Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft
File:                     2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json)
Hash identifier:          gkHb03JgazsUDqBWyr2o2NX2cMiJprsmxERbzz1RFbk=
Subject key identifier:   8D:1C:3F:A9:41:AB:AC:C3:AC:C8:C9:9C:5C:59:B4:92:AB:B5:BC:C3
Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D
Certificate issuer:       /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D
Certificate serial:       374DCD6B9F7BBB12536E4240AD56140EA10C2CDE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft
Manifest number:          0129
Signing time:             Sat 23 Nov 2024 08:10:42 +0000
Manifest this update:     Sat 23 Nov 2024 08:05:42 +0000
Manifest next update:     Tue 26 Nov 2024 12:08:42 +0000
Files and hashes:         1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: OadSAEc4qPflVHOwXzlijvvfhBJuNIRHKAArFWK51Sg=)
                          2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: kbDcM3JAR64cjb7yMXGX0h9rkvw1YeK0Snr3T4/ywQk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl
                          rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 12:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4d:cd:6b:9f:7b:bb:12:53:6e:42:40:ad:56:14:0e:a1:0c:2c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D
        Validity
            Not Before: Nov 23 08:05:42 2024 GMT
            Not After : Nov 26 12:08:42 2024 GMT
        Subject: CN=8D1C3FA941ABACC3ACC8C99C5C59B492ABB5BCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:58:59:c9:17:51:f2:45:b3:6d:59:89:aa:
                    82:de:22:37:2b:c1:1c:05:b1:1a:9a:c5:eb:06:cd:
                    45:93:f8:04:bb:4f:a4:fe:f8:ad:d5:03:53:cd:38:
                    e3:1d:f3:96:f0:51:a9:01:0e:58:e7:15:8b:25:74:
                    36:f5:f9:17:b2:b1:c5:c2:85:d2:2f:11:cd:c9:20:
                    9f:23:5e:4b:38:8d:14:34:da:e5:25:2d:bd:72:ab:
                    c9:19:85:04:02:73:03:ae:69:51:aa:ac:30:d8:fe:
                    b9:15:ef:61:87:4d:68:d8:2a:8a:5f:51:f7:d8:f2:
                    1d:aa:ad:71:94:34:a6:2f:b7:2a:dc:27:52:c6:04:
                    b7:13:95:62:99:5c:dc:7e:03:20:c8:11:30:85:cf:
                    1e:73:f9:a3:a3:93:a1:9b:ee:4b:50:31:41:37:a9:
                    6f:b6:ff:b1:7c:5e:5a:1b:0f:f2:f1:68:ec:f2:d6:
                    cf:ae:65:b2:5b:cc:ef:56:48:dc:f3:2c:89:6b:7c:
                    a5:bf:56:6d:fa:92:19:84:d7:ea:9f:95:d2:df:4d:
                    92:fb:5c:2a:45:cd:6d:82:bc:2e:2e:19:2f:0a:5e:
                    28:cb:50:7a:57:41:11:26:74:3f:d9:71:b5:a2:00:
                    3a:57:d5:34:bf:60:7a:38:72:d4:21:db:e6:0b:66:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:3F:A9:41:AB:AC:C3:AC:C8:C9:9C:5C:59:B4:92:AB:B5:BC:C3
            X509v3 Authority Key Identifier:
                keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:65:05:25:26:ec:b5:c1:58:ff:b4:c3:5d:36:2f:9d:dd:43:
         48:5c:a5:8c:81:c7:e3:d5:3b:63:86:3e:10:c6:1c:71:a6:b6:
         41:ab:ff:21:ca:df:9f:d2:ea:67:79:ca:67:22:ff:56:fe:9f:
         5b:e9:ad:54:17:ec:f9:b2:3e:0e:ef:c7:47:99:48:f0:c8:6d:
         10:0b:f6:5b:a2:ae:a5:d7:4d:90:b9:4d:4f:d3:75:dd:8c:62:
         39:cf:eb:e4:1f:62:75:4a:d7:f3:9c:dd:d8:c3:a5:b6:83:a1:
         40:e7:83:c8:17:51:e6:e6:e3:b3:8d:18:9c:69:0b:e7:04:47:
         fb:99:31:5c:40:50:6c:7f:23:80:f7:7b:37:da:67:4d:52:80:
         51:dc:a9:cc:b9:2d:37:c0:b6:a2:c7:13:34:99:a2:35:ab:3a:
         b1:cc:c4:12:c6:86:31:08:0d:7a:6a:ae:c0:64:6e:85:52:99:
         cf:33:a5:b7:29:2e:96:87:0a:b2:5c:ff:cc:3d:d9:3d:24:96:
         46:3c:37:91:91:36:13:df:53:81:98:b1:36:0d:23:1c:6c:73:
         40:da:af:89:25:a2:a9:a8:b3:6f:96:38:3f:a6:ff:5b:13:3d:
         c5:5e:6b:d5:05:c2:5e:c8:89:a8:12:13:2d:08:66:65:39:bf:
         3d:57:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:49:58 2024 by rpki-client on console-fra.rpki-client.org