Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
File:                     0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json)
Hash identifier:          fxgScqC5djgWE5EVe+r3MPBvRbQLTp79JF6EuGrJQBU=
Subject key identifier:   77:85:43:1A:B4:13:68:83:4C:55:7F:9E:48:00:A0:E9:AE:54:83:C6
Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
Certificate issuer:       /CN=0433DC81885AA9736198E4B13311013B6539B05D
Certificate serial:       7CC32434B2EC923CB7A63FA1949EAE5672FFDF16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
Manifest number:          0105
Signing time:             Sun 24 Nov 2024 23:51:39 +0000
Manifest this update:     Sun 24 Nov 2024 23:46:39 +0000
Manifest next update:     Thu 28 Nov 2024 00:31:39 +0000
Files and hashes:         1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: ln4Ofi4VkpxhIBCKYceqIG3INrnNW1q33kOikEH5kEw=)
                          2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: MIrr8H4GR6KTBTBoYtAbkzm4yZfhj7WMuIloFJQDI9E=)
                          3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: 5BIUgFbLOPG/j/I9iEKv2zeqbWQz6dP4Jk4xuK0sDas=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl
                          rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:24:34:b2:ec:92:3c:b7:a6:3f:a1:94:9e:ae:56:72:ff:df:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D
        Validity
            Not Before: Nov 24 23:46:39 2024 GMT
            Not After : Nov 28 00:31:39 2024 GMT
        Subject: CN=7785431AB41368834C557F9E4800A0E9AE5483C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:9b:47:7e:06:55:04:71:25:60:0c:9e:0e:
                    7a:78:30:86:80:f1:c1:4f:ec:91:2b:3d:5f:29:34:
                    1a:33:d6:ff:82:7f:c8:0b:32:21:1b:cf:9c:d4:f3:
                    28:69:e0:36:41:6b:ef:7c:f4:08:76:51:cc:43:69:
                    9c:f3:ab:2a:53:8f:d3:93:6c:26:28:49:40:6b:3a:
                    b9:fd:38:e1:4f:5a:dc:f2:54:42:79:03:51:aa:ae:
                    24:ae:e1:d5:20:53:a5:2b:d9:b6:3e:63:e3:d2:a7:
                    0a:6f:2b:12:67:eb:06:c5:a6:f8:2d:ae:bc:b3:94:
                    95:47:2a:78:15:60:8f:23:89:d8:cc:d0:ce:88:f1:
                    8e:0e:6a:ef:5a:37:a7:3d:4c:96:c9:dd:11:5e:ef:
                    3f:4a:6e:11:02:5d:5f:a6:48:64:63:1b:20:0d:b7:
                    26:68:19:a0:76:7d:17:97:60:1d:cd:27:2b:e6:75:
                    15:be:e1:4e:dc:8a:a6:21:31:63:c4:36:a2:ec:ff:
                    11:dd:f3:af:bd:d2:bd:b6:f7:05:68:e2:b8:c4:58:
                    d4:ee:40:3a:8d:62:ee:1b:2c:c7:59:b3:24:4d:fe:
                    42:b0:ae:fe:18:0b:21:20:6e:5d:1f:3a:2e:7d:20:
                    d0:af:54:34:e3:6c:23:04:90:a2:3c:f6:f2:91:32:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:85:43:1A:B4:13:68:83:4C:55:7F:9E:48:00:A0:E9:AE:54:83:C6
            X509v3 Authority Key Identifier:
                keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:b7:3e:79:5d:37:c9:b8:b8:c1:bc:7b:a9:56:68:87:76:
         61:81:f3:f6:d3:62:92:48:7f:8e:8c:56:27:60:ec:e9:c5:5d:
         c5:09:8d:4d:f7:0c:73:0c:72:6d:b3:b9:78:11:2a:da:67:35:
         1f:7c:02:c7:22:50:90:5b:a4:75:81:a4:a5:0e:a9:f9:dc:88:
         ba:0a:ee:21:12:89:af:15:9f:20:b1:3f:62:2c:fc:da:a4:61:
         dc:98:36:66:9c:f5:b8:fa:38:7b:a6:5f:a7:57:f3:a0:05:72:
         cf:5c:15:6d:42:6b:2a:4d:cb:11:07:46:ea:18:dd:91:2b:03:
         66:c9:ca:aa:8d:6c:88:43:3f:03:aa:1c:47:15:9b:1d:5b:bf:
         ac:eb:db:e2:39:7c:ee:11:37:b2:76:b8:c7:ac:09:4d:82:e3:
         43:f3:83:14:5d:b7:49:6e:30:43:44:5a:95:71:76:6e:3e:db:
         df:d8:54:1e:a2:c3:0e:c2:7f:3c:af:7a:2b:20:f2:e1:be:82:
         c2:01:f3:ed:47:66:c4:e8:de:7d:cb:3d:68:91:45:b2:f8:f1:
         a2:e8:23:3e:ff:3e:7f:eb:f1:af:1b:f5:2c:e7:cd:74:0a:c6:
         19:f2:d6:a2:d0:0a:68:23:c2:d2:2b:39:23:92:c4:98:ce:aa:
         7f:f0:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:33 2024 by rpki-client on console-ams.rpki-client.org