Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
File:                     38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json)
Hash identifier:          4jImzYRVcOstpUoJUtI7/knnrsonYW8nDPOH/H4ZBz0=
Subject key identifier:   7D:2E:BE:5F:F2:3C:4B:32:D9:50:F9:9E:D6:E9:B1:19:C5:08:72:87
Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
Certificate issuer:       /CN=38992A0A64D724D15761F2F9410D85186E2311FE
Certificate serial:       2BB0D16FDE6B211D87926EFFE1375693FB98D49F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
Manifest number:          0131
Signing time:             Sun 24 Nov 2024 07:00:43 +0000
Manifest this update:     Sun 24 Nov 2024 06:55:43 +0000
Manifest next update:     Wed 27 Nov 2024 11:06:43 +0000
Files and hashes:         1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=)
                          2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=)
                          3: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: ionO2ZLQhLtBFrdexhARCi1tn4utJ3v2RuwbsC3yqLs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
                          rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b0:d1:6f:de:6b:21:1d:87:92:6e:ff:e1:37:56:93:fb:98:d4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE
        Validity
            Not Before: Nov 24 06:55:43 2024 GMT
            Not After : Nov 27 11:06:43 2024 GMT
        Subject: CN=7D2EBE5FF23C4B32D950F99ED6E9B119C5087287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:06:cd:ed:f5:55:42:57:e4:41:13:e4:91:
                    58:b6:d4:70:9f:54:10:38:a8:3d:41:a2:fd:f0:21:
                    4a:c1:a7:29:78:dc:53:34:b6:0d:69:c3:57:87:5e:
                    1a:d8:b4:d1:cf:b1:d0:5b:c3:57:5e:38:d3:f9:40:
                    28:5d:bb:8b:13:56:d1:88:45:ac:bb:9d:82:a9:1d:
                    94:6b:59:6a:01:2a:81:d7:fd:b8:fb:f9:87:39:a3:
                    08:45:af:13:1c:44:b1:61:09:7d:a5:21:f5:97:5f:
                    55:71:cf:84:5a:93:88:7e:69:61:06:c6:28:d0:3d:
                    46:ad:69:da:c1:1e:79:bd:60:e1:e7:40:00:93:fa:
                    7b:78:28:ba:a4:b5:25:6b:43:1d:aa:95:0f:a8:19:
                    3b:2d:8a:1a:da:0d:ff:ad:59:16:a0:a8:4c:53:e0:
                    5d:44:5f:d4:d1:62:65:48:cb:31:81:80:50:2b:82:
                    43:fd:e1:6c:60:2b:77:b7:90:91:6a:65:ab:d7:f0:
                    43:c3:ed:ca:50:af:bc:76:73:51:5e:c1:03:47:d7:
                    95:18:5f:2f:4d:b3:6f:d6:a7:5f:be:c7:67:39:ba:
                    0c:3c:4b:29:a4:27:e9:fe:25:0a:f3:03:ad:7f:9a:
                    e2:8d:a2:36:ef:b0:ea:72:9a:0a:74:08:7c:d2:85:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2E:BE:5F:F2:3C:4B:32:D9:50:F9:9E:D6:E9:B1:19:C5:08:72:87
            X509v3 Authority Key Identifier:
                keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:be:3a:ea:3d:4c:f0:43:bd:0b:a3:d4:d7:19:45:54:ac:32:
         e9:e4:71:b8:2c:95:36:55:7b:7c:1c:f7:76:23:61:a5:9a:16:
         24:65:85:f9:62:ed:d9:6d:3c:95:01:65:65:8d:c7:ed:7b:63:
         b8:37:57:c2:3b:2d:b7:42:a7:5f:a6:ed:d0:1c:a6:1e:40:c4:
         07:30:a9:82:b7:c6:29:6c:73:c0:d0:0d:75:55:b0:c0:6a:71:
         ae:e5:8e:ed:7f:7d:75:e7:0a:d0:13:5c:5a:27:cd:73:66:1e:
         c8:8b:e5:da:ce:09:75:6c:dc:4d:0a:0d:fb:5c:0e:2a:84:3d:
         6a:a1:ab:75:25:71:69:09:29:b2:54:4e:fd:dc:80:d0:b0:fd:
         c6:72:d7:e5:5a:04:96:d4:fa:c7:5b:27:68:23:96:42:01:6b:
         bb:74:bc:71:12:2a:c9:a3:1e:71:16:c7:70:b4:71:c9:2a:39:
         70:ec:a6:dd:af:6a:97:bb:e0:27:68:d3:8e:ff:a8:8b:07:06:
         2a:aa:2b:f8:02:92:a4:c1:23:0c:0f:4f:1b:f7:ba:db:a2:39:
         c6:4f:19:d7:4b:dc:82:14:ff:e6:4e:28:12:6c:2e:c4:bf:fc:
         b9:76:d7:d4:ca:a1:02:54:95:86:be:da:69:fc:13:86:d9:52:
         3f:61:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org