Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
File:                     BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json)
Hash identifier:          QU3mBZUP8aiKoXbry9YSyOhs9Cvh5Vb4IsrzYXXpQf8=
Subject key identifier:   DC:0A:47:52:3A:5F:1F:90:C7:8A:D8:80:39:2B:A2:5E:0A:33:FC:EE
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       29CB4A8D3A5DDAC4885EAB848FE14D1B0EAA44C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
Manifest number:          03EC
Signing time:             Thu 21 Nov 2024 15:12:11 +0000
Manifest this update:     Thu 21 Nov 2024 15:07:11 +0000
Manifest next update:     Sun 24 Nov 2024 16:24:11 +0000
Files and hashes:         1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: GNR1G9qgqANJN1bFgQVrQ3f5CNVGdCJvyCo5IAjGvvE=)
                          2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: TJd7Y3wfP84prGibqKk8GLq8tUoRV9YHBFdrUmigk/0=)
                          3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: UaS3zPZeggcx54lI9xEQ4g+svcN5rSzpshCUfl79v+E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cb:4a:8d:3a:5d:da:c4:88:5e:ab:84:8f:e1:4d:1b:0e:aa:44:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Nov 21 15:07:11 2024 GMT
            Not After : Nov 24 16:24:11 2024 GMT
        Subject: CN=DC0A47523A5F1F90C78AD880392BA25E0A33FCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:d4:7a:bd:ed:b1:92:ce:82:fa:ae:43:64:
                    e1:3e:73:5a:4a:99:43:96:35:c0:0f:96:59:04:69:
                    57:72:4d:e0:9b:63:c4:a7:b3:c2:92:f5:34:cd:3f:
                    2c:6d:c9:ae:f0:f4:c6:fb:82:68:cd:06:5e:dd:73:
                    2d:1e:7f:bd:42:d9:ff:1a:a9:11:85:13:a2:13:b0:
                    20:c4:a5:4a:a5:08:40:e0:59:7a:10:69:57:c4:cf:
                    bc:9c:32:02:05:34:49:da:f0:63:45:3f:f2:00:06:
                    6c:d7:d9:5a:24:af:c1:af:f9:a9:98:16:93:f0:b0:
                    68:e6:cd:64:7b:3f:0a:6b:17:87:d6:b2:1e:77:58:
                    df:cb:51:60:6f:ab:68:03:82:74:43:bc:f6:62:7b:
                    26:48:fc:94:c5:4a:aa:e6:a6:71:f4:82:b3:62:9f:
                    86:98:d1:61:9f:0b:a4:89:7e:08:0a:0a:04:34:88:
                    9e:1a:5d:dc:3b:f9:c9:21:6e:ac:44:7e:29:2b:d7:
                    e6:be:3c:b6:0d:66:31:7f:dc:46:e1:fe:4c:8a:bf:
                    15:bd:dd:d6:85:a9:d5:1d:e7:48:36:1d:03:1c:fe:
                    3b:2a:63:48:2d:93:bb:2e:c8:07:f3:cc:8b:42:b3:
                    4b:98:a3:16:cb:5f:e1:41:0c:57:92:e3:23:a8:e0:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0A:47:52:3A:5F:1F:90:C7:8A:D8:80:39:2B:A2:5E:0A:33:FC:EE
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:62:73:88:a8:66:c5:1c:33:80:cd:ea:49:bd:fb:13:6d:
         95:25:2d:63:cd:7b:a5:4d:2e:ca:5f:4b:7d:08:42:d4:fb:68:
         e3:59:7f:aa:d6:01:7d:2c:24:0f:3c:10:42:51:32:97:8c:67:
         2f:49:a9:f0:eb:3b:42:5f:e7:f5:26:0c:a8:d6:be:6c:67:f6:
         7b:3c:74:a6:19:e8:90:d6:d0:ee:5f:06:2e:ff:85:98:61:87:
         a6:af:9f:6c:10:45:5d:96:f1:ec:47:01:c9:6e:d0:92:80:10:
         4d:00:d8:0c:2d:ee:6b:54:41:8d:e8:73:43:ae:04:04:60:90:
         d1:dd:e1:b7:30:d9:0c:46:83:70:2c:b4:ff:a3:18:fa:c1:64:
         52:eb:2c:a5:3b:75:85:c3:fb:57:32:d0:5e:41:4d:f2:a6:90:
         f7:7e:e0:63:50:9f:10:ad:45:54:12:c6:c5:7d:17:8c:8e:ce:
         eb:65:3b:3a:5a:22:1a:1d:02:30:be:dd:8f:4c:2e:99:28:f8:
         50:00:6b:78:f7:d3:31:84:ba:33:97:1f:13:08:90:b4:ef:ca:
         41:0c:9a:b1:3e:99:8f:d8:12:72:5d:c5:de:8d:df:a6:bd:ed:
         a2:5a:a9:cb:17:bb:a5:b2:f2:22:82:06:b0:c4:02:6b:54:27:
         27:cc:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org