Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft
File:                     4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json)
Hash identifier:          TjsjZ6P+/D4hnLtDmuSZFAKGdr+d3Kj3c+gHAENahyQ=
Subject key identifier:   62:0F:BD:4D:C2:28:41:7E:D1:2F:05:25:AF:8B:09:7D:2D:85:3D:6A
Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23
Certificate issuer:       /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623
Certificate serial:       3C5567FB8FA26670129A34C138715E5DCD1D3454
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft
Manifest number:          0121
Signing time:             Thu 21 Nov 2024 23:41:37 +0000
Manifest this update:     Thu 21 Nov 2024 23:36:37 +0000
Manifest next update:     Mon 25 Nov 2024 08:45:37 +0000
Files and hashes:         1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: 3X8QR9vKXGetgzEScwKz/o8SDi64VsRDENnmEXxINPA=)
                          2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: NiK6xYZ8vy6OHKp22RF1q3a7wOKlktVGT6ECuqLE4qo=)
                          3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: ogSyYNKbgCRevRd7AyNOfBh49GE7IMF9pkuQac3W0kU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl
                          rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:67:fb:8f:a2:66:70:12:9a:34:c1:38:71:5e:5d:cd:1d:34:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623
        Validity
            Not Before: Nov 21 23:36:37 2024 GMT
            Not After : Nov 25 08:45:37 2024 GMT
        Subject: CN=620FBD4DC228417ED12F0525AF8B097D2D853D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:cc:6e:d4:6b:ce:20:b5:40:9f:cd:ba:09:
                    da:0b:7e:dd:45:c8:e6:89:2f:7c:21:99:a8:fa:2a:
                    65:3e:72:7d:55:6a:af:9a:59:cb:dd:46:3f:5f:5a:
                    31:3e:c9:f4:83:14:7e:8a:04:8d:e4:50:d3:ac:46:
                    4d:d0:f1:3a:e3:67:d4:fa:3e:6b:3d:15:fc:96:42:
                    0c:ee:51:13:8b:f5:73:6b:fd:43:96:6b:4d:15:f0:
                    fe:72:72:26:5b:3f:cf:fc:13:ad:f5:a3:69:34:04:
                    93:bb:32:b8:1d:97:f7:69:d4:27:cb:f0:a0:9f:f3:
                    ae:5c:72:b8:f2:15:ab:3c:0b:7b:10:5e:07:c6:30:
                    36:25:bf:7e:af:29:96:f1:56:c4:c7:8d:3f:cb:49:
                    c8:6d:e2:74:cf:d7:b4:59:4e:e1:e8:a4:89:d0:b1:
                    5c:a6:4d:ec:1b:83:09:a0:58:36:32:4b:56:e2:ed:
                    63:2d:d0:44:6b:4b:16:ad:41:2c:6b:de:a5:55:37:
                    5d:6d:64:80:56:b2:5a:df:9b:7b:38:7f:f5:06:ed:
                    89:0b:b5:5e:b7:59:59:13:f6:e0:00:ee:12:be:ab:
                    50:9d:d4:56:46:c6:18:05:24:1c:b8:3a:c0:d4:7b:
                    52:6b:ed:1b:23:5f:d7:c5:e6:4f:23:c8:20:8a:83:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:BD:4D:C2:28:41:7E:D1:2F:05:25:AF:8B:09:7D:2D:85:3D:6A
            X509v3 Authority Key Identifier:
                keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:93:53:2a:7b:68:fb:9b:4e:98:60:bb:bf:91:89:63:9e:
         15:db:01:5d:64:c9:c8:19:19:6d:d9:de:fc:e8:52:7a:e1:70:
         5d:36:76:86:15:d3:08:be:af:35:dc:c8:db:e0:d8:55:0f:9d:
         1b:7a:2b:65:ac:49:95:15:5f:0c:16:3a:b3:11:63:70:a3:9a:
         fc:a6:a5:d8:30:51:40:8d:5b:9a:22:05:df:ec:b9:0b:f2:43:
         5b:d3:99:47:82:f9:ac:bd:da:62:11:75:c0:d3:84:b9:63:9d:
         99:7f:d5:b7:06:b0:59:52:e5:14:ee:a0:be:34:12:c7:c5:7c:
         c6:e9:1b:14:e0:d6:c6:c7:db:23:f8:58:a4:0f:bc:51:b0:5f:
         a5:08:e7:d0:9d:17:ab:69:94:c1:09:18:73:a9:a1:07:29:60:
         f5:52:5d:03:78:74:82:17:34:03:cc:4d:0c:d6:90:49:c4:38:
         ac:08:df:24:79:7e:8a:ee:bf:55:44:62:43:da:06:c6:71:c9:
         a0:55:67:ac:96:34:b6:c8:ce:3d:31:b6:41:25:ca:27:c0:31:
         22:d5:0e:4d:a8:5d:f3:9e:90:f2:d1:a1:5d:00:7f:7d:5b:fa:
         ea:82:b2:39:58:1d:2e:cf:2c:20:e9:84:82:de:d2:8b:01:a6:
         98:5f:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org