Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          qb3IOv+aGozXAYm7bxQqxarKad5nBH9VeQaVeJ7/IYQ=
Subject key identifier:   C8:6D:9D:6A:46:5E:77:0D:E5:EF:EB:8E:CD:6D:87:FA:E0:F5:AE:F3
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       166F77289C18F0EDB7AD80859813F1C62B983DE3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          0486
Signing time:             Sun 24 Nov 2024 18:52:18 +0000
Manifest this update:     Sun 24 Nov 2024 18:47:18 +0000
Manifest next update:     Thu 28 Nov 2024 00:05:18 +0000
Files and hashes:         1: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: NPccw/uPbjU6Ng0Kv+MnSicLOTD8CXxnBeD+TitCSK4=)
                          2: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: zzu9Pa4aUrYBrkU/dzzrAVQ+KTnyVkmxoRDur+r4jp0=)
                          3: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 4qURHOrI0QyBD0a7W7pQdCuS3TJVGrbs9mQvKOhMAFQ=)
                          4: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: i+PocK8SEp44TFX6dfSGcfLf+KIkgk/b4aqmIJNUvI4=)
                          5: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: TM3GYewxHHLLEzakQI/e4lcxtVAjFWl7n3OxdIcy9do=)
                          6: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: RAbCLxobZi0sT1mrrSFIFMMt66YKWEiZkYMYeXBiifg=)
                          7: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: Sjz+Mw4h9hDynPTU4wmbIFS9wojilMuVRHQLpoKIQ3U=)
                          8: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: vV6vBRlkITa8jghEoirfvIaWfm5t/cKVlxyWo1iGWuE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:77:28:9c:18:f0:ed:b7:ad:80:85:98:13:f1:c6:2b:98:3d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Nov 24 18:47:18 2024 GMT
            Not After : Nov 28 00:05:18 2024 GMT
        Subject: CN=C86D9D6A465E770DE5EFEB8ECD6D87FAE0F5AEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:5a:f3:61:2c:41:12:8a:e0:a9:7a:1c:fc:
                    44:e7:9e:26:df:4e:79:76:66:51:b2:c3:b2:c3:32:
                    7c:7d:d6:eb:9e:d6:7d:90:37:41:41:f4:51:31:a5:
                    93:74:2a:18:fd:62:8b:9e:c4:8e:c6:3c:8a:18:54:
                    f8:d6:75:f6:7d:d6:3a:fc:bb:61:c2:ac:43:e0:ba:
                    51:b7:a3:a8:fd:13:69:6a:47:17:13:b1:a3:57:b6:
                    f2:44:07:3e:0f:26:31:5b:e1:ad:57:d6:43:19:fb:
                    b1:cb:6f:59:68:47:27:ac:ee:87:f1:c2:35:b3:34:
                    f0:03:69:56:00:de:19:b0:ca:db:42:ce:b4:c4:ce:
                    88:86:fd:6f:33:ae:31:25:2b:cf:4f:87:46:81:a8:
                    06:23:53:fd:d3:43:75:c9:c2:dc:bb:cd:e1:34:25:
                    9a:06:6e:7b:4e:7d:30:69:61:58:93:80:f7:e0:46:
                    36:56:d0:72:1b:31:f1:43:f0:0f:39:f5:18:cf:8f:
                    ba:d8:90:c4:94:2e:48:7c:a8:e2:23:94:7f:e9:e5:
                    6d:d0:f0:1d:71:dc:58:34:fe:db:12:ba:8d:a7:56:
                    08:bf:83:ac:e3:26:9f:9b:1e:da:4b:09:4c:5f:ad:
                    9e:b5:cb:32:9d:5f:73:87:bb:d5:1b:d7:11:be:f9:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:9D:6A:46:5E:77:0D:E5:EF:EB:8E:CD:6D:87:FA:E0:F5:AE:F3
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:22:77:c7:e3:34:eb:80:d9:65:5e:cb:d5:40:56:43:96:
         53:fa:9a:54:50:4a:00:dd:1d:77:bd:04:92:7b:d1:c9:b1:f4:
         3b:b4:58:e5:bc:ed:3d:ad:cc:c1:04:2d:86:c4:b6:f6:fd:22:
         86:f3:c7:e2:e3:ea:be:c4:89:e8:43:f3:e0:6d:0d:51:12:0c:
         66:7d:d0:8b:6d:ed:a6:e2:aa:3d:39:41:38:45:3d:52:d3:0c:
         04:c4:14:9f:ac:da:85:83:ae:af:5a:65:71:46:6a:55:78:c7:
         05:44:24:5e:d6:63:5c:e9:f0:4f:7b:24:48:c7:ca:38:29:87:
         6e:ab:ed:e4:2a:ff:cf:7c:d8:0b:a1:35:af:c6:7d:3d:f6:a8:
         a0:c0:19:1c:23:92:dd:91:41:f0:0d:de:a8:b8:4c:78:e7:d6:
         76:80:f3:3f:37:31:80:b8:b4:d9:35:fc:d6:22:50:0a:61:09:
         90:ac:13:57:5f:c0:b7:f6:17:18:38:93:5d:1f:22:85:1c:ec:
         39:1b:2d:b1:61:9c:63:5a:c3:54:8c:66:71:48:8e:0b:0e:f6:
         a8:d4:cb:fd:9d:8f:ea:5c:50:1c:c8:00:d1:50:ba:38:de:88:
         54:b7:72:18:bd:05:a4:f9:f2:a9:37:9d:ef:22:1e:93:14:2f:
         7f:ff:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org