Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
File:                     45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json)
Hash identifier:          oWQHIsmVphGdcGsGK7BrqeTgx5ZClGz2rMg+zU0Uqvw=
Subject key identifier:   B0:B7:6A:AE:05:13:90:3C:79:CD:F0:6F:D5:69:53:1A:93:59:47:03
Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
Certificate issuer:       /CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Certificate serial:       35BF0F3CC2A123671C40FF3427658287220AD208
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
Manifest number:          A4
Signing time:             Sun 24 Nov 2024 20:42:22 +0000
Manifest this update:     Sun 24 Nov 2024 20:37:22 +0000
Manifest next update:     Thu 28 Nov 2024 06:34:22 +0000
Files and hashes:         1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=)
                          2: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: qHIOm4BOeLrCqrfcW8nJNU2ULgfBIGZ/VxnUmjZt8RQ=)
                          3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
                          rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:0f:3c:c2:a1:23:67:1c:40:ff:34:27:65:82:87:22:0a:d2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70
        Validity
            Not Before: Nov 24 20:37:22 2024 GMT
            Not After : Nov 28 06:34:22 2024 GMT
        Subject: CN=B0B76AAE0513903C79CDF06FD569531A93594703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:da:92:cd:ce:37:9a:cf:03:8a:2c:e0:40:
                    d3:37:a6:15:62:47:54:70:6f:d4:dc:7c:14:b7:ac:
                    bf:b0:05:12:9b:31:77:11:84:e5:0c:27:4d:5e:be:
                    76:d5:e4:9b:42:5a:ac:e9:49:36:73:5a:25:74:4e:
                    0b:ac:89:bf:e5:9d:f8:9e:e4:66:61:bb:0f:16:da:
                    6c:18:3c:19:80:04:fa:77:b1:40:9a:9b:29:e2:d9:
                    04:5c:cd:f8:62:51:15:ae:2d:a7:42:d5:a2:b3:a5:
                    7d:67:7c:bc:7a:fb:80:3b:dd:ab:14:b9:97:15:e3:
                    1d:e2:f5:cb:cb:63:be:ac:a8:96:73:ac:91:81:9d:
                    75:97:9a:b5:a3:f9:ef:4d:2d:78:5f:d0:1f:77:a5:
                    dd:57:ca:39:9d:45:51:a9:9f:2b:71:1c:fe:12:ec:
                    05:ab:da:db:40:7c:6f:18:67:93:c3:10:0c:b7:63:
                    ad:92:9f:91:25:84:b4:da:44:cb:55:80:57:b8:be:
                    1d:e3:32:22:05:ac:42:3b:d5:93:78:6e:5a:a2:b8:
                    94:a8:f6:a2:28:f1:af:18:cc:7f:1b:bd:ec:a3:af:
                    6a:89:9b:33:0a:77:f8:c2:82:3d:78:b3:da:53:76:
                    8c:fc:b5:77:3e:e9:d8:59:53:81:1d:4a:77:67:09:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B7:6A:AE:05:13:90:3C:79:CD:F0:6F:D5:69:53:1A:93:59:47:03
            X509v3 Authority Key Identifier:
                keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:16:ef:0b:2d:32:56:8d:26:11:f7:6d:4f:76:ff:a5:ba:9c:
         9a:19:12:4d:d3:34:cc:eb:42:06:00:67:7c:d2:8d:d7:b6:f9:
         15:bb:88:97:e1:45:4b:4c:f2:ed:bb:c9:9d:8e:7a:02:56:2c:
         e6:8a:68:1b:7c:29:7c:66:79:fb:c7:d5:8a:df:0d:f2:6a:15:
         ff:d3:29:91:cc:2e:e7:1f:dd:d4:c2:43:01:42:87:08:b0:8b:
         a9:5a:45:38:e6:d5:7c:f2:e0:22:6e:6a:72:76:03:42:62:5f:
         8e:2d:54:23:1f:39:ad:46:8e:fa:ee:9d:b0:ca:45:a1:ef:2b:
         c9:81:c3:b2:28:af:f4:fd:ef:5f:cf:09:29:b3:2c:05:0f:4c:
         00:2b:97:0c:eb:94:97:e5:dd:d0:6c:1f:13:75:c1:25:53:68:
         2f:ff:e9:be:83:27:f1:07:a5:5c:73:44:69:d1:2e:49:38:1c:
         9b:fe:f7:b5:a4:13:5b:f4:22:48:11:87:9e:9f:2b:0b:de:ed:
         08:4d:5e:31:93:28:e6:20:c2:92:39:77:0a:33:ac:da:20:73:
         3b:77:fb:1b:c2:ee:5a:26:c6:11:dc:5f:b1:9f:ea:bd:d4:b6:
         3d:0e:a4:03:35:57:b9:e7:86:0f:c9:29:7b:54:39:ef:2a:26:
         11:e0:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:13 2024 by rpki-client on console-fra.rpki-client.org