Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
File:                     03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json)
Hash identifier:          G2ZaT265sGfDpYy/kxqhrAYcmUryL9ZB105YkOWR0W4=
Subject key identifier:   D4:A9:B8:8D:86:1C:D2:0F:1F:37:77:70:D7:22:9C:BA:55:74:E4:45
Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0
Certificate issuer:       /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
Certificate serial:       57BC709DB534A4F54E86C62C9396361ECCC82B24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
Manifest number:          02A6
Signing time:             Fri 22 Nov 2024 11:40:52 +0000
Manifest this update:     Fri 22 Nov 2024 11:35:52 +0000
Manifest next update:     Mon 25 Nov 2024 23:23:52 +0000
Files and hashes:         1: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: 6Vw3GaWOGmpZiZhgpMhIeJYsNZRqF40uM6KZvnaa68Y=)
                          2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: ROwlnpqCyaXK8jtPlJ5Ky0HyxksYlACHiUQekhnZN0w=)
                          3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl
                          rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bc:70:9d:b5:34:a4:f5:4e:86:c6:2c:93:96:36:1e:cc:c8:2b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
        Validity
            Not Before: Nov 22 11:35:52 2024 GMT
            Not After : Nov 25 23:23:52 2024 GMT
        Subject: CN=D4A9B88D861CD20F1F377770D7229CBA5574E445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9c:32:cd:a2:3f:c1:a6:22:92:68:bc:f7:b6:
                    5b:0c:7e:9f:31:40:d8:57:a6:f1:b2:a8:24:e2:61:
                    79:f0:ab:5f:c8:9c:7c:f2:fa:4e:19:4f:a9:e6:d2:
                    42:04:0e:43:8a:de:df:c6:0c:82:c6:6a:bc:d2:2c:
                    7c:fb:14:6c:e4:c5:f0:6b:b7:84:14:92:8f:36:f6:
                    20:13:e0:d0:85:fe:d4:e0:aa:b2:bc:15:3d:3b:44:
                    36:51:1e:93:7d:cf:62:a8:44:ce:bf:6a:02:a6:70:
                    4d:22:62:45:0b:27:e0:2f:4f:63:25:b9:fc:e7:6c:
                    90:f1:a6:92:7a:1e:ff:02:d7:8f:37:4c:43:46:df:
                    d5:05:51:0e:98:58:98:54:bf:e5:8e:46:d2:43:f6:
                    e6:6d:94:58:b7:b5:94:d7:55:18:85:ef:2a:61:9a:
                    79:fb:10:e0:81:81:bb:fc:bd:b9:b3:e2:a5:66:8e:
                    08:1e:45:f3:22:ed:2e:24:8d:de:2a:7d:d1:d0:d8:
                    e7:46:aa:d8:aa:74:b8:c4:e3:73:05:97:f1:f6:20:
                    0a:66:b6:72:8c:3b:58:01:c0:9f:37:d5:b9:00:91:
                    8a:74:dc:a3:cd:d1:01:63:25:8a:a1:2e:5a:b8:dd:
                    1c:23:0c:5f:76:4b:cc:a3:4f:e9:a7:33:c7:8c:42:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A9:B8:8D:86:1C:D2:0F:1F:37:77:70:D7:22:9C:BA:55:74:E4:45
            X509v3 Authority Key Identifier:
                keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:33:dd:e0:06:de:5b:93:b6:fc:a4:43:56:81:bd:21:f5:c7:
         64:33:a0:e5:1f:fe:c5:73:46:ca:58:5a:dc:6d:98:83:25:32:
         cf:57:a2:6e:03:95:ce:c3:35:9d:9e:93:38:2e:e3:d0:89:e0:
         18:0c:c9:77:85:75:c1:39:e4:6e:b4:b9:c7:91:35:aa:b5:e7:
         ae:2e:8d:5b:47:40:db:14:24:40:69:cb:af:12:6a:1f:93:eb:
         1b:ec:c0:ac:3d:f7:28:5c:bf:6a:d3:6a:36:2f:81:1e:bb:1e:
         0b:cf:e7:17:cb:c6:d0:eb:fc:0e:c7:f9:5a:22:10:dc:7e:6f:
         95:7b:d9:1b:73:03:39:07:96:23:2a:76:ed:b9:e0:44:90:30:
         67:5b:e9:e1:bd:01:df:f3:19:be:57:da:11:04:6f:14:ce:de:
         6f:ee:a5:d1:69:1d:79:57:37:d2:16:6b:35:41:f7:d1:46:f8:
         60:b5:ce:b1:ec:2b:c9:0a:fc:b8:80:09:8a:52:42:95:82:b0:
         fe:62:b8:2f:ac:43:99:93:c0:1c:c5:3d:f5:6e:b7:07:6d:1a:
         a9:59:95:c7:35:c6:31:f8:17:51:ef:b9:c0:e3:10:a8:07:69:
         af:be:71:01:dd:fd:fc:0b:3c:26:6c:a0:2a:33:21:b8:c7:64:
         aa:97:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org