Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
File:                     F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json)
Hash identifier:          9wAYAYAW09NSwMzxfKDRy5N1Jb4egT2kDnZIBl+Llvc=
Subject key identifier:   F2:A3:4F:5C:82:CA:BC:F2:A7:59:0F:21:4C:B8:9B:EF:66:C6:BC:3B
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       5B05099D5FFB3358599DC15F509E6584A5C52A91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
Manifest number:          0368
Signing time:             Fri 22 Nov 2024 06:29:27 +0000
Manifest this update:     Fri 22 Nov 2024 06:24:27 +0000
Manifest next update:     Mon 25 Nov 2024 13:05:27 +0000
Files and hashes:         1: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: A1bTEMg+JuHlkDZcdD7yjvnHaj2MsNh5cw0GOVe9S+M=)
                          2: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=)
                          3: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: goYMIrX9Ma3OEbrqgp+NBezpiasyCSLm3ZZ0wm8/hF4=)
                          4: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: 7eM9RrtFays5qssDRC0e9EOdIAfkT5kQ1UuTJVbuoEU=)
                          5: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: lPlPy9oFyUG1+9iNhY3ct3ivaIOrDdJq91hzJWx82hk=)
                          6: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: bK7PeScu6XHhz2xJEcDpC7NmFTLmb33Y24c0SZj9KXQ=)
                          7: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: dsk9oUmj2NcQkANMtOVLGJ4sGBjbKRE5eNrZlMTBCDc=)
                          8: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: m13+pmOCObVx0zG5+sqZgyv+7v27+shyvjNVNVwWYnA=)
                          9: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: wKV0fKrYjslv5KVItX5SXOSNd6zRZ+Evy3isiwgIvvY=)
                          10: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: NumSvNHx9thWuFW2Nqi5YRhJsI96uTacWKFAMgSGFkA=)
                          11: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: NdgX8reegawNTBs4qk4qIAh5sp/MwNIcZRD+0zN0rXk=)
                          12: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: rNxjejQLAHDCWRUAwSY3wbrISFVm+ZBvmIIQCA0KYW8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:09:9d:5f:fb:33:58:59:9d:c1:5f:50:9e:65:84:a5:c5:2a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Nov 22 06:24:27 2024 GMT
            Not After : Nov 25 13:05:27 2024 GMT
        Subject: CN=F2A34F5C82CABCF2A7590F214CB89BEF66C6BC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:0d:77:0a:c2:22:30:4a:4d:da:33:eb:78:
                    b8:00:d1:5b:4b:7d:6e:af:7a:75:85:3d:94:27:fa:
                    6d:0e:0b:68:a4:58:e6:4f:0b:f5:02:94:6b:d4:31:
                    ec:b3:bd:41:e4:3e:66:18:d9:b1:2b:b6:06:dd:d8:
                    a2:5d:7c:d1:64:2d:5e:46:04:54:f2:0b:8a:9d:86:
                    86:75:13:54:24:90:ce:5d:fa:4e:2b:24:15:47:38:
                    e8:2b:88:30:7e:46:1e:41:a3:a5:a7:21:c1:ba:46:
                    ba:2d:e9:44:2b:bb:6a:bd:b9:2a:fb:f2:4e:a4:8a:
                    2a:80:4f:e1:57:37:42:63:a5:6b:95:ab:62:d7:21:
                    11:7d:cd:60:00:13:ad:2d:bd:32:ef:0a:a9:68:96:
                    3e:e3:97:48:f0:e7:ac:7f:a0:38:06:27:09:79:b9:
                    80:63:2f:d9:4c:be:03:4b:93:fa:84:6d:67:b4:d5:
                    a5:f9:d7:ab:45:b2:65:e5:ff:a1:2b:91:f5:a2:be:
                    cd:33:7a:7f:5a:3d:c6:b9:f0:2f:77:c5:07:e3:14:
                    50:ee:79:be:d4:a2:a6:f5:3f:42:a2:65:0c:ca:22:
                    07:09:9b:6b:cf:9e:e2:29:e0:f1:3a:9b:bf:39:92:
                    1c:54:51:a6:11:16:c3:fe:10:e8:e5:e3:0f:47:e2:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A3:4F:5C:82:CA:BC:F2:A7:59:0F:21:4C:B8:9B:EF:66:C6:BC:3B
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:39:ef:67:42:75:63:65:fe:22:90:6f:1c:dd:33:49:c7:
         47:77:38:d2:c0:49:45:f3:82:4a:90:cf:18:be:8e:9f:16:06:
         25:06:b4:3c:22:60:fd:58:52:2f:39:bf:3e:f3:8b:eb:06:ae:
         e3:b7:c5:6b:55:76:e7:8a:be:96:3b:ee:bf:88:de:38:6b:91:
         96:14:f1:98:35:d2:7c:d4:54:3b:03:b2:6e:e7:e1:97:2b:35:
         5d:b2:be:4f:e5:ac:cc:91:50:47:13:b2:ff:bb:19:38:96:f7:
         1a:4f:51:af:28:cc:40:18:bb:f8:63:0f:74:1a:6a:cb:cf:03:
         1e:3c:d2:7b:21:45:b0:28:70:85:97:ea:a8:50:20:2f:be:e2:
         40:16:dd:74:62:33:12:e9:fd:fa:37:7e:05:bc:86:b2:ac:50:
         df:ac:2b:01:1c:f0:31:e3:d1:ef:20:ba:98:ca:af:3f:cd:02:
         cf:71:08:41:01:8f:49:b6:73:69:e0:aa:cc:b1:68:80:d5:a9:
         5a:0f:95:2a:39:42:0a:d2:c6:d3:18:69:3a:f2:dd:a2:65:8f:
         24:ca:af:80:c7:d6:7b:56:b4:e2:31:23:d6:2f:7d:66:63:9f:
         50:ef:71:bb:3f:c7:c5:4a:d4:63:98:a3:fb:57:3d:03:31:78:
         bb:91:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org