Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
File:                     E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json)
Hash identifier:          gX2KFDlJ1yUhYWnGtafJqCp1wv0uMxmbpW8tLFUOxnc=
Subject key identifier:   74:22:9C:E9:24:7B:88:A5:28:D1:4D:10:1D:32:85:0B:B7:46:B3:EA
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Certificate issuer:       /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial:       066AC9370CD87A7260409C5306DC1174841AB7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
Manifest number:          040A
Signing time:             Fri 22 Nov 2024 14:21:16 +0000
Manifest this update:     Fri 22 Nov 2024 14:16:16 +0000
Manifest next update:     Mon 25 Nov 2024 15:29:16 +0000
Files and hashes:         1: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: xj+PbLEiBlk6ae4LUIMb4/TmxCb667GK6fqkkfPLKn0=)
                          2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=)
                          3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=)
                          4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: pIrm7aPUPJFZ4XifD9qRVgfWPMQmX5/I7DSyyV9fZas=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl
                          rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:c9:37:0c:d8:7a:72:60:40:9c:53:06:dc:11:74:84:1a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
        Validity
            Not Before: Nov 22 14:16:16 2024 GMT
            Not After : Nov 25 15:29:16 2024 GMT
        Subject: CN=74229CE9247B88A528D14D101D32850BB746B3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:78:9b:09:27:bc:fa:a8:45:c2:0a:0e:c1:
                    6b:6e:94:5d:8e:37:52:d1:67:16:87:15:d3:27:d8:
                    61:1a:68:fb:1f:4a:de:fb:ba:17:eb:b7:7c:54:0d:
                    e3:1e:2c:a8:4a:40:19:42:b3:1c:dc:93:05:94:e7:
                    d0:9f:75:ab:a7:d5:c6:ce:3a:de:9f:b1:e4:c2:ea:
                    fc:8f:00:84:de:16:6c:e7:43:7a:3b:ac:73:75:8c:
                    ee:c8:76:95:60:3f:0c:18:61:95:df:a3:78:64:cd:
                    53:08:18:e3:04:5b:8a:d5:20:a1:f3:a3:62:b1:73:
                    d7:0f:34:fc:f9:4a:5f:f4:11:3a:a7:73:dc:97:54:
                    0c:87:a0:1a:28:2b:53:ae:49:9c:dd:ab:50:84:f3:
                    78:7e:85:82:3a:9b:ff:02:db:e7:ec:8b:9a:85:76:
                    43:56:cd:2d:0b:67:2d:53:da:96:e5:5d:6f:80:b2:
                    9c:b5:ab:86:67:25:d3:81:b9:b4:91:b7:30:e0:7a:
                    ba:cc:3f:f4:2c:a3:40:b5:1e:d1:48:d2:68:54:9d:
                    af:89:47:94:19:19:c2:f2:ea:55:28:56:5e:ec:5e:
                    c5:d7:84:48:33:2c:d7:63:46:18:e1:3c:78:94:01:
                    2f:b2:e5:d0:83:10:a8:8d:59:b4:2d:ff:95:13:98:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:9C:E9:24:7B:88:A5:28:D1:4D:10:1D:32:85:0B:B7:46:B3:EA
            X509v3 Authority Key Identifier:
                keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:75:2f:a4:e0:50:73:e5:16:f5:2c:fb:34:9c:99:ee:4d:13:
         ef:81:9a:c5:92:a7:08:2b:e4:4a:09:3b:5f:a0:b3:ed:78:4a:
         e2:05:e5:3e:f9:d0:0d:17:4b:e7:fd:60:29:03:c1:56:f0:5f:
         d6:d0:90:e6:10:50:1b:6c:02:97:6f:b9:1e:60:aa:88:31:8f:
         dc:14:11:92:31:cd:d6:2e:2e:e2:e9:18:62:63:26:91:ea:74:
         df:e0:e8:fa:22:36:e3:8c:b0:de:7f:18:ff:1f:82:a4:5e:9d:
         16:62:8e:51:b1:26:13:ed:20:88:20:22:d8:55:2c:00:68:78:
         d7:e1:a2:7d:3e:8e:f8:bd:11:cf:9c:28:a7:9d:11:6a:20:18:
         5a:39:7a:e8:df:7e:16:08:cc:83:08:8f:18:87:fa:5e:b3:20:
         bf:73:ae:27:2e:7a:94:b6:52:01:09:34:f5:d3:58:13:01:a9:
         9f:70:75:29:70:6f:8e:8d:5d:d8:ae:3e:c6:74:3c:77:86:97:
         fd:1e:0a:fc:55:d0:32:65:d9:13:87:16:a2:bd:9d:0f:b2:94:
         ef:37:26:7c:0a:c6:4d:e7:49:ec:b0:b6:8f:51:ff:42:33:da:
         36:55:5c:dd:f9:90:00:32:a2:46:68:a7:a7:f4:7f:8d:6d:7b:
         24:62:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org