Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          KyKFGLS0BnvIAhqO//K1T3BIo28z48ZGTZCrSURVGQw=
Subject key identifier:   08:C0:25:51:C2:FA:B6:9E:E9:51:83:10:1B:78:27:1B:58:E7:F5:49
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       7BB701FAF9A9E3B340D7E175E16B46A1E048D78F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          04A2
Signing time:             Sun 24 Nov 2024 07:01:14 +0000
Manifest this update:     Sun 24 Nov 2024 06:56:14 +0000
Manifest next update:     Wed 27 Nov 2024 16:23:14 +0000
Files and hashes:         1: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: kuZS7DLLlgmMTpJidQpDkrlhCk8WMeXuEnGoo6NlY4A=)
                          2: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: LwcbD+sHZALJzN975SZcrEx7OkI4wSuCBSFEZ0s2LcA=)
                          3: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: wWiP9md+rg4jkV6o4vvI8Sn+AClqa4kF5AOzHWEDjoU=)
                          4: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 0D0mLk+Xng2R+/IUUM+8XhOsNRalYtt+3M4upuYxRoc=)
                          5: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: 1XpGe+qbE1OOWK8DTNkeP+L7ndY3082zjqj/g6hwuD8=)
                          6: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: ReHGyi3wPol8w+dXN58JQZ3jKDZy41EdBUQ9KqgqxNE=)
                          7: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 4lUl/bGr3LsLR/vnV3xMIVxucYqdv89T4oDlo5SwVJ0=)
                          8: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: iL4PMKbvrqXhDgoAoAWusZEJsxlC06RfPP/P+d5o2nI=)
                          9: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: VFu/a1cA0ZEWNMRb70AJQ94UKhs1qJHzoWA/EYCTxZY=)
                          10: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: cvXp0ryiRslGKbI04u3NZ/8isAZXiXHmgeBpSrGft3g=)
                          11: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: ctLBkJdn5QnPjKLcq9nVyPuWBDgr1w513Qyi8PIDRPM=)
                          12: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: gYdBbEHqi/8GEIbwa19GzLrLlojYDwF4Guaq4yqtU1w=)
                          13: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: DdfVx1Y4zhGVI0wY6FDIqnJ7U45MXqnwWFPD5ypl2Cc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:01:fa:f9:a9:e3:b3:40:d7:e1:75:e1:6b:46:a1:e0:48:d7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Nov 24 06:56:14 2024 GMT
            Not After : Nov 27 16:23:14 2024 GMT
        Subject: CN=08C02551C2FAB69EE95183101B78271B58E7F549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:81:8b:ce:df:8c:15:2f:87:38:26:fc:32:
                    49:f9:2c:1c:fd:ee:e5:86:39:02:99:c9:ca:b6:24:
                    f5:45:20:1e:88:c1:3f:10:ea:1b:3b:d8:b0:c2:d5:
                    3c:93:b0:f2:9b:98:09:d3:f9:24:36:b6:b2:80:5e:
                    ec:1f:cb:f9:10:3c:44:a3:d6:4b:2c:7a:80:88:95:
                    d2:b1:c8:94:eb:ee:7a:f4:2c:1c:1c:6e:c3:fd:76:
                    93:6f:86:60:ea:da:d8:10:60:65:79:32:66:ec:f5:
                    e8:b3:b5:4a:2a:86:e4:30:f4:4a:f3:7f:74:cc:3c:
                    bd:45:ca:1f:3f:b8:03:6d:84:72:cc:69:0c:83:da:
                    b7:be:47:c7:3c:f1:96:bc:e4:5b:b6:da:22:05:23:
                    41:7f:75:1f:28:27:9b:e8:b9:c4:7e:0c:d0:40:67:
                    77:f5:6d:a7:c6:0f:0f:44:2b:0a:fc:7e:e1:96:e4:
                    b1:b2:f7:b9:71:e7:03:69:97:21:25:01:01:31:d1:
                    db:7b:cb:fa:78:a7:96:c6:e1:76:ad:50:7c:80:6c:
                    82:18:a1:92:ce:cd:0b:09:d8:20:ab:54:95:2d:25:
                    2f:dc:6a:ea:27:22:30:f1:bd:23:fb:87:01:44:e2:
                    ee:60:51:16:6e:9f:e4:2c:e9:4c:e7:2e:62:bb:89:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:25:51:C2:FA:B6:9E:E9:51:83:10:1B:78:27:1B:58:E7:F5:49
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:82:93:2d:82:ce:5f:90:86:9a:cf:5e:fb:27:18:64:06:
         ea:89:02:19:d8:f6:87:21:5b:ea:c6:99:c4:be:89:b0:65:ca:
         0c:b4:11:a5:77:e7:25:eb:5c:86:08:49:42:5d:b1:f2:06:20:
         73:f1:22:6f:7f:03:19:a2:8f:59:19:e5:e7:7a:71:d6:3c:21:
         a1:ea:69:31:33:d9:a0:0a:71:d2:74:d9:cb:20:3f:fe:33:d6:
         ab:82:aa:94:40:a0:d5:2c:df:76:62:2a:73:97:ee:37:92:11:
         19:74:55:10:40:57:fd:7a:f9:7d:c7:4e:84:9b:08:c0:ee:f7:
         12:06:9a:43:07:78:2b:10:d2:af:19:b3:5c:64:f0:0c:d6:75:
         e2:c8:bf:7e:66:5b:b3:e2:f7:7a:1c:a6:c2:13:5d:f6:73:ca:
         53:32:2a:22:ae:49:75:58:cc:39:2a:ea:83:3c:46:f3:7c:bd:
         92:f3:92:47:7f:88:f8:af:fb:b9:00:c3:49:6f:fb:78:3c:aa:
         2c:b5:a8:bb:9c:62:ee:4e:62:45:2c:4b:da:8e:86:41:a3:6f:
         6c:3f:7b:a0:1c:e1:f8:6e:81:c0:3b:a8:30:36:6a:f3:b9:72:
         fc:9d:0d:2d:4f:d0:2f:0d:e0:81:74:0c:fc:e0:e2:0f:88:c1:
         97:c6:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org