Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft
File:                     3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json)
Hash identifier:          XT+Nl0klHeI8bdNXwtITE+WpUOQW255iBK92Wla5kjU=
Subject key identifier:   7D:AF:98:CF:CA:2D:E9:B3:22:68:D3:6F:BA:33:9E:2B:63:A5:5A:F9
Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51
Certificate issuer:       /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51
Certificate serial:       4659DCA94135D0F8A75D9E05B23D431214026BCE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft
Manifest number:          017B
Signing time:             Mon 25 Nov 2024 06:50:05 +0000
Manifest this update:     Mon 25 Nov 2024 06:45:05 +0000
Manifest next update:     Thu 28 Nov 2024 06:51:05 +0000
Files and hashes:         1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: 5VYrgn1zUEMmFB5PjMK8gcq3fn0Pc+poasFslffQwao=)
                          2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: 6MEyV81L/PFY6aIVrJqJmpncJLDmKmhNuj5AOVnFfyw=)
                          3: 3130332e3132302e3233332e302f32342d3234203d3e2034383030.roa (hash: 9MtyVzSA4VMwDCupiOyuohqq8njDtlZpU7JiCPF6EBI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl
                          rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 06:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:dc:a9:41:35:d0:f8:a7:5d:9e:05:b2:3d:43:12:14:02:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51
        Validity
            Not Before: Nov 25 06:45:05 2024 GMT
            Not After : Nov 28 06:51:05 2024 GMT
        Subject: CN=7DAF98CFCA2DE9B32268D36FBA339E2B63A55AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:82:85:ee:a3:40:41:07:a2:5b:4f:1a:fe:
                    01:fb:22:51:64:d5:23:84:1a:ec:59:16:bf:06:61:
                    8d:53:34:bf:55:47:44:64:49:a3:91:78:94:31:38:
                    06:d3:38:1a:ce:4a:fd:e8:89:96:6f:2a:77:6e:ff:
                    f2:95:f8:30:ef:53:b0:9d:57:2a:db:78:8d:2e:fa:
                    20:a8:47:f5:48:ff:74:1b:c1:62:5d:d3:23:d2:3a:
                    13:2f:fc:04:c4:f8:fa:31:ff:29:97:a2:21:d7:6c:
                    fe:31:90:cb:ff:7b:ba:94:46:a1:fb:b2:b8:ba:42:
                    59:8a:fc:ee:63:af:2e:44:77:a9:43:78:fa:95:b0:
                    c6:c1:08:c5:d6:2c:1b:8b:4f:00:f6:ca:3c:53:0e:
                    b2:d0:4c:06:cd:fa:c1:90:f9:a4:7a:15:ac:1e:11:
                    4a:51:3f:aa:80:19:46:22:f7:1c:39:43:43:f7:34:
                    2c:6f:b6:2d:95:29:c0:43:b1:f8:ac:d2:ee:cc:28:
                    4b:e3:83:24:68:0e:ae:14:2d:95:99:58:22:08:1c:
                    8e:df:c5:04:bb:d6:11:5c:ed:01:07:a5:90:8e:f0:
                    37:81:ed:dd:91:38:57:6a:e6:48:ed:41:71:c8:ee:
                    9a:26:49:1f:61:6b:60:0c:7b:45:7c:e3:91:ea:cd:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AF:98:CF:CA:2D:E9:B3:22:68:D3:6F:BA:33:9E:2B:63:A5:5A:F9
            X509v3 Authority Key Identifier:
                keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:47:ef:77:56:ee:d3:02:82:f3:cf:f5:0a:42:4a:63:6c:
         f7:c1:a4:34:60:83:06:f3:88:59:e5:18:8a:62:0b:8c:33:da:
         83:1b:11:cb:34:00:70:17:5c:79:d6:40:e9:88:d8:ee:d8:c0:
         64:a4:92:20:03:9c:c2:8e:90:4a:7e:ef:79:c6:e3:d3:b2:c5:
         8b:af:cf:2c:50:a6:59:ad:de:1a:6a:bf:e5:26:10:fb:ea:bc:
         7c:60:ad:d7:06:99:0f:1e:ff:dc:cb:8d:d2:05:c6:04:17:ec:
         3e:b9:44:5f:6b:1b:5e:75:e6:32:cc:57:65:d1:5d:16:93:fe:
         d9:be:8f:e5:9f:21:63:92:f0:05:0b:16:72:4b:74:7d:01:07:
         46:15:6c:ad:a4:a1:ee:a8:af:72:32:62:ec:e1:a6:0d:25:02:
         53:db:2d:95:fc:89:f5:a9:14:9a:a5:80:c4:02:8e:bf:9e:d7:
         4b:c4:f9:83:dd:2e:42:18:6b:32:db:85:34:45:97:07:d9:f4:
         e1:15:1f:ea:38:6a:44:07:4e:30:b5:71:91:ec:ec:bf:a6:5a:
         b0:5c:35:a6:27:f7:23:b2:c7:5b:66:48:54:93:3a:fc:a2:91:
         89:74:e0:8e:ce:47:8a:3e:f9:56:da:2f:d3:43:c6:8a:3a:48:
         a2:0e:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:06 2024 by rpki-client on console-ams.rpki-client.org