Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
File:                     B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json)
Hash identifier:          Y1xUrcoUn1mO8ZII6erkRHWKDnsFu/TyzD0DM5i1lSg=
Subject key identifier:   61:4F:9A:DE:2D:01:D8:20:2E:11:5D:05:92:1B:66:AC:5E:1B:92:45
Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Certificate issuer:       /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Certificate serial:       7C7E81FAC3D298F39021887CA2F70512FB54463A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
Manifest number:          0127
Signing time:             Mon 25 Nov 2024 14:01:45 +0000
Manifest this update:     Mon 25 Nov 2024 13:56:45 +0000
Manifest next update:     Thu 28 Nov 2024 17:44:45 +0000
Files and hashes:         1: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: /IyNbA1kqbXr8soi03tvIhIx1RVwzc2j41ZqTx0XLRE=)
                          2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: AJg/cUVcCeYeduL3fWzjVB1U3XDTz0Sbijz+A7Hj40E=)
                          3: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: A6U8uFqTaFkuKqK7zdZreF/daypc3dQARejkH+kpD7E=)
                          4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: Uo0J9xAcD1RheyZa6iPvXxzPGUZXZ2k4Ch5UihtapZE=)
                          5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xUr7Asx3S1wSVs89gOq24W2GpUG+Cd1JwPvLUZvCl5c=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
                          rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7e:81:fa:c3:d2:98:f3:90:21:88:7c:a2:f7:05:12:fb:54:46:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
        Validity
            Not Before: Nov 25 13:56:45 2024 GMT
            Not After : Nov 28 17:44:45 2024 GMT
        Subject: CN=614F9ADE2D01D8202E115D05921B66AC5E1B9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:dd:0c:67:a4:77:c2:fd:45:de:69:53:2e:
                    48:d6:ff:8d:07:fb:31:97:39:d5:e9:d2:25:3c:0e:
                    4d:48:b7:5c:06:ad:1d:15:6c:8a:21:d6:61:87:93:
                    2f:7d:30:fe:a6:59:c0:d6:56:f6:40:56:29:7f:d6:
                    e0:4c:00:a2:b9:27:43:a7:53:fe:e7:74:8f:00:f5:
                    4f:c7:78:99:96:ff:bc:ad:cb:92:03:76:c5:5a:ed:
                    76:2b:03:44:47:e4:19:56:67:e1:48:0e:df:5b:ad:
                    c8:f4:09:d2:38:1a:8d:61:c3:ad:b5:30:53:21:31:
                    bb:6c:ae:05:85:fb:1d:38:73:f3:6d:ae:3c:08:71:
                    fe:92:30:c9:f2:81:73:1f:03:0f:4e:ac:36:ea:f8:
                    dd:67:2e:6d:be:98:e8:44:fe:a4:df:88:50:86:8e:
                    a8:01:59:27:a3:7c:ae:f5:ae:b0:12:7e:fa:4f:5a:
                    e9:09:b7:82:77:a4:b2:48:0a:68:75:2b:82:9c:54:
                    81:be:66:95:83:3c:02:6d:68:de:27:4a:96:30:86:
                    05:8f:0c:7e:fd:2a:c4:5d:60:81:37:83:e0:b7:ab:
                    14:46:9d:e3:50:98:38:1a:c2:93:72:50:93:b8:53:
                    75:c3:72:26:c9:57:f0:c0:92:27:36:77:13:16:33:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4F:9A:DE:2D:01:D8:20:2E:11:5D:05:92:1B:66:AC:5E:1B:92:45
            X509v3 Authority Key Identifier:
                keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:55:ab:c2:f0:77:cf:d8:79:71:d1:7f:a3:de:a7:de:49:
         c9:d3:10:a9:ab:42:3a:a8:9e:be:d0:c8:2f:70:16:4f:7e:71:
         ee:b6:c3:3c:7c:18:9d:93:88:1d:23:ea:78:bf:07:6a:22:36:
         2b:23:73:60:0a:eb:1e:6d:10:b2:8f:01:db:f5:c2:3e:b4:25:
         60:6f:f3:11:3f:7f:23:39:6c:6a:a0:20:f4:72:56:1d:de:ae:
         b5:73:d8:08:09:f5:9c:2e:bb:56:5d:d4:1d:9d:f9:c6:48:65:
         99:3d:f7:4d:1b:38:19:ff:47:e1:b3:ba:4f:97:c2:38:ea:07:
         04:af:e2:06:83:d6:44:a6:25:5b:d0:72:22:ea:74:19:91:9a:
         e4:83:18:1b:60:a5:37:7c:6a:3a:18:90:28:e2:c1:b3:e9:63:
         a8:32:37:cd:79:5f:c4:fb:2c:6c:4d:c7:9d:d2:2f:c2:37:51:
         e0:fd:dc:77:27:4e:44:10:7a:0e:58:2b:08:fc:79:17:65:61:
         3c:b1:6c:06:2a:67:86:3b:13:dd:fb:9a:32:0c:c7:7d:b4:06:
         fb:e2:d1:b1:46:e9:2c:d1:fc:e1:80:18:d2:7f:5f:92:27:e8:
         52:52:7f:0a:8d:08:5f:18:39:c1:79:ac:fc:7c:df:4c:93:4d:
         fe:8d:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org