Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
File:                     507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json)
Hash identifier:          1OFkQ224LOAwn9KwOdgAoZ95BXi11Gyrf17Pnu8iRhA=
Subject key identifier:   B2:0B:F5:9F:0D:C9:95:E6:4C:B4:5D:D5:2E:BC:73:D5:51:92:C4:27
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Certificate issuer:       /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial:       22772876D769A1A6D6916BB60582971216A0275C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
Manifest number:          0492
Signing time:             Wed 20 Nov 2024 23:51:42 +0000
Manifest this update:     Wed 20 Nov 2024 23:46:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:27:42 +0000
Files and hashes:         1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: 0nnrthSodd/iAtSNDBAnyGy/g6P5ZNfY793nrMonBM0=)
                          2: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: MdltFhho1Ym2XoUl46T8HciteMsn+e5IxxuU/IkRfIc=)
                          3: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: xIBXB+24VJsL/heFw31/wIGI2Dg9M5cuSyg0HdKZp1c=)
                          4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: ezVOn179eSSzdMIbHBTL6Z7EGoMIHMWT9eiNWQFwF8M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
                          rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 01:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:28:76:d7:69:a1:a6:d6:91:6b:b6:05:82:97:12:16:a0:27:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
        Validity
            Not Before: Nov 20 23:46:42 2024 GMT
            Not After : Nov 24 01:27:42 2024 GMT
        Subject: CN=B20BF59F0DC995E64CB45DD52EBC73D55192C427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:47:a1:d3:b2:9c:62:76:e9:b8:9b:28:a3:8c:
                    ce:6b:30:42:0c:5a:76:76:ca:52:cb:71:c3:22:9b:
                    80:5e:c0:fc:ed:47:ce:60:d0:7e:3f:a3:5d:93:d3:
                    8f:dc:5e:67:c5:37:ff:c3:e2:b7:d0:7f:b0:3d:71:
                    3c:20:0f:12:18:82:3c:83:75:5c:56:5a:80:9b:b2:
                    8a:78:4a:4a:ba:3f:88:50:3a:38:07:72:3a:82:fe:
                    a4:c5:e1:01:fc:4d:21:6f:32:fd:c7:a8:31:6a:f7:
                    35:89:ea:df:19:c3:9d:f2:8c:de:0c:b6:64:53:15:
                    52:af:68:97:17:90:d2:39:d2:9d:3e:4b:e1:8c:1f:
                    6b:26:e0:d8:23:8d:f8:87:b5:24:92:ec:ad:70:d2:
                    b6:42:b0:d9:b6:57:ea:dc:f6:c1:34:ab:cc:91:4c:
                    2b:c9:63:42:6d:a4:c7:bc:52:1b:b1:0c:41:e3:52:
                    dc:fc:6c:84:c2:4f:22:02:bb:d0:0b:04:3f:46:f5:
                    be:72:3d:e9:1a:a3:ae:22:02:ba:e1:5d:05:f2:36:
                    4f:3c:30:08:0e:9e:52:3a:7b:d9:a5:1d:2e:67:84:
                    bb:22:a5:6d:5c:30:5a:fe:ff:a9:39:9b:87:c7:5f:
                    19:1d:e9:91:9b:bc:f7:d8:ac:ad:88:46:99:8a:3b:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:F5:9F:0D:C9:95:E6:4C:B4:5D:D5:2E:BC:73:D5:51:92:C4:27
            X509v3 Authority Key Identifier:
                keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e9:9f:d4:24:ca:b8:fb:24:e0:fc:35:03:4b:b6:21:e9:c0:
         82:b4:e3:b5:63:89:ee:d9:55:e6:6a:40:1c:aa:c4:ec:75:35:
         61:8a:6a:2b:7a:45:e6:62:93:aa:b9:61:b8:4a:41:90:52:4f:
         53:91:3b:b0:ee:b9:9a:ad:0a:db:00:df:eb:c9:6c:cc:14:29:
         47:e8:05:4b:51:a5:18:76:d5:79:63:75:a5:3e:c8:16:62:3c:
         76:c8:8b:f5:9c:96:e7:cb:39:9d:2f:83:80:20:9f:60:31:75:
         3a:0d:81:d1:0a:e8:48:9d:a6:02:b5:51:22:36:69:fa:06:61:
         b2:5f:fc:dc:3c:88:fc:8b:79:c4:90:af:9b:ac:ea:0d:93:d8:
         e9:c0:5c:9a:12:53:c6:10:2e:0e:a4:07:1f:8b:23:38:d5:9f:
         3a:95:4a:4f:46:32:af:80:b0:2c:4e:f4:c8:6c:c0:a0:a3:de:
         8e:32:2c:aa:52:f4:a8:e1:53:1c:56:01:f4:8f:da:f2:80:12:
         d2:09:b2:7b:02:59:80:35:a6:10:c8:f7:35:ba:25:cc:70:6d:
         ac:6b:8b:7a:e0:88:ff:67:6d:03:4f:fa:f5:7a:93:25:e8:38:
         37:00:c1:df:05:55:70:42:0f:8b:a6:19:89:8e:0e:4c:2e:67:
         56:ad:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org