Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft
File:                     68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json)
Hash identifier:          zSlGOYd8XBnoMyGnG6OTRIWwG3hhTcdFfjprvv7KQEQ=
Subject key identifier:   5F:56:5C:31:EF:E9:89:AA:4A:8E:EA:85:48:C9:87:58:69:1B:C2:9F
Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF
Certificate issuer:       /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
Certificate serial:       0B6874F723DB8B5A8725252BB5BAED66BB7FD52B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft
Manifest number:          0184
Signing time:             Fri 22 Nov 2024 06:01:18 +0000
Manifest this update:     Fri 22 Nov 2024 05:56:18 +0000
Manifest next update:     Mon 25 Nov 2024 17:48:18 +0000
Files and hashes:         1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=)
                          2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: R8ZninwFY1GvYUyRFUi96uWMvl79Fulis87BAdIPQsU=)
                          3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: AKzYRBKAgaDMXTDjMBdoks0xvDWlgZswunocDWfSChs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl
                          rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:68:74:f7:23:db:8b:5a:87:25:25:2b:b5:ba:ed:66:bb:7f:d5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
        Validity
            Not Before: Nov 22 05:56:18 2024 GMT
            Not After : Nov 25 17:48:18 2024 GMT
        Subject: CN=5F565C31EFE989AA4A8EEA8548C98758691BC29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:45:ae:8c:2b:4f:75:25:e0:bd:a2:25:55:
                    55:05:c9:43:68:46:1a:eb:a7:c2:84:fc:ac:06:4d:
                    81:e2:b9:22:25:da:78:97:0f:9b:c3:cb:00:38:a4:
                    2b:48:11:3b:50:cb:cc:ad:c3:97:5f:b3:d4:34:e1:
                    5c:bd:1b:d2:72:76:9c:36:41:b9:3d:8f:f3:f6:35:
                    20:82:85:3f:37:30:7f:00:59:5a:20:80:55:34:0a:
                    e8:03:be:7a:8b:1f:c3:ca:cc:4c:da:f6:b7:aa:7d:
                    2d:84:fa:6d:3a:c5:51:29:db:a2:29:2e:ad:41:ed:
                    4d:3b:38:2e:6f:f9:34:ad:5e:3a:e6:d7:d3:79:f3:
                    61:1d:cc:50:47:46:7a:8c:35:b2:d5:e4:a8:44:90:
                    f1:5d:d0:66:59:d4:fa:64:59:c7:07:ef:65:42:96:
                    5c:a9:c6:42:42:76:1d:35:ca:1b:02:91:e6:c9:40:
                    97:71:e8:e4:5f:f6:97:fa:16:ea:eb:7c:be:4f:6b:
                    9e:e6:c7:71:8a:87:4f:5c:61:de:46:1e:f0:5e:1e:
                    73:3b:a0:17:17:77:64:22:78:6c:ff:9e:12:bb:be:
                    51:e4:ab:63:0e:e5:56:cc:78:7c:1e:53:8c:bc:65:
                    4c:f2:f5:ca:76:db:01:e4:4b:18:19:f5:8c:cb:72:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:56:5C:31:EF:E9:89:AA:4A:8E:EA:85:48:C9:87:58:69:1B:C2:9F
            X509v3 Authority Key Identifier:
                keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:e6:88:c5:f1:d8:7d:89:a2:c2:43:3b:48:ff:bb:4b:26:
         4d:a0:6d:81:88:d2:d1:02:25:c7:f5:18:0f:f2:ec:95:b3:c3:
         82:e2:12:4a:ed:c0:0c:96:87:40:1b:1e:e8:fc:94:ce:7d:31:
         9c:82:bd:ff:5c:10:a9:66:10:a4:54:2e:8d:c4:01:e7:6f:47:
         8b:ec:e2:03:a3:2b:ab:dc:59:56:9c:d5:df:42:05:ad:78:e7:
         a4:4b:21:80:bc:78:46:b7:2b:a4:56:e2:54:4f:fc:8b:61:0a:
         e7:55:88:a8:65:9b:b8:a2:26:d2:09:f9:ac:f3:3b:ad:80:7e:
         61:ea:1d:3c:6f:e1:d3:bf:74:fc:75:43:e8:e8:0d:03:a7:c8:
         a5:da:e0:75:44:8e:dc:ae:4a:82:1c:cd:e1:88:63:2b:11:23:
         a5:fc:07:9f:45:61:c7:71:3d:0c:ec:3c:36:36:12:bf:14:50:
         0a:1a:16:b5:bb:4a:62:dc:a3:e2:04:7e:03:b8:af:dc:3d:c5:
         70:a9:f0:b3:02:09:70:70:e2:4f:94:34:a0:e7:d0:3d:49:b2:
         97:58:b0:9c:27:bc:68:b1:98:6f:1d:7a:f0:cb:eb:46:3d:e8:
         97:31:27:8f:68:43:60:9a:e1:c1:2d:26:df:54:21:44:c1:7a:
         c9:2f:b4:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC2h09yPbi1qHJSUrtbrtZrt/1SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2
MDAxRUVGRjAeFw0yNDExMjIwNTU2MThaFw0yNDExMjUxNzQ4MThaMDMxMTAvBgNV
BAMTKDVGNTY1QzMxRUZFOTg5QUE0QThFRUE4NTQ4Qzk4NzU4NjkxQkMyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvk0WujCtPdSXgvaIlVVUFyUNo
Rhrrp8KE/KwGTYHiuSIl2niXD5vDywA4pCtIETtQy8ytw5dfs9Q04Vy9G9Jydpw2
Qbk9j/P2NSCChT83MH8AWVoggFU0CugDvnqLH8PKzEza9reqfS2E+m06xVEp26Ip
Lq1B7U07OC5v+TStXjrm19N582EdzFBHRnqMNbLV5KhEkPFd0GZZ1PpkWccH72VC
llypxkJCdh01yhsCkebJQJdx6ORf9pf6FurrfL5Pa57mx3GKh09cYd5GHvBeHnM7
oBcXd2QieGz/nhK7vlHkq2MO5VbMeHweU4y8ZUzy9cp22wHkSxgZ9YzLcqvDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX1ZcMe/piapKjuqFSMmHWGkbwp8wHwYDVR0j
BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB
RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx
RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx
MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG
MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGek5ojF8dh9iaLCQztI/7tLJk2gbYGI0tEC
Jcf1GA/y7JWzw4LiEkrtwAyWh0AbHuj8lM59MZyCvf9cEKlmEKRULo3EAedvR4vs
4gOjK6vcWVac1d9CBa1456RLIYC8eEa3K6RW4lRP/IthCudViKhlm7iiJtIJ+azz
O62AfmHqHTxv4dO/dPx1Q+joDQOnyKXa4HVEjtyuSoIczeGIYysRI6X8B59FYcdx
PQzsPDY2Er8UUAoaFrW7SmLco+IEfgO4r9w9xXCp8LMCCXBw4k+UNKDn0D1JspdY
sJwnvGixmG8devDL60Y96JcxJ49oQ2Ca4cEtJt9UIUTBeskvtBs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org