Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
File:                     4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json)
Hash identifier:          rb4Cox1L349K2whaGhSHWeDUyrfxEZELyqayxqWOnCA=
Subject key identifier:   B7:C4:56:E5:7E:96:C9:0B:A5:C1:88:CF:FB:23:03:41:12:BD:DE:23
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Certificate issuer:       /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial:       7034790493E5E9775DDB0905D822EF81032681C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
Manifest number:          018D
Signing time:             Mon 25 Nov 2024 01:10:48 +0000
Manifest this update:     Mon 25 Nov 2024 01:05:48 +0000
Manifest next update:     Thu 28 Nov 2024 11:26:48 +0000
Files and hashes:         1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: hdC5XlwPlLeH2aCMdaAbP0Oo6EKvPRYoLddhoWAu/Jk=)
                          2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: IjDU6VchKiVRt/VpnNfkp1NDPemNIu86cnCMdMAMgr8=)
                          3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: VDnkiC6xsHb+wdu6iC6My4yclVTmaygUM2M2G/K9SOQ=)
                          4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=)
                          5: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
                          rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:34:79:04:93:e5:e9:77:5d:db:09:05:d8:22:ef:81:03:26:81:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
        Validity
            Not Before: Nov 25 01:05:48 2024 GMT
            Not After : Nov 28 11:26:48 2024 GMT
        Subject: CN=B7C456E57E96C90BA5C188CFFB23034112BDDE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:21:52:b1:9f:4e:41:b9:a5:6d:38:e5:2e:
                    04:8b:da:a2:fc:b9:ed:de:d9:94:d7:f7:24:74:15:
                    59:2f:eb:82:92:d7:0b:18:23:f8:21:d9:16:12:48:
                    00:a7:04:d9:79:3d:8b:fd:a7:85:c1:08:af:2a:83:
                    21:50:4f:5f:d6:c2:17:c5:e7:2b:f6:d7:47:d7:81:
                    d4:02:be:59:ab:ad:72:e8:bc:46:f2:15:6d:aa:fd:
                    80:69:60:05:db:cc:24:49:ba:32:71:6b:6a:c7:b9:
                    57:b1:d2:e4:37:26:ec:a2:79:8e:f8:d1:2a:03:92:
                    e8:b5:57:a4:35:71:22:df:16:c9:73:3c:41:48:56:
                    71:8b:11:63:6f:c8:2b:a6:ef:32:9b:78:19:4c:ef:
                    e4:e2:fb:c6:19:e4:fc:7b:db:e8:af:cb:a7:9d:99:
                    0a:7c:6f:02:83:96:32:ef:34:64:da:e4:48:31:03:
                    ce:7a:6d:8b:93:e7:03:f8:08:b3:f7:71:64:bb:a2:
                    0a:6c:5d:01:9f:d9:0b:61:68:81:5c:61:04:fd:36:
                    75:ea:87:48:32:70:cc:c5:38:cc:d2:ea:0e:60:3e:
                    e7:72:dc:c4:6f:17:0c:54:9c:28:a3:0a:88:d0:c4:
                    af:c6:e8:96:e6:d1:cb:9b:de:64:c6:cc:79:1a:02:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:56:E5:7E:96:C9:0B:A5:C1:88:CF:FB:23:03:41:12:BD:DE:23
            X509v3 Authority Key Identifier:
                keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:8e:02:21:82:4f:69:2a:43:62:4e:4c:f1:9e:39:5f:e8:
         15:0e:ae:90:17:4f:14:28:0b:83:24:1d:73:20:5d:c6:00:d9:
         aa:13:fc:24:ae:03:31:ad:c1:30:45:0b:6f:b9:11:a8:97:28:
         7b:fc:23:4c:8c:4c:2f:7d:60:58:a4:88:bc:58:14:cb:59:10:
         51:23:be:ee:9e:d2:ab:61:58:83:b6:32:a9:e6:73:b5:d8:4b:
         4b:76:e4:c2:0c:c5:08:10:52:9d:b3:73:fe:70:0b:12:ba:e0:
         e9:bb:b3:49:23:f4:90:a8:c1:ee:53:4d:97:42:93:b4:b0:85:
         73:2c:df:06:b9:d5:51:fe:26:e0:38:5e:0c:02:d5:a9:f0:6e:
         c8:0c:fd:d9:47:4a:13:0d:c0:9c:32:ca:dc:77:64:c8:62:e9:
         86:d7:ba:fc:3b:69:37:20:67:b9:17:5c:52:ac:a0:21:da:58:
         12:e6:e7:ab:87:14:dd:7c:6e:04:ba:7d:17:71:52:18:4d:7a:
         7f:f9:88:d1:6c:09:51:61:c1:43:75:22:5a:b5:60:97:0b:87:
         06:f4:f0:3e:58:bc:63:0c:8b:2c:06:31:0b:95:8f:93:8d:85:
         61:09:2d:3f:e9:f1:c2:f1:54:a2:6a:fb:f6:d4:39:e4:ca:7e:
         a7:85:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org