Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
File:                     A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json)
Hash identifier:          cRo03LkmQTIE66lztHSlpue/lkc4MEqobY8VxljT650=
Subject key identifier:   86:2B:36:31:79:FC:B4:5C:98:E5:BD:D5:A7:7D:E6:66:D1:7F:C6:C7
Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38
Certificate issuer:       /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38
Certificate serial:       55DCE78D7522E796919695404F05633F7B33FEFC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
Manifest number:          0121
Signing time:             Wed 29 May 2024 14:31:46 +0000
Manifest this update:     Wed 29 May 2024 14:26:46 +0000
Manifest next update:     Sat 01 Jun 2024 14:53:46 +0000
Files and hashes:         1: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: v5u4dN64edFhjGMPJmxkvZcN1xJQEu5GpMnR1c+/+RM=)
                          2: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: fyzQAR1byileLWpRPK/7NY7YckPSwa0tKNPiFomwQ00=)
                          3: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: Byg7I9Awslgv87lwUn/RXt1VdGgTmj/ldtBhTcKZMq4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl
                          rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 14:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:e7:8d:75:22:e7:96:91:96:95:40:4f:05:63:3f:7b:33:fe:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38
        Validity
            Not Before: May 29 14:26:46 2024 GMT
            Not After : Jun  1 14:53:46 2024 GMT
        Subject: CN=862B363179FCB45C98E5BDD5A77DE666D17FC6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:61:ba:87:bc:65:49:16:dc:57:63:2e:d4:
                    bd:6f:18:45:23:a8:d1:70:56:6a:00:61:16:5a:40:
                    d1:8c:2e:76:0e:14:c4:5b:83:0c:75:3d:5b:0f:52:
                    cc:83:b7:76:2a:9b:c3:57:94:b9:72:81:be:48:bf:
                    fd:42:e5:2a:5e:ba:7a:18:4d:ea:03:b5:b8:9e:8c:
                    44:2f:de:d7:86:54:32:d4:b0:ef:71:4e:9a:2f:91:
                    33:bc:f0:0d:dd:c7:7b:a8:66:49:18:fb:c9:35:45:
                    b7:8a:1b:61:95:ce:8d:41:93:f2:79:c2:95:d2:29:
                    0e:d8:19:6c:78:1b:e3:ae:69:d8:05:11:90:f1:e7:
                    63:e8:b9:94:3e:2c:6a:dd:a6:04:56:0a:d9:f6:63:
                    d7:92:b7:31:98:85:44:4c:87:b1:05:ed:21:fd:66:
                    1d:7b:99:c5:a8:4d:7b:4f:0b:77:2e:a2:ba:4a:7a:
                    75:a5:ee:41:ce:11:21:05:d1:71:e9:b6:e9:97:7e:
                    cf:86:ba:21:bf:4f:36:b1:44:49:60:dd:02:3c:f9:
                    e9:44:5e:f2:1b:a8:58:26:51:4f:5f:79:fa:90:c4:
                    eb:55:9f:83:0f:8b:d3:e6:d1:58:1a:ff:c8:56:96:
                    39:b6:92:f1:8a:50:85:03:cb:ec:c8:aa:05:31:e9:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:36:31:79:FC:B4:5C:98:E5:BD:D5:A7:7D:E6:66:D1:7F:C6:C7
            X509v3 Authority Key Identifier:
                keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:77:15:0d:82:65:ce:a5:d9:cb:a2:f2:63:9f:21:23:29:d6:
         9e:8c:53:5f:d9:2d:0f:79:fd:a4:e2:2f:5b:de:7f:08:fc:68:
         3d:30:6f:79:bd:a6:c0:00:54:32:1b:ce:eb:a6:94:5e:3d:91:
         46:3a:6f:b4:a4:96:0d:74:bd:71:1e:e9:22:cc:b8:b5:61:5e:
         9c:b2:ab:aa:85:1a:c2:2e:40:dd:15:92:7f:e8:90:fd:5c:75:
         23:89:45:c6:65:1a:7c:c1:f7:31:95:dc:b8:26:b5:1d:a0:75:
         d7:94:ce:09:a9:f5:dd:b6:2b:11:75:4b:21:a6:2b:d4:9b:f1:
         7c:a0:3c:ce:b7:d5:ce:48:f2:1d:bb:45:6d:32:3a:22:a6:64:
         b4:ed:ea:83:e9:8b:ab:bf:08:cf:88:c0:00:a6:3a:8f:01:93:
         f6:bb:e6:b0:88:3b:38:1c:8b:44:a5:14:44:17:92:5b:93:ac:
         b3:e6:a8:dd:34:ea:aa:a3:c5:f0:f2:17:82:86:12:93:ba:07:
         22:50:64:07:9a:8f:23:11:55:9f:d6:9e:8c:fc:2e:db:c7:c1:
         8e:ca:78:dd:61:1e:f4:ad:47:e4:c6:85:67:1f:26:2b:35:ed:
         3c:b7:c6:34:82:06:4d:c3:f8:8f:ec:6d:85:74:42:d1:5b:e2:
         8d:67:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 16:03:45 2024 by rpki-client on console-fra.rpki-client.org