Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
File:                     30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json)
Hash identifier:          7vJwgyyldASX8PclKmCkEAPrig1N77VYrxzP9geU6wY=
Subject key identifier:   5F:B1:62:27:24:F9:E7:A7:64:95:B3:CD:EB:BA:F3:18:44:7E:6B:00
Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF
Certificate issuer:       /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
Certificate serial:       7AE1EFE16A283AB45D42150C61E024CCABBF7204
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
Manifest number:          9E
Signing time:             Wed 20 Nov 2024 17:51:48 +0000
Manifest this update:     Wed 20 Nov 2024 17:46:48 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:48 +0000
Files and hashes:         1: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=)
                          2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=)
                          3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: FN7J/a8pHIOkgYuEIRWLqYERLIOcjA7vyIiw2H1sUz8=)
                          4: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl
                          rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:ef:e1:6a:28:3a:b4:5d:42:15:0c:61:e0:24:cc:ab:bf:72:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
        Validity
            Not Before: Nov 20 17:46:48 2024 GMT
            Not After : Nov 24 03:00:48 2024 GMT
        Subject: CN=5FB1622724F9E7A76495B3CDEBBAF318447E6B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:4d:bf:66:84:fe:63:1a:d5:f6:5c:f7:31:
                    95:53:3a:05:32:55:b4:92:8a:fc:45:8e:90:dc:bc:
                    77:cf:86:fa:65:43:b4:79:02:dc:96:67:e1:9f:08:
                    ef:32:5d:c0:cd:05:b0:19:22:8f:71:1c:fe:b7:45:
                    02:26:30:be:86:5a:71:d2:b6:cd:c0:f7:f1:1f:16:
                    2f:ed:98:c1:35:c1:47:d9:52:ea:0d:a6:0a:82:42:
                    b6:ab:ae:f6:30:8f:35:f2:03:f1:0b:44:3b:69:33:
                    a2:2d:73:28:8c:dc:2a:e1:37:1f:49:42:7e:b2:55:
                    82:53:6a:a6:86:1a:b2:98:71:78:39:63:90:71:13:
                    4b:69:75:47:77:8c:84:14:2c:fb:1a:48:73:a9:90:
                    9b:22:f4:a9:6f:02:80:50:53:e6:fc:18:b6:81:ac:
                    10:1d:ad:a6:34:24:87:16:c3:5e:66:26:56:b0:24:
                    cb:24:17:81:6f:92:66:71:80:d7:55:7a:89:09:30:
                    49:d0:12:5e:59:a9:eb:41:66:76:56:c9:81:0d:c2:
                    3f:78:ad:a5:d9:c1:3d:6e:8b:a8:d4:5b:fc:fd:2b:
                    18:f1:07:05:b4:65:13:3d:66:c6:87:64:c0:0c:8b:
                    43:79:fd:42:a1:f1:51:48:c8:0a:25:7b:70:2b:33:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:62:27:24:F9:E7:A7:64:95:B3:CD:EB:BA:F3:18:44:7E:6B:00
            X509v3 Authority Key Identifier:
                keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:82:a9:2c:1d:af:09:c5:c8:7b:d5:a2:47:87:b4:e7:b9:d7:
         e9:e0:b2:93:ef:ba:99:99:bf:af:a1:31:65:48:db:96:25:86:
         62:9f:5a:d4:10:c3:6e:75:6e:37:05:29:a2:6e:7a:19:86:4b:
         4a:51:74:4b:9f:2d:6b:c0:f0:9d:2c:4e:60:0d:9e:4e:03:be:
         c4:c8:c2:1b:4f:39:a3:b0:d7:e4:29:51:ae:44:5c:25:82:4f:
         0e:5f:a9:1c:4f:94:a5:92:e6:53:c5:41:a8:39:d8:d3:ae:2a:
         28:d0:be:5b:4f:9c:20:59:84:75:37:d0:49:b3:0c:35:06:35:
         85:36:00:d7:2c:8d:ed:47:91:7e:b2:49:69:93:64:9d:8c:19:
         73:51:db:a3:6b:04:ca:88:34:9d:26:0d:c8:7d:28:f5:90:9b:
         ff:a0:7d:d1:d7:f3:80:68:e7:37:b6:44:65:3d:13:3c:5e:a7:
         38:55:4e:a7:31:58:56:32:b3:48:f6:16:57:01:40:76:aa:be:
         34:03:6c:e5:02:7e:bb:f2:b6:53:84:6f:dc:1a:cb:66:62:79:
         44:98:a2:ad:9d:f4:6c:ca:89:9d:71:3f:b0:ac:0f:c5:28:ee:
         51:70:7f:29:61:26:c5:21:f4:62:33:71:49:8e:4f:91:91:09:
         47:61:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org