Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File:                     43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier:          AUzSaXYeR9dHjSVN/tK2wrU0zNn9doEnEZdE4i17CTM=
Subject key identifier:   DB:2E:E9:AE:E7:EF:50:58:84:08:AC:60:1F:75:60:9B:31:A9:21:48
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer:       /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial:       6AD9834E05330F6FC0E3B18218D2EC5AA0E7E423
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number:          A5
Signing time:             Sun 24 Nov 2024 07:00:46 +0000
Manifest this update:     Sun 24 Nov 2024 06:55:46 +0000
Manifest next update:     Wed 27 Nov 2024 08:01:46 +0000
Files and hashes:         1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
                          2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: DbZhNo8GagoDF/69UQu5qPqVZLd7v7RRxmkLOc8HPi8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
                          rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:83:4e:05:33:0f:6f:c0:e3:b1:82:18:d2:ec:5a:a0:e7:e4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
        Validity
            Not Before: Nov 24 06:55:46 2024 GMT
            Not After : Nov 27 08:01:46 2024 GMT
        Subject: CN=DB2EE9AEE7EF50588408AC601F75609B31A92148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:ff:16:15:58:cb:d3:a2:a4:f3:01:43:eb:
                    5b:57:54:c3:7d:12:e5:4d:23:46:26:00:eb:5f:03:
                    0a:40:8a:70:92:77:79:80:76:af:38:2a:f1:e6:4a:
                    78:f4:4c:5b:bd:50:65:e0:7e:1b:53:c3:f1:5c:da:
                    f6:6b:99:b2:be:bc:b4:2c:03:1e:b2:77:9a:b2:85:
                    82:a3:e6:74:3a:94:57:c4:83:fd:50:cd:39:eb:66:
                    ce:16:4c:24:77:d1:47:53:45:92:d3:3c:0b:bc:4a:
                    d0:92:e8:ba:48:d5:8b:86:f4:a5:9f:30:de:5e:4c:
                    e9:eb:be:98:f7:7b:64:cb:dc:7e:8f:5d:28:1a:3e:
                    19:17:5a:a3:63:ab:d0:a4:b2:2d:94:0d:73:18:af:
                    b9:cf:09:66:ee:95:50:32:55:bd:16:4b:bc:91:d6:
                    45:49:ef:de:26:0f:e1:6b:2c:87:2c:ab:2c:3f:1f:
                    2e:4e:c3:0e:8d:66:3b:b7:97:92:93:f4:e6:80:ad:
                    28:7d:58:1d:a4:f0:d4:44:a6:29:54:5c:ba:3c:dd:
                    f5:e9:79:60:6e:84:09:2b:65:6c:2e:80:41:b1:2b:
                    d0:1e:63:0c:0d:dd:03:b0:db:6e:70:2a:9d:08:e7:
                    f6:84:83:0b:ae:bd:fb:39:c0:86:4e:14:25:40:33:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:E9:AE:E7:EF:50:58:84:08:AC:60:1F:75:60:9B:31:A9:21:48
            X509v3 Authority Key Identifier:
                keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:83:3a:2f:52:ea:b8:72:1b:18:b0:be:c1:bb:5f:2d:48:9c:
         f0:0d:52:55:70:12:e9:0a:59:b2:aa:a5:1e:60:ff:67:d3:64:
         d7:e5:8b:6c:70:61:59:80:84:3c:af:cd:8f:af:13:7c:a4:fb:
         fd:74:74:68:a9:08:4c:cc:c3:ce:e4:09:f8:5b:09:c2:c8:65:
         e1:ad:49:0e:35:8b:6a:45:fe:8e:b2:64:b2:a9:da:a3:e7:a5:
         76:42:09:1e:60:89:1e:67:98:b8:94:75:6b:d1:dc:f8:a6:9a:
         f9:f3:3d:6d:7f:f5:d8:71:9e:68:bb:75:d3:7f:16:6c:26:c7:
         30:0b:93:bb:4d:c6:21:b9:93:d0:68:de:1e:98:c2:2a:67:72:
         78:5a:d0:fd:42:74:32:d9:3d:55:ef:a8:3b:48:7f:8f:35:cc:
         ae:e8:5c:eb:ed:ac:4e:4c:2a:3d:71:f9:25:db:74:af:a6:0f:
         88:e9:fd:90:7c:6a:c4:04:cd:c6:eb:16:d8:f6:43:9b:ea:57:
         6d:be:a9:e8:9c:77:8d:06:e9:4f:28:71:51:20:f0:9d:69:b0:
         00:04:6d:76:31:83:8c:d5:27:40:18:7f:81:b7:ca:39:df:9f:
         32:88:7c:25:91:44:8a:22:4e:f1:5c:0e:67:70:62:8d:96:45:
         72:37:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org