Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
File:                     B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json)
Hash identifier:          l2plxZuR1Vk7yGaPIZZTIGZXK92+Xpy1gl9QB8IGQFQ=
Subject key identifier:   58:A5:5E:BC:16:3A:70:63:4E:5B:C9:0D:9D:3F:BB:C9:51:54:D4:11
Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12
Certificate issuer:       /CN=B2650BD2D997B6C198A4B362B7395AC364683312
Certificate serial:       5FE200D33465B50D24EB72DCCFCA1E04AC7F3A70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
Manifest number:          015D
Signing time:             Mon 25 Nov 2024 19:20:58 +0000
Manifest this update:     Mon 25 Nov 2024 19:15:58 +0000
Manifest next update:     Thu 28 Nov 2024 23:31:58 +0000
Files and hashes:         1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=)
                          2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=)
                          3: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: 0i+OqGTIb78AiSwrcmJ55CX2Lm1qUp3qyeeyvAPY9tI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl
                          rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e2:00:d3:34:65:b5:0d:24:eb:72:dc:cf:ca:1e:04:ac:7f:3a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312
        Validity
            Not Before: Nov 25 19:15:58 2024 GMT
            Not After : Nov 28 23:31:58 2024 GMT
        Subject: CN=58A55EBC163A70634E5BC90D9D3FBBC95154D411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:11:16:31:3a:82:a3:fd:f2:f6:92:fd:84:
                    1c:01:77:4e:66:ab:f5:61:d6:2b:4f:31:4e:2e:94:
                    e8:98:0e:a0:95:d6:ae:f5:e9:f0:73:e5:1c:20:67:
                    84:a3:a9:e0:95:51:25:3f:b6:24:b2:f5:53:43:6f:
                    d5:c4:fb:50:dc:72:30:68:e2:85:73:fd:6d:9c:b0:
                    fa:1d:8f:a0:38:2b:38:6b:0b:86:e5:d5:88:12:79:
                    f9:28:3a:f8:e2:a8:cc:84:5f:ea:cc:45:6b:10:83:
                    8a:23:1a:b1:e9:11:b5:ec:dd:2d:64:41:c6:2b:d1:
                    56:d0:aa:6e:b6:30:3a:44:99:d8:c3:0b:8b:89:bc:
                    85:13:6b:9d:60:19:a5:42:34:e1:ef:fb:93:02:67:
                    0c:84:90:de:0b:ff:c8:c8:a7:74:2e:b6:1b:8c:de:
                    3a:cd:ee:1c:be:56:fe:bc:56:5c:1c:b5:99:d9:d3:
                    7b:a3:2b:39:06:5a:0d:7d:d8:79:8a:9b:2e:36:e9:
                    05:e1:5d:90:26:1b:42:fd:0b:2a:03:ec:ae:69:00:
                    b7:4d:56:ca:43:62:ca:7a:30:0a:ed:1b:20:5e:70:
                    93:90:0b:cb:68:da:41:c2:28:be:3a:8d:94:0d:ca:
                    5d:a1:69:a7:67:66:af:78:42:52:d6:de:b0:1a:26:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:5E:BC:16:3A:70:63:4E:5B:C9:0D:9D:3F:BB:C9:51:54:D4:11
            X509v3 Authority Key Identifier:
                keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:f8:71:81:48:3b:72:7e:36:99:db:b7:3c:81:72:76:e0:
         00:60:9c:e3:ea:e1:ff:77:32:40:bc:a5:a8:df:fd:31:da:88:
         79:8a:53:21:51:6f:cb:33:92:90:e5:af:9d:8d:ea:6c:3e:23:
         f0:01:53:f4:6a:23:f9:dc:c7:9b:8a:3b:36:e4:be:d5:6c:ac:
         95:c0:07:31:db:48:6a:52:f3:69:cd:8f:cd:b4:15:b7:2b:9d:
         66:ad:5e:23:c3:0b:74:49:0e:7e:be:67:12:70:01:d2:6d:92:
         84:9d:c6:48:02:79:41:bc:92:b6:26:1b:73:b5:f4:78:99:3b:
         77:1e:ba:fc:85:ce:ff:b4:0a:40:e6:fe:e8:c5:5f:9b:1a:97:
         4c:d1:30:20:46:ba:7b:11:1c:2b:e8:5b:b8:60:14:89:d9:fe:
         67:07:cc:64:90:12:36:b6:5a:20:8e:30:63:8b:5a:78:7c:b7:
         53:44:6f:20:98:5f:f9:c4:69:4a:04:4d:36:8d:83:7d:1e:ed:
         b3:c7:ec:bc:eb:af:07:70:a7:12:5f:c4:7d:65:6a:47:6c:c6:
         56:be:d8:30:7d:19:55:2c:c0:ac:41:e9:d9:32:b9:77:a9:a5:
         0e:0e:6c:f3:2a:1c:0d:88:b4:f4:51:02:30:51:96:db:2c:dd:
         e2:88:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org