Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
File:                     34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json)
Hash identifier:          GBSwCPY9OQfBUWaBcYwCAlu1eCZuGu4O6i8/QwzudrA=
Subject key identifier:   DD:81:76:7D:57:73:7D:EC:40:C1:45:93:59:49:3B:2A:68:97:01:9E
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       2A5192A6CE6C3B6FB727C4DE12608CB940F046EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
Manifest number:          01F3
Signing time:             Wed 20 Nov 2024 22:41:56 +0000
Manifest this update:     Wed 20 Nov 2024 22:36:56 +0000
Manifest next update:     Sun 24 Nov 2024 03:21:56 +0000
Files and hashes:         1: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=)
                          2: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=)
                          3: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: 8tXZ8KGBxsgXvGFqyVZMjxbGgFLKtoF79lpcOes+MWc=)
                          4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:51:92:a6:ce:6c:3b:6f:b7:27:c4:de:12:60:8c:b9:40:f0:46:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Nov 20 22:36:56 2024 GMT
            Not After : Nov 24 03:21:56 2024 GMT
        Subject: CN=DD81767D57737DEC40C1459359493B2A6897019E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:8a:b8:06:64:d5:90:d5:1e:74:d0:1c:24:
                    31:d0:fc:8a:87:74:54:19:00:73:f8:00:00:d0:bb:
                    31:08:31:a4:d2:25:f0:92:cd:51:de:1a:9c:ea:3c:
                    9b:e0:24:c6:1b:f1:01:3a:0c:2a:4d:cd:df:8b:c1:
                    c6:7f:2c:4b:c6:45:8a:26:bf:61:89:b9:95:c2:b4:
                    57:e0:cf:96:d0:b4:6f:01:78:9c:5d:cd:89:65:e7:
                    df:9d:4d:0d:b4:c3:9b:f4:e3:9e:9b:4e:4f:33:24:
                    aa:02:1d:64:6b:ba:0f:24:39:de:60:b5:e3:08:c7:
                    87:60:4d:99:60:14:dc:7b:c6:95:04:4b:eb:85:0d:
                    0f:cb:3d:24:1d:d4:f9:43:29:c4:8f:4d:ed:6f:f0:
                    6c:0e:f0:d5:22:95:f2:54:82:cd:21:8c:cf:1b:f2:
                    4d:2e:a7:13:31:3a:bb:41:43:0d:7f:7c:3e:be:c1:
                    24:a0:56:94:f3:7a:a2:3d:48:bc:55:9f:c4:a2:29:
                    d8:c4:bf:e0:ab:96:a8:5e:80:a1:98:d2:97:dd:27:
                    8d:04:07:93:2e:0e:da:d7:64:55:c0:7b:f9:0e:78:
                    df:95:93:19:ce:c6:3f:75:fd:96:f7:74:e5:cb:f7:
                    fe:2c:ed:e2:57:59:88:f2:a8:ec:bc:9d:d4:e0:27:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:76:7D:57:73:7D:EC:40:C1:45:93:59:49:3B:2A:68:97:01:9E
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c4:94:ed:a2:d3:dc:b5:ba:fb:01:da:3d:ab:2d:76:e6:a7:
         36:03:ec:8c:5b:9c:38:34:b8:16:68:44:e6:1b:19:4f:df:79:
         36:42:e8:e6:49:34:3c:a2:22:4c:2d:0e:20:58:07:4d:80:f3:
         4d:db:ca:5c:7f:49:20:45:bc:3e:99:73:ab:dc:0b:44:b5:2c:
         21:f3:e8:e2:f1:09:51:24:7b:1f:59:f4:46:0d:1d:0d:ff:ec:
         be:bd:53:b3:25:7e:f4:df:29:61:fa:72:d7:3b:06:0e:5f:5c:
         40:86:99:23:f9:63:38:9b:54:d3:4f:78:5e:ff:f0:20:21:9a:
         45:78:2d:4d:78:d5:41:b3:d5:3f:25:6c:b4:88:4f:eb:c6:89:
         6a:20:fb:27:22:c1:33:71:64:f8:a1:97:91:e5:0e:3c:76:9d:
         04:00:ae:66:70:40:be:6b:24:cf:ae:0b:38:d7:96:a2:3b:2a:
         81:b1:2c:92:8a:cd:31:d8:a0:b9:4c:5f:85:d9:84:3f:97:6a:
         c2:df:9c:16:4f:6a:70:b7:35:7c:ec:b3:e6:dc:4b:b9:21:bf:
         05:d8:d9:33:4c:ad:6f:12:d9:1d:4c:d6:c8:26:95:22:d9:bd:
         ef:fd:14:0c:cf:09:bc:e8:ac:c7:40:e3:20:a1:78:12:ff:44:
         50:c2:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org