Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          dvhhNl8lLWpE3LTuNOZx3QeJv3uvlvvuOhYgNjuwebw=
Subject key identifier:   A2:45:5D:F7:83:1C:1B:82:09:97:8A:E6:D9:83:AB:3B:9A:A0:9F:FE
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       36699934C1B5D6256E3464EC9D313AF6B66B3932
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          0483
Signing time:             Thu 21 Nov 2024 21:30:01 +0000
Manifest this update:     Thu 21 Nov 2024 21:25:01 +0000
Manifest next update:     Sun 24 Nov 2024 21:34:01 +0000
Files and hashes:         1: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=)
                          2: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=)
                          3: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=)
                          4: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=)
                          5: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: JqnHBuoS+PotiCyCNoXAhHB+2sbylsQS/sjhK/Fpoko=)
                          6: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: ii86NXnr/WYmHnry427PiBTknuSG/osb8uEvWhmtijc=)
                          7: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: bcv9+A8fnNa4nTKxyLUpprqdZBOoY3R/2lzSPgws1GM=)
                          8: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=)
                          9: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=)
                          10: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:69:99:34:c1:b5:d6:25:6e:34:64:ec:9d:31:3a:f6:b6:6b:39:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Nov 21 21:25:01 2024 GMT
            Not After : Nov 24 21:34:01 2024 GMT
        Subject: CN=A2455DF7831C1B8209978AE6D983AB3B9AA09FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:28:90:7d:67:86:5d:20:58:de:e1:4c:f3:
                    0e:59:b8:30:28:fc:35:c4:6c:26:70:18:a9:e6:17:
                    87:3a:59:7d:0a:7d:62:92:49:24:93:77:43:17:c2:
                    c2:30:08:a3:38:75:7b:f5:82:59:51:b3:4f:4b:b5:
                    c4:44:1b:16:fd:36:1c:5e:a8:9e:54:c3:50:14:a7:
                    52:45:e8:db:74:31:11:e1:ea:3e:e5:a3:b2:c3:30:
                    a2:90:78:1e:38:00:0c:e2:6a:aa:b4:76:18:10:be:
                    67:8f:51:25:d9:3e:81:c3:32:32:f4:f7:f4:2b:51:
                    bc:a0:34:88:59:b6:55:64:72:fe:55:48:b8:45:b1:
                    0d:5f:1c:94:38:e3:da:6b:58:0e:59:29:fd:08:01:
                    61:c3:1f:66:77:68:d6:22:62:ff:8f:d6:c1:40:43:
                    c1:f2:2a:8d:0a:b1:99:49:53:ca:d6:95:99:45:b4:
                    59:63:92:82:1f:97:7d:57:10:d3:17:78:b6:ca:fa:
                    b2:8a:72:ef:5d:5e:80:75:6c:e4:0e:ad:8a:5b:a3:
                    e0:57:8a:32:37:1f:d7:a8:6d:c9:e3:8e:d9:61:dc:
                    87:88:bc:77:96:8d:95:0e:26:62:d2:77:f0:5f:ea:
                    28:e5:88:86:36:da:c3:36:89:be:0a:20:22:a8:dd:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:5D:F7:83:1C:1B:82:09:97:8A:E6:D9:83:AB:3B:9A:A0:9F:FE
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:40:9f:06:87:e7:a4:f8:e6:63:8b:3e:0a:c6:37:1c:e6:a0:
         71:ec:8e:63:35:93:83:86:38:de:bf:cc:6e:26:77:db:58:e4:
         c8:96:8c:e0:32:0c:22:f8:cd:53:05:16:c1:8d:22:81:59:14:
         ce:92:b3:5d:8c:c3:b1:52:e6:c7:d5:f1:ba:87:fc:8d:fb:95:
         bf:b4:fd:18:fb:91:a8:91:b1:c3:48:3c:b7:e8:9d:b7:b3:41:
         bd:de:a0:c4:8b:0d:d3:b2:82:01:1e:1d:04:7d:98:37:e6:33:
         52:bb:bb:4e:42:38:90:56:21:ca:ff:5c:1c:1f:eb:cd:34:69:
         9d:61:bf:e9:49:60:78:cb:95:30:f6:ff:26:c0:ee:5f:1d:45:
         5a:f8:02:ba:db:50:72:09:89:77:d3:d8:b4:96:03:74:32:36:
         f5:8a:08:e2:4d:8f:16:16:ac:b9:0b:19:b9:cf:ed:2a:55:54:
         2b:a7:ea:7d:24:df:20:eb:f3:49:7b:48:ef:e8:4b:80:7a:3b:
         e9:0c:6a:70:48:50:65:c3:9e:ca:60:61:b4:83:ac:60:bd:6d:
         6c:b8:d8:af:7a:02:dc:c2:48:75:63:11:37:a3:1b:28:84:fc:
         ac:88:12:af:a0:44:c6:68:d2:63:b6:67:29:46:97:b1:4a:92:
         f6:78:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org