Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
File:                     F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json)
Hash identifier:          aQIKGW/WXJT2NKvNn4ftNMW3VDhq6v5+oGMyjqYFBpA=
Subject key identifier:   4D:D4:17:1C:C9:DD:21:C4:09:00:39:EC:6F:C7:AC:A6:D8:AE:50:55
Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
Certificate issuer:       /CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Certificate serial:       45A3F70F5128045D337F9837E0BAEE2C21B4EEDA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
Manifest number:          0237
Signing time:             Fri 22 Nov 2024 22:22:07 +0000
Manifest this update:     Fri 22 Nov 2024 22:17:07 +0000
Manifest next update:     Tue 26 Nov 2024 05:48:07 +0000
Files and hashes:         1: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: 1lq3Os+lHijeI7SNkhWDWKvW5Iue6s8uAM2b95T8U58=)
                          2: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: A3nrXPms/b2Za7QqCXmwB3IJp6aoHIsVIkk2vcxJnaU=)
                          3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: Eonks7/PcVnEe5nWC7oyUORAAnVlF8altlaQuGdtuew=)
                          4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: k+0lo/8tgDYryUj0G/TWXB4hVN1YoOUM0tcBqk8iomk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl
                          rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:f7:0f:51:28:04:5d:33:7f:98:37:e0:ba:ee:2c:21:b4:ee:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6
        Validity
            Not Before: Nov 22 22:17:07 2024 GMT
            Not After : Nov 26 05:48:07 2024 GMT
        Subject: CN=4DD4171CC9DD21C4090039EC6FC7ACA6D8AE5055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:fa:d6:c9:9e:18:96:98:68:e7:ae:6b:8c:
                    25:63:89:2e:68:77:b5:c0:4b:0f:0f:1c:8b:83:9b:
                    24:0e:76:8d:2b:44:f3:53:d8:dc:f1:e2:b7:fa:4b:
                    b1:26:c0:41:b1:be:c4:75:8e:53:58:02:f3:cb:1f:
                    1e:c7:72:35:80:45:34:ba:ba:1d:f1:d2:e5:76:e1:
                    57:37:fa:99:99:3f:fe:fb:85:59:98:cb:68:cf:75:
                    92:25:2c:6d:ec:cf:9c:99:e0:5f:f6:98:d9:e5:10:
                    bf:8b:41:49:c7:d8:5c:4d:12:d3:c5:a8:38:d5:9b:
                    ba:f3:1b:ed:76:42:c0:77:cd:b4:e9:af:58:f9:65:
                    cd:82:0f:18:a1:58:8b:fb:73:aa:01:27:d3:bb:bb:
                    1e:30:50:f5:c2:41:55:1c:2b:05:69:5e:c5:0d:70:
                    e5:5b:7d:8f:ae:75:fe:4f:3a:45:ea:37:5f:17:81:
                    6f:d0:07:ec:0d:1e:a8:d3:bd:b2:aa:0b:e6:21:cd:
                    1a:e8:ca:09:8e:48:29:b9:99:91:bb:fd:43:47:bd:
                    aa:c1:eb:92:3f:5b:23:64:46:cd:81:c0:b3:ab:d2:
                    2a:ec:0c:26:3d:37:9e:88:94:ea:32:0d:c3:45:40:
                    53:bb:b2:3b:d3:a5:99:02:2f:d6:db:96:f0:37:4f:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:17:1C:C9:DD:21:C4:09:00:39:EC:6F:C7:AC:A6:D8:AE:50:55
            X509v3 Authority Key Identifier:
                keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:eb:97:da:0c:f0:1e:8d:b1:db:36:4b:1b:4b:9d:a2:79:
         02:69:e0:e4:7a:87:64:b2:a4:29:9f:d6:2f:26:36:98:a7:3f:
         3b:5d:66:1f:6c:ca:eb:e3:31:52:7f:7c:52:ff:3e:28:73:44:
         74:8b:5e:7f:37:49:56:32:f5:3f:e6:04:dc:74:95:c1:48:71:
         75:63:2e:62:3c:64:8d:a4:fd:e0:f3:17:9b:d8:26:b8:bc:56:
         7f:35:9b:53:13:16:97:cd:ea:bf:da:72:35:d9:46:b4:8e:00:
         75:f4:85:26:8e:f3:68:85:79:ea:d3:0c:00:e3:12:f0:11:e4:
         28:be:54:a4:cd:b2:f2:d4:e2:c0:22:f6:8f:0c:62:23:42:80:
         c2:78:85:b1:72:0e:21:76:18:e1:18:e7:59:62:b0:7f:14:7b:
         19:71:3f:ad:ec:9a:b5:f7:1b:79:b4:36:d4:0b:c4:e6:e2:20:
         83:61:a0:21:69:33:fe:e1:de:db:4f:c3:42:f4:34:91:ea:7d:
         be:53:96:47:a6:d1:70:5d:e8:15:07:13:d5:c9:36:e4:08:15:
         7d:7d:56:db:bb:cb:3d:65:0b:19:fc:53:57:5c:f9:f1:3c:e1:
         44:70:22:78:b0:3f:23:85:d5:8f:c6:4d:1a:78:40:7b:8d:41:
         91:61:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org