Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
File:                     20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json)
Hash identifier:          thWA45EaLoz8dn2vWtMHi3AFnFkZSH7nwgqLrCa+xJ8=
Subject key identifier:   A8:BE:F5:3B:BF:59:E5:CE:79:AD:36:E2:34:79:48:14:2E:E8:C1:F8
Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14
Certificate issuer:       /CN=20ABF702057AD5F01207F6C578160654EB44C914
Certificate serial:       0E2F9F7DD32457F7268C9C62DA90D0724718B604
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
Manifest number:          014D
Signing time:             Sun 24 Nov 2024 05:40:39 +0000
Manifest this update:     Sun 24 Nov 2024 05:35:39 +0000
Manifest next update:     Wed 27 Nov 2024 14:42:39 +0000
Files and hashes:         1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: a21A7Aw1eA0w27BaRI4anjJydt9OVkV4jK6OQ5ecATg=)
                          2: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: Hxjbtea+E1wLnkbqreObvDAPVDyYHOL0IqCaKpRrARM=)
                          3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: PLj+pLk9ZA4VlrabhQn+TMoDgLQZHyEVvINTh2Z53O0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl
                          rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2f:9f:7d:d3:24:57:f7:26:8c:9c:62:da:90:d0:72:47:18:b6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914
        Validity
            Not Before: Nov 24 05:35:39 2024 GMT
            Not After : Nov 27 14:42:39 2024 GMT
        Subject: CN=A8BEF53BBF59E5CE79AD36E2347948142EE8C1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:ab:e1:5f:ee:d2:e0:68:6a:7e:e3:56:a6:
                    aa:87:4c:df:16:97:86:b6:f8:fe:0f:31:fe:87:39:
                    97:e7:fa:a5:6c:a8:83:b9:10:b9:8f:db:7d:79:47:
                    9f:dc:04:fa:16:14:00:84:bd:0c:92:e3:d1:96:09:
                    b0:c4:35:f4:5e:e1:bd:d4:8e:96:6c:c4:1a:86:a2:
                    02:f7:b8:89:66:a8:bf:0e:5c:71:62:17:8d:99:bd:
                    ae:30:b1:9e:7b:b4:f6:f5:2f:4a:f1:2e:59:bf:73:
                    e9:2a:4f:60:8e:f8:7a:3a:e4:36:dc:0c:85:b9:f3:
                    6c:9d:ef:d0:65:90:e2:a5:3e:55:a9:27:18:d8:b2:
                    b3:25:f1:57:6d:14:4f:ca:1b:d7:37:a2:49:1f:88:
                    74:0e:89:1f:38:bf:b2:7b:c2:b0:61:4d:62:58:42:
                    f3:a6:44:99:c8:0b:77:16:23:dd:1d:77:86:30:38:
                    72:5f:da:06:6d:2f:ef:e7:34:e1:44:ba:87:9f:55:
                    ed:0b:b8:9b:19:14:a5:d5:c7:6d:5c:e3:60:93:30:
                    13:c0:e4:9f:0a:dd:f3:23:ad:ce:38:d9:fa:bf:05:
                    d0:da:fc:ad:f8:de:53:08:33:74:de:5d:d0:c0:29:
                    a6:6e:fb:4d:58:55:fc:01:bc:3b:03:9e:b5:5e:31:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:F5:3B:BF:59:E5:CE:79:AD:36:E2:34:79:48:14:2E:E8:C1:F8
            X509v3 Authority Key Identifier:
                keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:e2:cd:a7:2b:01:c2:f5:44:35:83:bc:25:13:02:1e:e4:
         10:ee:cc:c4:9f:27:25:2c:7c:75:26:0c:99:bc:98:d5:f9:bd:
         0f:7a:6a:f4:b2:d1:aa:f6:86:98:5f:cf:67:5d:7b:19:33:96:
         db:21:e4:ab:5d:cf:b0:89:34:0e:4e:4b:e6:48:13:b8:ea:a9:
         33:47:f3:3e:e3:f5:98:5d:89:6f:70:d6:b9:98:53:d3:a5:c5:
         1a:4a:b2:f1:16:ff:90:c4:a5:ef:69:76:d6:a9:71:ec:b8:45:
         01:c4:74:39:3e:03:1f:96:d3:6f:47:3f:a1:5c:e2:e1:bf:63:
         a9:72:aa:e2:d4:f3:04:0f:ae:01:b2:74:ae:6c:c0:34:4f:b4:
         41:d6:06:0f:df:6e:a7:5c:9d:81:10:ba:32:dd:6e:a3:49:9c:
         b8:b4:e0:d8:df:2b:b9:7b:b0:28:9e:f2:5c:8b:4f:ed:f4:ad:
         15:f6:ec:ed:8d:77:90:f1:fc:b2:20:ab:25:3e:ae:c5:8f:ae:
         3a:13:f4:d8:c3:46:1e:6c:5f:73:84:f3:75:ee:ae:c3:9c:b8:
         0d:7e:8c:52:18:14:d7:48:f6:5e:f1:15:da:14:5c:12:a3:3c:
         f1:d4:aa:08:93:0b:d1:1b:e5:13:7e:57:4d:2f:e0:1a:26:7e:
         4d:97:4a:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDi+ffdMkV/cmjJxi2pDQckcYtgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF
QjQ0QzkxNDAeFw0yNDExMjQwNTM1MzlaFw0yNDExMjcxNDQyMzlaMDMxMTAvBgNV
BAMTKEE4QkVGNTNCQkY1OUU1Q0U3OUFEMzZFMjM0Nzk0ODE0MkVFOEMxRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8KvhX+7S4GhqfuNWpqqHTN8W
l4a2+P4PMf6HOZfn+qVsqIO5ELmP2315R5/cBPoWFACEvQyS49GWCbDENfRe4b3U
jpZsxBqGogL3uIlmqL8OXHFiF42Zva4wsZ57tPb1L0rxLlm/c+kqT2CO+Ho65Dbc
DIW582yd79BlkOKlPlWpJxjYsrMl8VdtFE/KG9c3okkfiHQOiR84v7J7wrBhTWJY
QvOmRJnIC3cWI90dd4YwOHJf2gZtL+/nNOFEuoefVe0LuJsZFKXVx21c42CTMBPA
5J8K3fMjrc442fq/BdDa/K343lMIM3TeXdDAKaZu+01YVfwBvDsDnrVeMfttAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqL71O79Z5c55rTbiNHlIFC7owfgwHwYDVR0j
BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1
N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0
QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4
NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2
NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACoH4s2nKwHC9UQ1g7wlEwIe5BDuzMSfJyUs
fHUmDJm8mNX5vQ96avSy0ar2hphfz2ddexkzltsh5Ktdz7CJNA5OS+ZIE7jqqTNH
8z7j9ZhdiW9w1rmYU9OlxRpKsvEW/5DEpe9pdtapcey4RQHEdDk+Ax+W029HP6Fc
4uG/Y6lyquLU8wQPrgGydK5swDRPtEHWBg/fbqdcnYEQujLdbqNJnLi04NjfK7l7
sCie8lyLT+30rRX27O2Nd5Dx/LIgqyU+rsWPrjoT9NjDRh5sX3OE83XursOcuA1+
jFIYFNdI9l7xFdoUXBKjPPHUqgiTC9Eb5RN+V00v4Bomfk2XSj4=
-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org