77:46:ed:23:52:3d:44:36:4d:b0:1f:
                    d0:6d:19:3b:29:38:5a:04:bf:03:fd:65:9e:b9:03:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:AB:95:0A:E4:0F:08:D8:53:18:A2:F5:48:45:A9:08:A8:3F:85
            X509v3 Authority Key Identifier:
                keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:86:98:a8:5f:c3:44:21:9c:02:13:ed:ff:d1:d5:bd:73:18:
         a6:d9:39:11:6d:62:90:b6:0b:c5:c2:54:99:53:ef:d2:e5:f7:
         c4:77:a1:27:81:ab:f8:c8:09:9f:50:20:14:37:fb:85:e3:c2:
         3e:5e:0d:76:90:a1:05:22:21:7a:b0:97:d6:08:09:d6:58:63:
         e3:ce:10:4f:73:5b:0e:f0:7b:2e:00:f7:42:50:3d:3e:af:3d:
         eb:25:f2:ac:d4:06:d8:a5:b8:10:3d:3b:3e:a9:69:22:a2:8a:
         8d:89:d3:04:1e:fb:90:cb:81:a8:cc:1c:51:07:80:ae:9c:0c:
         9d:3e:ff:a4:46:e2:7e:e5:93:00:57:7d:6a:a2:b3:0b:96:4a:
         96:fd:c2:f8:51:b0:fa:79:f1:c2:30:42:67:48:9e:6f:0c:8f:
         6d:d8:11:b9:7d:0c:d8:43:cb:c6:d7:4d:bd:a9:12:4c:39:dc:
         93:0c:ef:51:b3:2c:70:f6:1f:ca:b1:e6:e9:28:21:c1:6e:ec:
         9d:69:45:43:8b:0b:a8:31:28:81:be:84:b8:2f:fe:c3:aa:d5:
         42:9d:f8:54:da:60:f4:ef:a2:2d:28:f5:87:cf:a0:d6:d9:9d:
         bb:db:0b:2a:17:53:3c:b8:6d:14:8b:83:49:cb:7a:2f:16:59:
         a8:24:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:25 2024 by rpki-client on console-ams.rpki-client.org