Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
File:                     3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json)
Hash identifier:          Di94VF2FzwP0x8cG6PRCF4cX4+vDdt8EcKu7ZubR+4s=
Subject key identifier:   13:D7:28:85:ED:AE:A9:66:46:0A:5C:E5:08:89:23:DF:87:E8:B7:7D
Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0
Certificate issuer:       /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
Certificate serial:       4E12735FCC334194205FAF3E66686C6EC543CDB2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
Manifest number:          0481
Signing time:             Wed 20 Nov 2024 13:21:25 +0000
Manifest this update:     Wed 20 Nov 2024 13:16:25 +0000
Manifest next update:     Sat 23 Nov 2024 23:47:25 +0000
Files and hashes:         1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: bYiP/gT3tssmEshWDR+uWvBdHdyDVEshU6H8/AUYQ8o=)
                          2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: 3siQItReSLgp72x49+6geGX19EK/9wKla/yHtMkaXMI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl
                          rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:12:73:5f:cc:33:41:94:20:5f:af:3e:66:68:6c:6e:c5:43:cd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
        Validity
            Not Before: Nov 20 13:16:25 2024 GMT
            Not After : Nov 23 23:47:25 2024 GMT
        Subject: CN=13D72885EDAEA966460A5CE5088923DF87E8B77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:97:fe:8e:58:30:7a:1d:4a:a1:6f:44:1a:
                    8b:60:26:24:99:52:70:d9:e7:21:b3:cc:7a:fc:9e:
                    b0:0b:ae:e0:d4:4e:18:ac:4f:60:ab:dd:70:b1:ec:
                    a2:ac:8d:17:5a:fa:8b:89:5c:3c:8b:91:89:6a:66:
                    f8:a5:77:25:73:e7:d8:70:e4:62:9d:b3:22:f0:59:
                    f8:61:21:cc:9a:9b:7e:63:7c:f5:e3:d3:23:57:ef:
                    b1:88:0b:30:38:1a:ca:a4:ab:63:a2:d5:1c:ad:13:
                    34:41:83:af:8f:4a:6c:96:20:b8:26:e2:97:99:1a:
                    44:7c:00:b3:21:6a:18:cc:e5:e1:c9:8f:8c:9a:90:
                    ea:63:d0:59:44:b3:f3:96:8a:9d:d2:b5:e5:86:94:
                    99:c0:6b:d4:29:3a:59:4c:ea:87:a7:6b:2e:55:e9:
                    62:88:14:d2:f0:7b:cc:02:e6:26:b1:10:a3:1f:81:
                    a2:01:6d:ac:8d:25:61:93:f1:0f:f5:3f:1e:a5:ff:
                    a0:f3:53:ae:f8:7c:9a:cb:44:91:6c:9b:90:09:c6:
                    c1:60:88:8c:08:cf:83:53:f8:d7:3a:fe:8f:b8:5d:
                    08:c6:93:8d:8b:7e:bf:03:3a:e9:cc:98:76:92:af:
                    da:f0:51:c0:84:a3:62:72:6b:3e:8f:b8:68:49:b5:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:28:85:ED:AE:A9:66:46:0A:5C:E5:08:89:23:DF:87:E8:B7:7D
            X509v3 Authority Key Identifier:
                keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6d:c2:74:68:ef:96:46:74:5f:e5:8b:71:88:f4:94:2d:49:
         4b:5e:2e:ce:fd:8c:c4:34:b6:ff:9d:2d:ae:4d:d1:cd:6e:3f:
         61:be:76:ed:42:26:97:2c:f3:1d:85:85:8e:2f:1a:07:e3:ea:
         7d:1d:31:e4:65:a8:71:e4:e9:eb:97:bb:b9:3b:67:6d:26:b0:
         70:7b:4b:db:93:c2:7a:24:d7:ab:86:ad:db:d6:53:95:78:e9:
         c5:2b:be:38:cc:1c:26:bd:28:49:af:5b:ff:e5:94:3d:db:ac:
         68:c8:6a:9a:3b:58:54:5d:7a:56:33:b4:da:86:b2:ad:a8:b5:
         cc:88:ab:e4:e8:94:18:cb:b0:9d:61:41:73:fc:90:f6:23:ae:
         35:aa:81:59:ec:fd:2b:f1:98:79:43:41:03:8f:b0:c1:78:2d:
         4b:c7:3b:be:1e:3e:5e:7c:45:7b:d3:ed:b6:07:04:c0:8e:41:
         18:96:26:97:82:29:93:b0:81:b7:d9:21:56:07:2e:65:5f:25:
         fc:f8:83:65:32:ed:39:db:da:54:16:b9:a1:75:4a:34:27:b8:
         e8:dd:3d:a3:ea:1f:7a:0e:37:b3:9b:de:46:d9:3c:84:8e:33:
         0d:d8:68:72:a2:e9:59:dc:e1:46:c1:e2:5a:96:23:26:0f:36:
         ba:b0:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org