Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
File:                     98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json)
Hash identifier:          IuGyHaP0+Sqn1Zc9+E2lNcz8t2G+t+kABBSIWRe+HIc=
Subject key identifier:   49:12:71:15:5E:BF:FA:88:CA:59:EB:2F:8E:B2:F4:27:42:42:F2:BD
Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04
Certificate issuer:       /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
Certificate serial:       67AC784F73426297A13A330B85CAD32E436289F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
Manifest number:          22
Signing time:             Fri 22 Nov 2024 00:00:41 +0000
Manifest this update:     Thu 21 Nov 2024 23:55:41 +0000
Manifest next update:     Mon 25 Nov 2024 10:56:41 +0000
Files and hashes:         1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=)
                          2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: SSvN13uyI+ZNh2ouUQutyrIjM1dYCS8fNKpTjUejiaM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl
                          rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:78:4f:73:42:62:97:a1:3a:33:0b:85:ca:d3:2e:43:62:89:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
        Validity
            Not Before: Nov 21 23:55:41 2024 GMT
            Not After : Nov 25 10:56:41 2024 GMT
        Subject: CN=491271155EBFFA88CA59EB2F8EB2F4274242F2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:9b:af:81:05:de:8d:13:d8:07:02:f8:b6:
                    7f:36:74:f9:f4:c1:24:97:0b:3e:7c:f4:53:9d:4a:
                    88:29:13:45:00:9f:b4:69:33:52:b7:da:f5:d5:3f:
                    bf:c7:32:1e:a0:ef:6f:c5:91:b1:5e:fe:4d:5e:49:
                    53:69:c6:b5:1a:ff:d9:c3:46:0c:fa:6a:81:46:3e:
                    1f:ea:c3:d5:3b:5e:11:ed:96:4b:b7:b0:71:c4:a2:
                    cd:00:e9:cf:fb:8e:dc:7f:b9:24:57:99:d5:5d:5f:
                    e9:fe:48:e2:21:0c:39:1e:6c:ca:d1:2a:34:ff:d4:
                    cf:be:33:ab:b9:09:63:fc:e3:34:09:1b:f5:5c:04:
                    1b:ab:1e:6b:4c:40:b1:d4:b9:8b:5f:81:1a:68:9d:
                    07:88:39:e7:2c:95:f7:6f:ad:16:b4:70:d4:a0:10:
                    e7:50:3e:bf:e6:49:25:fd:c4:f5:74:44:f1:62:b3:
                    86:05:af:5f:81:44:64:c7:c2:b3:76:40:91:bc:ed:
                    92:26:63:0e:03:c9:f6:fd:2c:e1:d3:f2:30:ec:d9:
                    c9:76:1f:47:2e:06:65:b9:71:2d:9c:33:1e:65:33:
                    65:ef:83:b2:0d:c1:2f:62:cc:c8:06:86:35:00:41:
                    95:fe:03:49:8f:be:cd:23:9a:ab:36:d0:34:d6:8c:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:71:15:5E:BF:FA:88:CA:59:EB:2F:8E:B2:F4:27:42:42:F2:BD
            X509v3 Authority Key Identifier:
                keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:ab:b7:f4:6f:26:4b:53:26:5c:c1:3d:42:3c:02:b7:c1:
         ad:66:de:2a:20:6d:52:5a:3b:e3:37:1c:04:22:21:50:aa:36:
         5f:8d:e9:75:6b:78:a8:d4:6d:15:84:b1:bd:54:58:27:d0:28:
         cf:81:6c:20:61:38:03:6c:ab:9b:a4:b8:84:6a:e2:f3:1b:6c:
         5e:01:87:56:1d:03:a4:9b:5e:30:16:48:13:75:dc:e3:92:6c:
         97:5e:1c:1d:15:b1:68:ac:ff:a3:f2:14:01:64:a3:9b:1b:cb:
         43:b2:29:28:42:b4:d5:cb:01:2e:20:0c:05:d3:0c:f9:4e:85:
         61:35:7c:8e:8c:46:df:4e:ac:60:63:22:1a:b9:03:a4:d5:4b:
         d5:47:36:fc:cb:c2:4a:7d:d5:ff:36:07:9d:8a:89:4c:8a:46:
         1e:c7:4b:a8:7d:f2:65:f9:be:74:07:e0:8c:2a:60:91:42:59:
         a1:6a:46:1e:bf:f2:41:7d:87:09:a7:05:55:b8:10:5b:25:60:
         7b:0d:30:df:14:6c:df:dc:21:c1:99:04:68:63:c2:d3:63:2c:
         87:7b:2a:e6:eb:57:46:ee:61:10:73:31:7d:60:34:b6:fb:bd:
         f5:49:69:76:a1:c3:ac:1e:06:b7:fb:2d:be:45:7f:93:f5:e2:
         aa:91:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org