Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
File:                     994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json)
Hash identifier:          iC+vm6CFFhD6ukArpG13UW7R/N47M8hpBXhfOMTiKCI=
Subject key identifier:   4A:99:61:B1:3A:3A:C9:EB:0B:DD:4B:A6:8F:70:19:45:D9:59:19:B4
Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
Certificate issuer:       /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Certificate serial:       471B3A0CD8EA603FB2B2564A04E623FD5E18E7E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
Manifest number:          42
Signing time:             Sun 24 Nov 2024 01:31:41 +0000
Manifest this update:     Sun 24 Nov 2024 01:26:41 +0000
Manifest next update:     Wed 27 Nov 2024 04:31:41 +0000
Files and hashes:         1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=)
                          2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: jvsdF/y8332ZgUDKQXStnkRXp3omW4o6zwcpGwQvwdE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl
                          rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1b:3a:0c:d8:ea:60:3f:b2:b2:56:4a:04:e6:23:fd:5e:18:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
        Validity
            Not Before: Nov 24 01:26:41 2024 GMT
            Not After : Nov 27 04:31:41 2024 GMT
        Subject: CN=4A9961B13A3AC9EB0BDD4BA68F701945D95919B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:8b:d8:a3:5f:3e:37:6d:3a:8c:53:87:90:
                    39:73:a3:c8:7a:ad:f6:14:9b:43:ad:64:fd:ce:15:
                    92:cf:85:13:47:04:dd:f3:97:01:9f:55:7b:73:05:
                    fc:5a:84:67:9a:cb:68:29:56:6c:c0:04:06:3e:7d:
                    e8:09:23:8f:dd:0d:2d:e9:97:c4:aa:df:3c:23:eb:
                    90:2c:71:0d:91:31:02:7a:2b:df:67:bc:91:bb:0d:
                    22:a4:94:7a:aa:b0:8e:b5:1f:33:af:ea:88:48:a8:
                    b7:1c:f4:f2:62:5f:da:0a:86:07:5a:57:ae:36:71:
                    9c:03:9d:4e:22:86:43:90:01:c5:e3:aa:80:37:00:
                    0c:46:7a:6c:8f:00:98:83:b5:7c:15:3e:94:06:a7:
                    3b:ae:dd:eb:da:87:83:a1:bd:ff:2e:be:be:55:de:
                    65:f4:34:f0:79:e4:8f:f6:72:1a:ab:af:b7:70:94:
                    68:40:83:14:52:d9:4c:c8:44:9f:9a:8c:9a:3b:64:
                    30:c2:5c:97:23:7c:43:c7:fd:94:20:c7:d8:31:8b:
                    56:6d:0b:5a:15:e1:64:d6:97:5f:20:7a:2f:3b:fb:
                    83:67:dd:c9:d4:96:40:6a:2e:8a:9a:ec:e5:52:90:
                    8f:27:2f:2a:d5:18:4d:f1:e4:b6:3d:c8:50:db:11:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:61:B1:3A:3A:C9:EB:0B:DD:4B:A6:8F:70:19:45:D9:59:19:B4
            X509v3 Authority Key Identifier:
                keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:62:e6:a2:79:1b:92:36:7e:95:06:27:67:85:69:c3:07:
         06:b0:56:11:96:f7:3b:dd:03:35:22:0c:4d:7e:83:90:b4:42:
         10:b3:e9:aa:c1:ef:dc:7a:50:e3:20:c8:97:33:fd:48:8c:6f:
         81:ef:37:b2:a3:73:a9:d4:e3:ae:12:d9:41:a6:0b:21:41:e8:
         dd:b9:27:56:72:c1:f0:67:24:a2:7e:d3:6f:28:02:da:95:83:
         fa:cf:52:9c:bf:59:e6:3f:c5:88:f6:cf:f1:cb:d1:3c:14:29:
         84:4d:49:75:1a:91:51:22:f5:c4:53:9c:e0:f2:14:01:77:48:
         c1:f7:b4:47:34:e8:0c:ba:74:40:1d:ba:79:8d:68:94:8a:a6:
         f8:9d:54:e4:e7:0e:ed:63:28:04:19:4c:bc:7b:b9:75:2c:b9:
         9a:df:74:8c:c6:f2:6f:7d:68:e1:2e:8e:27:e6:bc:43:0d:29:
         85:4a:33:f6:81:10:5b:fb:ab:4d:b2:d4:08:59:28:4d:5c:f4:
         5c:69:55:33:49:84:14:2d:18:de:39:bd:b1:3d:1b:9f:b0:40:
         1e:54:e7:c3:a1:a9:d6:91:bb:6d:2e:7b:23:c6:98:bf:47:90:
         74:17:de:9d:12:8b:3c:91:8f:45:11:48:3b:a0:14:33:45:99:
         a1:9f:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:15 2024 by rpki-client on console-fra.rpki-client.org