Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
File:                     6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json)
Hash identifier:          b3Z3t6rxOUYGNuBzLNN9cf0vQnRz4wPGxnTuAQIPdr4=
Subject key identifier:   68:48:D3:B0:3B:23:61:EB:3F:7A:62:E9:15:B6:A2:05:83:3B:6A:51
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       5B6E10F118863F42C4A1D7878B9AA5F5092CBDDF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
Manifest number:          0482
Signing time:             Wed 20 Nov 2024 22:00:41 +0000
Manifest this update:     Wed 20 Nov 2024 21:55:41 +0000
Manifest next update:     Sun 24 Nov 2024 08:02:41 +0000
Files and hashes:         1: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: 6APR7Hv9TSOuXZpSsPHBjMrP1CKzIss5d9cN4qNnUI8=)
                          2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: bGhluMXBlQ6D58wwD+73zV+Z0ql197un24tcoC8iLHI=)
                          3: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: Ta6JbgJMdmI+lltBj2Pq2mPQVrxOwdxkpnRhVsLhsYc=)
                          4: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: qdWdsvIUCg9flRqMStTQ4oe1N2TKrSaY2SzVkpN3z2c=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:10:f1:18:86:3f:42:c4:a1:d7:87:8b:9a:a5:f5:09:2c:bd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Nov 20 21:55:41 2024 GMT
            Not After : Nov 24 08:02:41 2024 GMT
        Subject: CN=6848D3B03B2361EB3F7A62E915B6A205833B6A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:ca:6d:2b:cf:0f:87:4e:f3:b5:95:71:5d:
                    59:6f:25:21:d9:ce:ff:56:39:af:38:51:ef:ec:2d:
                    40:b9:b9:ed:40:cf:47:d1:24:36:fd:ff:f5:e4:be:
                    a7:f5:7b:8a:a2:66:b3:a0:ed:66:1e:9f:e7:93:5a:
                    e6:cc:02:c1:a8:6e:78:a1:15:b1:c2:38:58:09:43:
                    ec:13:41:f2:46:5b:98:85:8b:8f:91:ed:08:06:56:
                    a8:17:00:c3:3e:a1:70:e2:17:0c:43:e0:2a:54:c5:
                    e2:99:5b:de:3c:2a:9c:fe:f0:c5:35:51:91:0f:73:
                    fd:97:37:6d:e6:96:31:0c:47:12:ce:41:cb:6d:3e:
                    26:41:79:22:80:41:7e:15:53:d4:a9:a5:a4:37:0a:
                    81:c4:6a:18:0a:4a:23:26:72:79:07:53:2f:97:d6:
                    9f:47:78:d4:7d:4a:55:4e:c4:cf:0b:22:0a:87:2c:
                    82:43:9d:14:b3:6a:aa:42:0b:14:75:3b:c7:00:ca:
                    3b:33:e8:89:c9:f5:6f:2e:92:87:93:c5:21:e6:8c:
                    83:71:3e:4a:7a:f4:26:f5:1c:c1:a4:d3:9f:c1:d0:
                    ea:99:db:97:62:dc:dd:4d:24:8f:fa:37:b8:dc:5d:
                    44:cf:a8:bc:2e:35:d0:38:68:df:0a:45:e4:bb:40:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:D3:B0:3B:23:61:EB:3F:7A:62:E9:15:B6:A2:05:83:3B:6A:51
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:78:d3:0b:35:32:cf:7d:cd:c8:98:ee:8a:6d:e8:18:35:7c:
         4e:64:13:3c:84:b1:e5:df:c2:5e:fc:4e:73:5f:02:1d:13:45:
         21:c5:dd:16:ff:cf:58:fd:5a:a9:fe:6b:95:a5:0a:ce:a9:e7:
         d8:82:14:5a:87:88:ef:c4:02:b4:03:5a:37:95:92:13:29:e8:
         30:96:68:d2:e0:09:70:be:ef:5f:18:2f:5e:87:88:a6:5e:65:
         10:94:3a:3c:79:e8:a4:97:58:5c:f8:4c:3c:f3:67:ee:60:34:
         15:c5:67:08:a9:29:3c:08:a7:c0:c2:98:1f:f4:4a:3a:57:7e:
         d4:e1:1c:2b:69:80:06:cf:54:77:a3:43:d4:ac:75:80:e8:ee:
         08:26:5a:36:7f:8e:75:bf:c8:36:50:45:b0:9c:e9:85:bb:c9:
         1f:57:13:98:12:dc:e5:6c:f7:11:6c:3c:5c:19:2e:c7:40:eb:
         04:98:f3:7a:f3:e5:d8:46:68:da:1d:43:b9:45:89:bb:87:53:
         86:b8:ce:a0:ef:40:af:6a:7d:0f:f1:6e:87:5f:75:42:e2:fa:
         f4:cc:33:aa:31:5a:a1:b2:b9:e2:5b:94:c2:f1:88:7d:34:03:
         fd:e6:f2:ca:04:3f:80:df:70:30:3a:ef:63:b7:32:4c:fa:55:
         b0:ae:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:18 2024 by rpki-client on console-ams.rpki-client.org