Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File:                     B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier:          EQ3VLnWIY7Ej+XC5X0bo8fQT4RxJaoLW/CkvbQPfqq0=
Subject key identifier:   A2:16:CF:0F:5B:57:83:F7:CA:07:48:7B:9E:A9:DB:D7:E5:DC:6D:B9
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer:       /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial:       582D0718030E5A394B9530A65177357FDFA68764
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number:          01E2
Signing time:             Fri 22 Nov 2024 01:01:46 +0000
Manifest this update:     Fri 22 Nov 2024 00:56:46 +0000
Manifest next update:     Mon 25 Nov 2024 02:36:46 +0000
Files and hashes:         1: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=)
                          2: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=)
                          3: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=)
                          4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=)
                          5: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=)
                          6: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=)
                          7: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=)
                          8: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: 1bbErIj7xXjBnyfTmjd50PNzBmuXANNMpAeXdPinQBU=)
                          9: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
                          rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:07:18:03:0e:5a:39:4b:95:30:a6:51:77:35:7f:df:a6:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
        Validity
            Not Before: Nov 22 00:56:46 2024 GMT
            Not After : Nov 25 02:36:46 2024 GMT
        Subject: CN=A216CF0F5B5783F7CA07487B9EA9DBD7E5DC6DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:42:d8:f0:97:5c:27:84:e3:b0:47:59:71:
                    da:4d:cc:28:2b:fa:20:5a:96:f2:bd:64:0d:10:38:
                    2b:99:4d:4c:18:68:39:92:a9:84:da:51:d4:d3:b2:
                    12:a7:07:df:38:0e:77:f0:d3:54:31:bf:5b:dd:60:
                    c6:8c:63:44:a5:3c:34:3b:f5:cb:4e:c4:12:63:14:
                    f9:e2:d0:0d:fb:81:c1:11:41:d0:55:6e:62:f6:17:
                    4a:86:bd:d2:24:49:84:67:8b:df:93:33:45:44:3b:
                    7b:10:ea:23:dc:64:02:ed:eb:da:ab:0c:ec:52:c6:
                    ab:03:72:9c:2a:73:86:b6:15:1d:94:10:f6:66:09:
                    d8:28:b2:17:35:a5:b9:6a:fb:11:9f:c8:b3:03:4f:
                    93:e7:95:12:6b:60:55:7a:ea:70:27:bf:c3:15:20:
                    36:34:da:72:9b:a1:f2:28:d6:d6:55:c3:4d:b6:b9:
                    b8:9c:b4:f2:df:03:6f:11:af:f2:99:24:6d:3b:55:
                    59:5d:82:e7:73:fc:21:3f:ac:2c:78:e7:5e:7d:ad:
                    f5:81:9c:db:e6:1d:0e:92:d9:21:01:aa:37:a5:db:
                    98:19:a4:0f:f3:9c:b8:18:d4:6a:0b:dd:ee:b2:cc:
                    27:4f:b1:ee:30:d4:80:83:5d:d4:15:b2:01:cc:7c:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:CF:0F:5B:57:83:F7:CA:07:48:7B:9E:A9:DB:D7:E5:DC:6D:B9
            X509v3 Authority Key Identifier:
                keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:a6:2b:72:db:5f:41:f7:9d:d2:50:dc:a5:c1:6a:fc:ac:
         36:cb:37:4b:6a:6c:75:7e:93:07:1c:a3:58:13:e5:91:58:28:
         27:00:be:21:c9:a9:0d:5a:11:0b:74:71:af:0e:ab:3e:f8:82:
         11:fd:0c:62:53:c8:24:0e:8e:7d:21:45:3d:f5:a6:62:bb:78:
         e3:10:02:d7:6f:b0:53:c7:64:d5:ce:e8:ee:42:11:94:bc:9a:
         bc:3a:98:d7:1f:54:54:b9:6e:93:c2:b1:6a:b8:de:5e:55:bb:
         00:09:3a:df:e6:91:cd:bd:9b:0e:94:08:b4:38:93:30:21:49:
         d6:3f:b7:a4:f8:52:83:af:cd:9e:4c:73:75:76:b3:d8:2b:ae:
         f7:9d:5a:a1:62:e5:ac:b8:19:9e:83:c7:91:82:a9:ba:0e:52:
         b1:46:49:ac:4d:6b:96:83:ae:5c:56:e4:95:85:51:0e:d3:1c:
         21:cc:ba:af:0c:4a:87:77:fc:5c:48:0b:3a:3d:be:9a:9c:de:
         dc:ab:a4:f6:cb:fe:56:45:54:f4:2e:06:10:53:79:bd:74:42:
         b9:cd:fd:63:c1:57:94:e0:3c:4d:25:57:e7:70:05:7b:a6:74:
         6f:d8:bb:5d:a8:7b:55:45:6a:03:40:1b:8a:0c:22:58:8d:d4:
         67:97:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org