Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
File:                     4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json)
Hash identifier:          JihQeUwWzOZihr1u7LqjfJypC7Bsvq/N6lfCbkTe+/g=
Subject key identifier:   39:33:97:02:25:40:7B:D1:36:E9:3C:C3:29:67:F7:96:09:FB:E4:7C
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Certificate issuer:       /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial:       3A7029BDB623A821F2606FFF8193D0D6C7161ADC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
Manifest number:          032B
Signing time:             Thu 21 Nov 2024 21:40:01 +0000
Manifest this update:     Thu 21 Nov 2024 21:35:01 +0000
Manifest next update:     Mon 25 Nov 2024 09:12:01 +0000
Files and hashes:         1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: vS6/EEtMQVT4K3YP4R6xoIVUl5MVwEjWaihe/UDhtsg=)
                          2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: nfF6yza8WaHmO48+Z0ivbgJKOpA/mJ1TCo6EtEhvGDc=)
                          3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: oXF8+YFdcm9cYBe2kMQLocV+o9Vq4WvNgvO4uFLK2SY=)
                          4: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: WG4LHMRnkhHXtdKjIrGFVHxC5IOAtgwvtogwyjP7rAI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
                          rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:70:29:bd:b6:23:a8:21:f2:60:6f:ff:81:93:d0:d6:c7:16:1a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
        Validity
            Not Before: Nov 21 21:35:01 2024 GMT
            Not After : Nov 25 09:12:01 2024 GMT
        Subject: CN=3933970225407BD136E93CC32967F79609FBE47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:ef:0a:6c:23:44:7f:66:17:7f:95:2e:32:
                    f9:9a:45:b8:e6:f5:2b:53:2a:2a:49:80:f3:28:53:
                    bd:93:7a:20:80:b6:88:33:73:62:8f:f7:1d:a9:41:
                    f6:f1:94:d3:de:d5:87:11:ca:4d:59:0f:fe:a7:aa:
                    d3:b7:2a:44:f1:b7:a6:92:e8:25:2d:77:8b:ae:34:
                    95:41:c5:6c:b9:3c:64:28:ed:43:dc:c2:5d:6a:87:
                    c0:db:c3:ac:4d:9a:9a:93:15:7f:d5:a3:86:2d:c0:
                    ec:81:ca:83:fc:81:75:e7:66:bd:ae:9e:f4:c7:2d:
                    90:b9:e0:8b:ce:00:a2:0c:af:61:0b:d8:d7:b8:f8:
                    1e:8f:4d:5a:a0:ec:b4:60:99:0e:9f:1e:b5:e5:b7:
                    fe:bf:15:32:4e:f7:1c:cd:55:e9:ec:27:3c:bd:71:
                    54:e1:4a:6c:f6:18:e0:e1:bf:ca:34:c3:26:26:92:
                    a8:a2:fb:d2:0d:a4:b4:34:7b:d7:56:88:73:36:d7:
                    82:ee:1b:4f:66:fc:8f:ac:48:9e:8a:1b:67:81:00:
                    2a:41:0b:09:1c:3b:c8:9e:03:b8:e5:ac:8e:dd:b0:
                    85:10:43:af:6c:6b:19:fa:25:13:32:15:de:0a:79:
                    5c:e5:7d:20:67:54:8e:b1:97:88:6d:82:19:cf:3f:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:97:02:25:40:7B:D1:36:E9:3C:C3:29:67:F7:96:09:FB:E4:7C
            X509v3 Authority Key Identifier:
                keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:f0:b2:1a:63:35:40:95:85:3f:dc:a0:fa:94:3c:08:3b:
         0e:2f:44:f3:bb:11:03:04:94:b0:e3:36:84:64:35:4b:c4:11:
         30:43:d4:75:54:b6:f1:79:56:b4:37:84:9e:c6:80:74:32:b9:
         c9:d0:f8:05:ec:0b:3e:0b:75:f9:5f:d2:9f:63:c7:55:ab:b0:
         97:62:d3:ca:b3:b6:9f:22:20:eb:c8:c7:fe:ba:a2:d1:2c:3b:
         5c:9c:a9:6e:a4:a8:d6:09:ed:ed:2b:6d:83:38:45:e4:4d:4e:
         4d:b6:05:35:dd:82:74:4c:8b:ba:ba:96:52:1f:04:d1:09:bb:
         37:d6:e2:c8:60:bb:bb:17:3d:ac:89:ae:8f:89:a3:51:cb:43:
         ab:8b:ae:86:65:42:09:a9:0f:ba:82:7e:f6:93:e2:39:32:f6:
         61:35:10:e9:1e:eb:98:c6:9b:68:11:28:6b:63:85:3f:3b:bc:
         c0:a7:9d:ab:0a:31:a8:de:41:e2:3c:ff:3a:7b:7a:ec:f5:ae:
         94:31:ca:9c:96:f5:ed:9c:b1:34:09:4c:ab:5a:19:98:ae:d1:
         34:a9:ff:54:06:ce:0c:e7:ed:f6:d6:0e:9f:24:75:0c:98:cb:
         ba:39:e3:91:ac:90:41:fc:ae:2b:ce:d6:bc:b2:8e:90:e1:5b:
         a3:15:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org