Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          eD2mblMrmxmEepNocwXbJVfNWrVZ/UVBOu5u8DIQVcA=
Subject key identifier:   21:2A:29:BB:74:B3:26:F4:1B:23:EE:FF:CE:C7:22:CC:3E:E3:09:A9
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       4B54047EDBF2FD40284D59875F7628C6A6C4C4CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          A3
Signing time:             Fri 22 Nov 2024 11:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 10:55:47 +0000
Manifest next update:     Mon 25 Nov 2024 16:05:47 +0000
Files and hashes:         1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=)
                          2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: 3o5EyEMH1m9h3LJXka9skZa03EMDFyKChu4nS0yc7do=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:04:7e:db:f2:fd:40:28:4d:59:87:5f:76:28:c6:a6:c4:c4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: Nov 22 10:55:47 2024 GMT
            Not After : Nov 25 16:05:47 2024 GMT
        Subject: CN=212A29BB74B326F41B23EEFFCEC722CC3EE309A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:2c:ef:bd:6c:c3:80:0c:d5:47:fb:4f:e8:
                    4f:eb:1a:9a:50:ef:7f:a9:48:96:c4:e3:a0:96:19:
                    bb:79:fe:ca:4a:90:ad:60:19:df:13:13:d7:01:88:
                    57:9a:3f:35:ef:79:f9:8f:58:3a:05:21:c4:9c:ca:
                    92:fa:e2:a0:a4:10:17:ed:54:fc:ee:91:41:21:56:
                    6a:b9:c2:87:c1:35:ba:7e:35:59:4b:e8:cc:56:18:
                    ba:04:d3:9b:3f:74:c9:4c:fc:1a:fb:79:96:29:9e:
                    0c:b2:d7:87:09:86:75:4b:b9:6e:eb:82:e1:c5:64:
                    5a:ac:e7:f1:dc:fd:ac:f2:ca:87:d2:16:f4:6d:e0:
                    5c:03:a3:89:6f:a5:cc:91:bc:cf:f5:35:9c:f7:c1:
                    98:a5:78:5b:d2:42:f2:ea:b0:f5:a5:1a:07:62:d5:
                    9d:a2:1b:82:40:c3:90:11:a5:bd:a4:3d:8d:2d:56:
                    df:d1:77:19:2d:e3:bf:ba:86:b4:1d:bc:ec:c8:da:
                    59:75:da:60:31:27:4e:19:f2:9c:ca:c7:0a:fa:0f:
                    20:b0:c5:0a:02:bf:5d:13:ea:84:31:a7:26:da:f5:
                    e3:ee:dd:56:2b:25:b4:32:4e:7f:8c:2a:a3:f9:6f:
                    79:7d:18:7c:97:a5:41:25:f7:b0:ce:27:94:d3:e7:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:29:BB:74:B3:26:F4:1B:23:EE:FF:CE:C7:22:CC:3E:E3:09:A9
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:28:55:52:82:c3:10:ad:e3:00:53:d9:fa:16:a7:77:e6:
         b3:de:4d:a3:f5:9f:13:4e:20:2a:49:b4:43:c8:5d:26:dc:53:
         01:f3:22:a8:4c:ff:72:c9:38:35:07:a5:e7:f5:a6:9b:27:ec:
         61:15:45:60:f6:d4:47:bf:dc:2e:79:24:1d:28:14:27:d7:ad:
         a1:2e:02:e2:05:27:30:00:e5:a0:98:d3:15:fa:78:42:ac:46:
         01:e9:9b:7f:f5:2c:14:65:64:ca:da:f3:00:36:be:00:5d:ff:
         00:3d:1e:b6:cc:b7:66:d7:68:0e:89:98:05:e9:91:ac:56:53:
         ff:ec:3c:44:81:8e:61:34:bf:ee:fb:8c:11:ae:77:2c:6b:f8:
         11:43:19:6e:c3:5e:a8:1e:7d:57:c2:7f:24:72:a3:a1:f8:3c:
         e1:00:d1:ec:f9:b5:40:3c:3c:ba:d9:8f:09:97:e7:f2:ec:61:
         94:3d:fe:b1:e7:6d:f2:eb:99:95:31:5f:a2:9f:ec:8a:a0:66:
         27:86:46:33:69:4e:a6:b8:eb:0b:73:70:84:bc:33:f1:d3:94:
         68:f2:77:00:7e:64:4d:fa:cb:53:2c:15:68:90:9a:7d:e2:c6:
         21:7f:a2:31:b2:c1:8d:01:4c:9f:d7:b3:aa:48:45:e4:cc:33:
         87:32:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org