Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
File:                     064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json)
Hash identifier:          RoIr4Y8njfs3M/4y3/lCcDbiSDypFaJ5IaiZ4DE6aq8=
Subject key identifier:   A0:FE:93:E4:C3:EE:7E:0C:6D:7E:B5:E3:0D:E7:EA:CB:93:25:72:22
Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37
Certificate issuer:       /CN=064A8F9FBD487AB04370A31B7D603B27E6674937
Certificate serial:       54B872D287C05CF164B7F002010FB4B38317E2AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
Manifest number:          FC
Signing time:             Sun 24 Nov 2024 10:42:02 +0000
Manifest this update:     Sun 24 Nov 2024 10:37:02 +0000
Manifest next update:     Wed 27 Nov 2024 13:17:02 +0000
Files and hashes:         1: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: UY6qWdPxznQdw1UQm9yf5GU3dWuf7sMTmmJrD5PQUfQ=)
                          2: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: I8C1s7AwytoZeFwVAIfV9U4FINxgteczcHOALBPtd1Y=)
                          3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: Kmqb++idLLWEP7CllonNLvqsz87GuMLUP6nxuFOoMvM=)
                          4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: p/PG7M6bvmcXfVdmsw48vkWAa7JqlT1k7HjqxXEwBA8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl
                          rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b8:72:d2:87:c0:5c:f1:64:b7:f0:02:01:0f:b4:b3:83:17:e2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937
        Validity
            Not Before: Nov 24 10:37:02 2024 GMT
            Not After : Nov 27 13:17:02 2024 GMT
        Subject: CN=A0FE93E4C3EE7E0C6D7EB5E30DE7EACB93257222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:fe:ae:53:b2:7a:e1:d8:e3:e6:39:f8:06:
                    e4:bd:d5:5c:18:7e:03:b0:86:8d:a4:71:0d:40:d3:
                    1d:39:67:c0:01:25:3f:08:a6:97:32:e6:15:e7:03:
                    b4:e7:86:50:4c:27:28:24:ca:89:ae:47:ab:d4:eb:
                    8f:37:dd:99:72:ff:fa:4a:36:6a:d0:23:62:84:a8:
                    fb:40:46:a0:35:5d:3e:d3:10:f9:d9:f8:7c:46:3b:
                    ec:a3:34:d8:4f:f2:4a:a6:fc:a2:5a:52:52:31:16:
                    fd:23:72:54:e0:fa:f5:d2:41:9a:98:47:e7:62:3d:
                    cc:cc:81:d6:d9:3e:0b:df:81:2f:58:c9:aa:1e:f2:
                    78:b8:2d:47:c3:01:d5:67:f2:7d:fc:69:a2:a6:b0:
                    e1:cb:dd:9f:7c:c2:3b:57:4c:a6:aa:6e:cf:d0:e6:
                    ce:60:c9:d1:20:b4:08:23:a0:bf:03:cc:45:62:60:
                    c5:15:63:8e:f3:95:d2:fb:02:47:64:00:0a:07:2f:
                    cd:4e:fc:67:f2:f7:aa:b1:74:0f:c5:9a:44:fa:65:
                    08:7b:f2:d0:96:78:a4:a3:3c:70:ff:04:ca:8c:3e:
                    53:65:3c:2d:39:07:a7:b7:e2:0f:4f:8b:64:73:32:
                    46:1d:47:50:ae:b9:bb:5d:60:ff:78:91:5c:cd:69:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:93:E4:C3:EE:7E:0C:6D:7E:B5:E3:0D:E7:EA:CB:93:25:72:22
            X509v3 Authority Key Identifier:
                keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:f7:04:35:6d:04:04:93:98:46:cb:d6:71:13:3e:73:01:
         27:e1:c8:28:ba:1f:49:72:ca:00:8c:35:70:bb:d7:bd:e4:a0:
         49:7e:f6:38:2a:21:a4:a9:54:dd:d8:c1:1e:8c:45:94:67:dc:
         46:b9:ea:91:39:08:11:ff:3d:e2:6f:03:d8:0d:ee:4a:66:61:
         66:27:ce:a9:c4:10:5e:6a:20:25:5f:b7:69:be:e7:2f:54:1c:
         84:37:df:7a:9c:2f:c2:19:01:ee:7d:67:31:99:78:e7:af:51:
         23:64:03:a4:0d:1f:0c:46:9f:35:fd:a0:4b:e9:b2:75:db:93:
         15:39:22:29:79:75:91:04:52:cf:80:2d:45:01:ef:11:d0:e9:
         af:e0:47:fb:e8:4d:10:80:6e:e5:ac:c8:a8:18:d3:f5:0b:aa:
         58:12:15:68:b7:59:c9:ed:cd:70:85:fc:e1:6e:a6:0f:fc:f2:
         b7:c7:e0:1b:ba:9a:94:0d:10:c3:7f:d4:68:c8:3e:9b:88:dd:
         af:4b:20:7e:e6:28:b2:db:85:fd:f6:7d:88:d6:22:a3:54:f2:
         1e:9f:3c:27:3a:34:b7:5e:e5:2c:eb:cc:a9:eb:0a:56:e4:a7:
         0d:94:f4:69:75:9f:38:64:b2:14:cd:05:bf:d9:bc:00:3e:9a:
         ef:b3:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org