Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
File:                     BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json)
Hash identifier:          tN3ZwAE7UdkUxaBps+VTZx7vjdWs2v61XeB6J8lbIbc=
Subject key identifier:   8B:E0:5B:3A:00:E0:9C:E8:47:0E:A7:95:F3:06:F0:25:53:60:16:09
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Certificate issuer:       /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial:       3BC41489C3F77C543437B0CE6C4EF749F438A97D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
Manifest number:          50
Signing time:             Thu 21 Nov 2024 11:11:55 +0000
Manifest this update:     Thu 21 Nov 2024 11:06:55 +0000
Manifest next update:     Sun 24 Nov 2024 21:57:55 +0000
Files and hashes:         1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: LdgJ3N6hvOVZp0NHuFumK1lNx8fWoKV0OckL+p2Gn5k=)
                          2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: VsyQXSiVMiwcm5yUroJ76knQx3U8ruXQ8DjfeYFUQB4=)
                          3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: 1v4ba7LsWYzkmrUUas5phQC6K2QN9Q5rS+nYtFeCnFQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
                          rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:14:89:c3:f7:7c:54:34:37:b0:ce:6c:4e:f7:49:f4:38:a9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
        Validity
            Not Before: Nov 21 11:06:55 2024 GMT
            Not After : Nov 24 21:57:55 2024 GMT
        Subject: CN=8BE05B3A00E09CE8470EA795F306F02553601609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:1e:e3:09:d2:5b:14:93:e5:5a:89:fe:c7:
                    fb:2c:13:d1:ab:80:88:50:6e:85:8e:3e:52:09:be:
                    cc:5c:58:cb:5f:eb:64:f5:d4:10:38:43:cb:89:04:
                    7f:f0:59:a5:4a:74:a3:8d:da:e3:ab:61:a3:f4:a3:
                    fd:01:85:5c:40:5c:cd:f6:08:49:fd:d5:de:c3:97:
                    b1:d2:8b:56:ee:75:d9:f4:c5:cd:1a:6e:f4:18:e6:
                    f7:77:05:81:3c:4a:1c:9b:1f:2e:d9:55:e6:32:2b:
                    a6:f3:86:41:60:c2:d5:50:b7:62:fa:b5:dc:f2:ba:
                    69:8a:c3:24:4d:8e:3d:00:da:28:8f:80:fc:4a:f8:
                    0a:ff:dc:4e:f7:45:11:5f:24:e1:b0:58:d7:8b:b0:
                    e0:d0:e8:54:07:1d:be:4e:8f:96:51:c1:5f:81:e7:
                    90:45:06:c2:e8:13:e8:33:11:57:99:87:00:bc:13:
                    5e:72:dd:85:d4:20:dc:84:24:e9:5d:8f:f5:f0:56:
                    f9:85:7d:b2:39:f7:b8:ea:f1:64:96:0c:a5:9e:4b:
                    5d:26:55:38:91:c3:fb:64:96:d6:73:a3:9f:96:83:
                    c4:f2:b9:a8:e0:c4:1a:b7:8f:ee:53:0e:b6:6a:c4:
                    99:d0:42:65:a8:d0:83:6e:11:82:cd:df:71:8d:ae:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:5B:3A:00:E0:9C:E8:47:0E:A7:95:F3:06:F0:25:53:60:16:09
            X509v3 Authority Key Identifier:
                keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:99:21:a0:60:90:77:74:5c:5f:1b:fe:57:3c:31:d8:a3:a4:
         2b:39:af:4d:83:0a:08:f0:89:dd:30:39:21:fd:92:7e:99:6f:
         6a:4f:a3:a8:c2:81:f1:88:f5:c0:d4:c3:ab:89:02:9d:14:b4:
         81:83:6b:82:1b:65:22:7b:e4:3b:1d:1f:d6:e1:07:85:1e:e1:
         71:d7:dd:60:10:a1:85:4b:7c:5e:00:80:02:04:ec:1d:88:c6:
         14:fd:e1:4a:c2:e0:2f:d2:2c:11:78:3e:ea:04:8f:ff:3d:be:
         6f:ab:8a:29:ae:55:a1:54:a2:52:1b:48:a5:db:5a:c4:e3:25:
         fc:d4:44:6e:84:4d:fe:10:a0:34:9a:83:a1:12:c2:f7:62:f2:
         d9:97:67:99:5a:43:60:04:f0:61:50:6d:c6:7b:6c:29:5a:5c:
         c4:3d:1a:f7:22:60:44:7d:5b:e2:11:94:5c:65:46:60:91:65:
         50:a3:9d:01:11:d8:84:45:92:17:dc:ae:4c:ec:1f:4e:fe:bb:
         a0:8c:38:9b:f8:8a:fd:3d:67:0e:e8:dd:6f:2d:1c:cd:ff:9a:
         0e:83:fb:7e:60:a9:a8:86:44:20:9c:45:58:c5:ad:e0:18:20:
         b9:cd:fb:50:b0:28:8a:a1:18:7d:4f:a9:a8:0f:98:14:cf:ad:
         22:20:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org