Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
File:                     0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json)
Hash identifier:          wNJh6DSZitoRmMfqn1BljOb3OK/F6HVURCH13+0EC+g=
Subject key identifier:   D8:20:C7:40:BB:A3:19:0E:63:CB:0D:E2:26:B9:64:47:D6:AE:DC:B5
Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
Certificate issuer:       /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Certificate serial:       692D5AFB9729C94A90D6A5D973E07BD4F88711F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
Manifest number:          021D
Signing time:             Thu 21 Nov 2024 18:10:39 +0000
Manifest this update:     Thu 21 Nov 2024 18:05:39 +0000
Manifest next update:     Mon 25 Nov 2024 01:05:39 +0000
Files and hashes:         1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: NZfGU8yt/4FgZolHeyqRZ4fGy523dk2yAV0gQzO6ODk=)
                          2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: vmSFd2zv8vehhkLSJ5hjwMMfEbdqfv8rXQ5t5KciQa4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
                          rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2d:5a:fb:97:29:c9:4a:90:d6:a5:d9:73:e0:7b:d4:f8:87:11:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
        Validity
            Not Before: Nov 21 18:05:39 2024 GMT
            Not After : Nov 25 01:05:39 2024 GMT
        Subject: CN=D820C740BBA3190E63CB0DE226B96447D6AEDCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:07:8e:71:20:61:de:f9:df:af:7c:77:d6:
                    57:61:92:d2:4d:14:ed:74:58:54:02:69:d7:86:e0:
                    54:29:9e:9b:f1:f0:d7:b3:98:c1:39:fd:90:62:42:
                    64:97:cf:62:52:48:e9:eb:e2:ff:23:1d:8c:ef:66:
                    bf:db:b2:2d:92:1e:40:08:24:dd:b6:10:50:d1:d8:
                    7e:8f:18:d0:3b:6c:a1:ae:7e:2f:0a:0f:e2:af:cc:
                    1e:86:c6:24:fa:4d:17:be:93:59:98:e4:78:03:02:
                    7b:1d:45:28:21:55:a7:e5:2b:84:c5:a7:7a:e0:0d:
                    3d:55:4a:a6:04:de:6b:d3:4c:39:48:07:ae:a9:55:
                    e9:e9:b6:0d:30:3f:a4:20:0e:43:f3:06:25:72:d2:
                    40:ba:9c:65:c5:3b:69:d5:1c:71:ec:dd:55:c6:5d:
                    aa:fe:dd:f3:2c:b3:f8:b9:33:fc:3c:92:08:9d:9f:
                    b0:0d:f5:77:97:aa:01:47:e0:bd:33:77:45:6f:9f:
                    0e:94:7c:e2:ba:0c:e9:cb:8f:a2:b8:b1:fb:a0:91:
                    ed:d7:e6:b4:9a:82:c4:85:a1:b3:f9:3c:34:ca:56:
                    b0:ef:db:f3:c2:18:66:db:f3:e0:aa:de:72:e3:48:
                    be:14:e3:88:ed:fc:36:a0:c9:7d:50:dd:ba:15:71:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:20:C7:40:BB:A3:19:0E:63:CB:0D:E2:26:B9:64:47:D6:AE:DC:B5
            X509v3 Authority Key Identifier:
                keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:4f:f0:94:b5:e3:56:9d:66:af:62:34:ed:35:84:d2:44:
         ae:57:d9:48:83:ae:07:20:cc:93:01:c8:ec:fa:2d:ec:91:88:
         07:97:ae:7b:97:d6:21:9d:20:84:55:a0:3b:4f:ae:19:6d:91:
         dc:fa:7f:9d:30:ff:e0:fa:85:aa:f1:58:29:39:26:9e:d5:14:
         2c:fd:23:59:d1:5e:ef:94:20:45:27:dc:9b:90:7e:f7:84:07:
         d6:a9:1e:ee:3f:32:76:db:9c:c9:0d:05:0c:bd:af:1f:8f:5a:
         d7:ac:67:39:fa:57:83:3b:44:8f:20:45:19:ff:08:f0:b7:35:
         88:22:1a:c9:16:d0:fe:ba:96:94:f3:08:a4:bc:e2:db:72:97:
         d7:78:ec:5b:02:95:21:2a:72:8f:c9:78:a1:13:45:97:12:27:
         89:14:dc:43:bf:c9:e0:3a:42:ac:1a:19:a3:af:10:67:cf:e0:
         84:60:c2:9f:dd:f7:3a:7e:31:28:d7:59:d1:f4:02:1a:1e:a4:
         51:27:bf:2e:c6:3c:6a:42:55:7b:41:e8:f6:91:aa:e6:79:f5:
         82:1b:61:38:36:75:e2:52:4e:2c:3b:a3:65:9a:c6:8e:f9:82:
         17:95:19:a5:1c:0c:a4:56:c9:fa:b2:85:cb:1f:48:8d:95:5e:
         8c:7a:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org