Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
File:                     F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json)
Hash identifier:          r5VUvTQefT0B/tGT7vNTTxxSWvboIxYJvMKfJhykI5E=
Subject key identifier:   61:AC:42:5C:15:E2:F4:73:44:5A:70:ED:88:DD:28:CE:6B:CB:45:29
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Certificate issuer:       /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial:       136E39AF83D1C4E2A56605E4B20CDEE4A1DD65FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
Manifest number:          0303
Signing time:             Fri 22 Nov 2024 01:01:26 +0000
Manifest this update:     Fri 22 Nov 2024 00:56:26 +0000
Manifest next update:     Mon 25 Nov 2024 12:59:26 +0000
Files and hashes:         1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: 4fxeQutAHCIlBP4cv0mvnjFbleyvOk9Tizufv+tSvQo=)
                          2: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: PmJmHV1aw3cv9W8CbfKUGo4lyWFhdeYXo7SdZ5VWYgA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
                          rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:39:af:83:d1:c4:e2:a5:66:05:e4:b2:0c:de:e4:a1:dd:65:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
        Validity
            Not Before: Nov 22 00:56:26 2024 GMT
            Not After : Nov 25 12:59:26 2024 GMT
        Subject: CN=61AC425C15E2F473445A70ED88DD28CE6BCB4529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:b3:9f:68:e6:80:bb:23:7b:49:bd:06:83:
                    83:7f:31:62:1e:32:4e:5d:83:da:17:e2:cb:0e:93:
                    47:3a:20:b9:a5:fd:89:61:66:05:15:b4:b5:a4:29:
                    7a:b2:7d:83:30:19:1e:d8:a7:8a:53:08:52:3e:fa:
                    32:46:b2:86:4e:3e:3e:a3:3c:ff:82:34:9d:3c:3e:
                    70:b4:fb:5e:b8:53:4d:d0:5d:b0:d3:a4:cd:8e:de:
                    fd:e0:4c:4b:a4:39:fd:52:5d:30:fe:f2:5a:e7:a5:
                    91:5a:e3:05:db:67:e6:b0:7b:e0:6d:23:12:f5:dd:
                    59:09:76:ff:ae:d5:55:05:20:c1:b3:b4:39:dc:19:
                    c8:06:cb:c3:b1:47:26:c6:d1:90:b0:e0:a9:aa:f4:
                    31:c6:e8:8a:d0:52:50:60:56:52:49:c8:f9:ac:1a:
                    38:6e:4d:3c:f6:77:01:c8:72:1e:08:42:03:1c:4f:
                    92:d7:48:cc:da:d0:5d:85:58:c9:54:a7:db:89:2e:
                    4b:84:f3:db:a2:cf:b9:79:33:11:22:d5:75:c5:2c:
                    30:8f:f4:48:df:88:99:34:19:f2:3c:2a:51:b2:f1:
                    6d:c7:2e:d9:0d:d7:cc:3f:8e:08:f2:5c:f5:20:47:
                    1f:d5:a8:f7:66:fd:b7:e4:57:9f:2f:1e:e1:c2:f2:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:42:5C:15:E2:F4:73:44:5A:70:ED:88:DD:28:CE:6B:CB:45:29
            X509v3 Authority Key Identifier:
                keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2a:f5:20:84:63:8f:67:6d:04:3e:1e:82:a7:80:42:39:30:
         28:93:fc:ed:c5:bd:f0:b8:bc:c7:d7:ef:f1:e5:03:94:2d:e0:
         0b:7e:88:19:fb:29:10:01:8a:25:d0:c4:79:4a:10:b7:f0:69:
         25:81:f6:58:81:7d:10:0a:2a:9e:dc:59:d5:c6:53:ed:f6:26:
         e9:71:88:f0:8e:80:5a:05:d4:aa:ef:66:6b:9a:23:84:93:3f:
         f1:b5:55:37:05:66:5d:a3:9a:84:3d:63:f4:3a:0f:62:f4:26:
         9b:97:52:bc:6c:60:14:c1:a0:f7:79:c8:7b:9f:31:0f:81:4a:
         9d:66:e5:9c:b1:8e:ab:7a:b7:ac:d7:95:8d:a8:c9:49:73:9f:
         42:70:08:49:69:c2:53:3d:dc:87:f2:0a:ae:8b:a3:81:9c:b1:
         ce:12:29:92:06:a4:16:c0:02:8c:15:bd:58:f9:71:f7:de:60:
         35:bf:47:9f:26:09:91:e7:ca:8d:61:00:83:2b:66:b2:ff:6e:
         8a:53:0e:9d:2a:99:92:45:2e:3f:fb:56:62:71:e2:9b:bd:8c:
         61:45:9d:27:1b:e4:9d:b3:13:78:99:24:a2:04:59:b5:2d:77:
         78:89:83:14:4d:ab:f3:0e:26:11:92:99:27:c1:96:38:3f:06:
         31:3b:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org