Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          /aJE5qd/M5J9iBhjII/twwiBXNfzSrpwbWtHq5mqgPg=
Subject key identifier:   8C:FC:AD:01:EE:04:C3:E0:84:9D:A1:2E:12:AB:61:3B:87:2D:85:97
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       6D25EC36562D81406D47F1035183DE3A47B4E0DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          0232
Signing time:             Fri 22 Nov 2024 09:02:24 +0000
Manifest this update:     Fri 22 Nov 2024 08:57:24 +0000
Manifest next update:     Mon 25 Nov 2024 11:39:24 +0000
Files and hashes:         1: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          2: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          3: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          4: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
                          5: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: tjMvtLHF5dLVLtS847iZoSfyfbGty84r7dt1Me2O7us=)
                          6: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)
                          7: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          8: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          9: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          10: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
                          11: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:ec:36:56:2d:81:40:6d:47:f1:03:51:83:de:3a:47:b4:e0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Nov 22 08:57:24 2024 GMT
            Not After : Nov 25 11:39:24 2024 GMT
        Subject: CN=8CFCAD01EE04C3E0849DA12E12AB613B872D8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:ab:b8:ef:03:eb:df:bc:a0:69:3d:3c:0c:
                    bc:1c:02:fa:e8:a5:12:d2:8e:60:50:c2:dc:e8:1c:
                    65:39:a7:87:2f:fb:a4:9a:6e:04:04:3f:ec:b9:cf:
                    ed:4b:06:29:d2:55:72:99:a1:62:c8:0c:54:c5:39:
                    a6:af:ba:53:7c:81:58:35:02:53:36:b8:45:9e:c0:
                    6b:14:77:8d:05:95:cd:e0:5f:c9:85:b3:b2:5f:7e:
                    0c:5f:42:78:ba:4d:a3:9f:c8:6a:dc:4a:3d:bf:db:
                    b6:c0:9d:e0:61:6e:66:8c:4f:47:a4:8a:ff:13:8d:
                    98:db:8f:0a:a8:9f:13:76:29:ab:2d:2c:e2:b2:8e:
                    81:28:0e:b7:1e:b6:83:7a:c3:1e:85:b3:18:da:bb:
                    51:15:83:c4:66:a8:58:64:99:a0:6c:c5:0a:9b:72:
                    b0:9d:a9:a4:66:33:a1:4f:be:b6:78:48:b4:2d:38:
                    19:99:67:5b:20:31:24:4a:e6:91:c0:3f:86:7e:d3:
                    41:9b:30:07:e0:4b:40:b7:5c:00:5c:1f:95:6c:8b:
                    7c:6d:67:92:f1:c1:fb:bf:03:84:ab:ea:b9:9e:6b:
                    6a:46:62:f1:79:f3:40:d6:01:92:fb:23:ec:4f:3b:
                    d6:0e:5e:f8:8d:e9:bc:c7:02:99:44:f3:4a:d4:d4:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:AD:01:EE:04:C3:E0:84:9D:A1:2E:12:AB:61:3B:87:2D:85:97
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:a2:dc:d4:55:55:fa:39:78:81:4a:f4:65:2f:ba:05:1f:
         2f:02:56:e3:25:2c:32:d7:4c:2c:01:54:0d:b3:0f:22:82:2a:
         a7:f9:48:08:31:11:32:52:d2:87:9f:7a:00:6f:39:37:50:a3:
         71:e4:72:13:91:37:f7:85:d3:7e:74:a7:dc:bc:0f:48:66:1a:
         25:84:f6:e8:e4:2e:c6:c4:4e:a7:6c:6e:f2:47:39:4e:3c:c8:
         80:16:6c:d1:c2:90:1e:ef:7c:87:87:cf:ac:91:5a:6b:30:33:
         b2:ee:2b:d1:23:60:50:5b:66:bd:51:e7:07:25:3b:a3:32:d2:
         85:5b:72:53:58:2f:65:98:4a:00:fa:7d:b1:99:51:ce:35:f6:
         8e:f0:75:42:be:9d:c7:95:cf:96:59:6d:32:59:ce:d1:d1:78:
         24:4a:9b:c2:42:12:b4:bf:ae:1d:d0:4f:60:3c:cd:4d:1a:97:
         4a:5b:8e:d4:0a:9b:43:1e:c6:e7:1a:55:f5:e7:8a:b3:cb:c9:
         d8:a7:6f:22:2a:c2:64:6c:d6:4a:c8:10:17:8f:33:f7:b4:64:
         ac:3a:93:e6:cf:13:32:c0:3c:73:94:2a:73:3a:be:5b:7a:75:
         70:ff:eb:22:74:f2:e8:c2:10:be:f7:16:90:81:78:e9:98:30:
         5e:e8:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org