Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          Fo8f3Mxs8Z9Q/VkAiic5iITY1K9MV0oLaMDZE3nNwhY=
Subject key identifier:   23:FA:30:76:CA:1F:83:E4:18:32:00:52:98:63:49:06:23:A8:B7:DA
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       290FDE51BD5D576851B68C517C916514BF4F5A5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          0496
Signing time:             Fri 22 Nov 2024 09:52:08 +0000
Manifest this update:     Fri 22 Nov 2024 09:47:08 +0000
Manifest next update:     Mon 25 Nov 2024 09:52:08 +0000
Files and hashes:         1: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: JeTZeiHc0ObZ6NTa9su8J3fL4BDL7P59zUbcfeYDg+8=)
                          2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: 5leq3WQ1j3uC/yh6caiPHP4oda691+YpS+PNWtHfmA8=)
                          3: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: /6sZbeOVx/pIR9agGUBF8/TlZPjh4yvQlHKjKVwAvvY=)
                          4: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 4Hm4WnusfCBYxfpxzUJUTi2ngcR2xlQx9uMM6h03e6c=)
                          5: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: 3toGe5r9jiLqlMM+4jFtzSD90kCRcftf6RpXKtiFoZI=)
                          6: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: GEs3nPJ4bBQ9SG6M1jXK0HavNNg7Zwm8JeDdtGV8UJA=)
                          7: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: Gi8pXuaHvIjRFGEOcjqpkp/ITy5FzjLcXXMmxYMHE20=)
                          8: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: fCLtH63XHef23XJpqpHfRy4HZxlv7dPLgS80XrkYx0k=)
                          9: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: sY9vGlyucSxgaOLfCvOLUedhXuURH56B3R5je15TfYY=)
                          10: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: TweHsnwYTZJNRDapWYbX3bkK7Ez5NmNqQmfOElapmkc=)
                          11: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: gmvaIJPpCzVhgz7cFO42u4hoxoXz/uk2JEoHGVjST1k=)
                          12: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: QlkHB1Jq6OrecBFUY1B7JhWI4H6A8g4E+BWeduGpGog=)
                          13: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: HsMo3Fxk5F8yDEpO8mvjVwYtEfstOJXy+ScS8/+6hFE=)
                          14: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: n0m6aJwhpZilRfjYTr+NRhS1afS/t8GPaSVPZGuVgCo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0f:de:51:bd:5d:57:68:51:b6:8c:51:7c:91:65:14:bf:4f:5a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Nov 22 09:47:08 2024 GMT
            Not After : Nov 25 09:52:08 2024 GMT
        Subject: CN=23FA3076CA1F83E4183200529863490623A8B7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:32:48:56:6f:6a:f0:73:f8:0e:5b:e4:59:
                    b4:2d:1c:a6:8d:1c:ab:00:fa:f8:8a:0b:b0:08:1f:
                    d0:8d:02:6b:48:14:9d:e3:93:ef:44:45:63:06:81:
                    28:22:53:54:ae:d0:e2:51:8f:2d:b6:f4:f3:10:3a:
                    31:83:40:7b:69:11:31:84:d3:42:6b:80:b8:e6:5c:
                    16:e0:c0:dd:f1:43:ef:be:cb:7d:ca:0a:9b:1c:b9:
                    c2:7e:2f:cf:b1:68:f3:1e:a5:94:f1:11:41:ef:b5:
                    c4:81:88:81:93:5f:fb:e2:c8:49:1b:89:ea:fa:05:
                    97:d1:69:5c:df:a5:00:86:f9:9d:44:60:bd:b3:0c:
                    55:3e:40:07:14:77:18:e6:5b:38:d7:d2:c0:5f:63:
                    1b:b4:5a:64:5f:78:bf:3f:61:e8:70:a0:ec:ec:21:
                    4d:9c:e5:1e:e3:87:57:3d:ce:72:63:f4:b8:97:b6:
                    e8:e2:b3:62:32:9a:79:51:33:8c:97:64:74:0f:d8:
                    76:fe:be:73:74:e2:3a:43:dd:b1:7e:e5:31:a4:59:
                    14:31:37:fe:16:71:4b:40:71:3e:5a:42:ee:56:dd:
                    d3:f7:d0:19:b7:53:c9:73:5e:db:bb:c0:24:1d:d3:
                    a8:98:dd:7a:f7:16:1b:16:bb:a6:c5:84:01:b3:54:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:30:76:CA:1F:83:E4:18:32:00:52:98:63:49:06:23:A8:B7:DA
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:08:63:2a:a7:ee:14:a1:20:d4:fa:37:18:64:24:4c:55:
         ed:be:e9:dd:4c:52:cb:43:a2:89:d3:01:52:8d:30:ac:ee:0a:
         cf:8f:5f:78:07:e5:01:8e:14:76:4f:98:9f:00:d0:60:0c:e2:
         fc:96:6d:13:37:aa:e2:0c:a8:f2:26:e2:ab:a7:af:ed:58:f6:
         a7:e2:2e:43:6a:90:b3:a1:c4:ce:76:a2:02:30:d5:ed:9a:28:
         64:a5:78:57:ea:db:03:f5:42:44:4d:21:76:98:d9:33:a5:25:
         b0:1c:2b:df:b8:da:aa:62:57:f1:24:99:05:70:46:1b:6b:52:
         84:96:8e:b4:37:81:e8:b4:4b:c9:6b:6b:a2:f8:47:d3:12:fa:
         b3:b7:93:2a:03:ce:ba:b0:cf:ed:85:5d:db:93:1c:66:f8:c2:
         37:4a:ad:7c:f2:bf:c3:52:6b:cb:b0:fb:ef:1c:94:5b:08:9c:
         bc:82:d2:c8:58:28:35:81:32:d3:7b:d5:4f:2c:88:55:d5:fa:
         fa:60:46:23:51:16:e9:41:67:b4:67:c2:13:61:9e:c1:44:34:
         ed:3b:da:a1:d4:22:4f:b2:ad:03:0d:18:1d:98:94:2f:93:e2:
         3a:7c:40:38:3e:8b:87:ce:94:e3:e6:7f:f1:a3:2e:b9:5f:7e:
         0c:3a:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org