Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
File:                     4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json)
Hash identifier:          G3zSQwTN5vinxfOiS4aYoV0SWe0GDXVxItPzo2oHdlc=
Subject key identifier:   A6:ED:FF:41:B9:B2:2F:D0:3A:7D:E1:92:AB:8D:7E:05:93:31:B7:36
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Certificate issuer:       /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial:       1F48645DC77FEC5ECDED6B034603A7BFB914909E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
Manifest number:          0263
Signing time:             Fri 22 Nov 2024 18:11:48 +0000
Manifest this update:     Fri 22 Nov 2024 18:06:48 +0000
Manifest next update:     Tue 26 Nov 2024 04:27:48 +0000
Files and hashes:         1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: D4EkIlEcE1wtYu4llvh2kzSAskHUdWXvwrriG+hYUDU=)
                          2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: ickWtpT8Ft1e94JugLGmlslX38x3PbK6YGy/bOBry6s=)
                          3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: mcyagvywDhFYxC9mjPanY2s5lpKa+0hAXlf4jFVn9eM=)
                          4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: FLVGwqj4yD54Hf3ac0cSht3WEYb1ToOJ+k3OEsbAbwE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
                          rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:64:5d:c7:7f:ec:5e:cd:ed:6b:03:46:03:a7:bf:b9:14:90:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
        Validity
            Not Before: Nov 22 18:06:48 2024 GMT
            Not After : Nov 26 04:27:48 2024 GMT
        Subject: CN=A6EDFF41B9B22FD03A7DE192AB8D7E059331B736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:35:3c:2f:0f:97:ab:f0:a4:85:15:1b:b2:
                    8c:7e:6e:5a:aa:2e:04:b6:ad:9b:e9:3f:fc:7d:a5:
                    e3:83:dd:a8:d2:3a:7f:d3:f7:6c:7b:13:bc:55:f5:
                    3b:91:20:d0:a3:4f:30:c3:0d:34:94:1e:33:03:21:
                    85:f5:20:89:3c:85:81:0e:22:a9:94:3e:21:1e:f4:
                    e2:45:f5:69:e9:ee:c4:f2:dc:09:8e:ff:bd:e5:c5:
                    f8:32:bd:6a:3d:01:c2:c9:2f:f4:05:2c:50:c2:17:
                    62:46:e4:8d:a1:6e:ad:c4:19:e5:b3:b1:2b:b5:e3:
                    03:32:1b:5b:70:bf:4a:95:eb:f6:e8:25:28:a7:70:
                    9a:77:0d:56:f2:a1:4a:80:c5:59:46:cb:ab:5e:3a:
                    2c:d6:9c:44:c9:20:ba:26:19:9e:d6:cb:32:cb:1a:
                    f7:67:96:5f:30:4f:a0:48:92:0b:c2:b4:ff:0c:a1:
                    01:6b:ee:4c:86:fa:e8:3a:c8:d0:f5:8b:59:fe:36:
                    8f:f0:13:33:92:4d:fb:35:7c:7f:05:4e:b9:17:b8:
                    d1:10:33:a7:9f:d0:fa:48:96:4b:2b:7a:9a:03:d8:
                    b2:b2:ed:19:29:69:7d:33:a2:78:64:8b:03:3b:ae:
                    e2:31:3e:e0:65:1e:b3:ea:02:59:16:a4:51:73:65:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:ED:FF:41:B9:B2:2F:D0:3A:7D:E1:92:AB:8D:7E:05:93:31:B7:36
            X509v3 Authority Key Identifier:
                keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:01:e7:f8:55:85:d0:87:dd:ba:d1:a1:f8:71:1e:61:cf:
         30:4a:f6:30:54:35:aa:29:99:b4:bf:d0:bf:4e:78:b9:46:9a:
         b4:51:af:e5:8c:aa:ec:24:ce:36:4b:5c:3a:6e:7e:1b:d0:83:
         a9:36:4c:f6:a7:a0:6e:e0:86:1c:6c:4f:f9:0e:4b:3a:69:1c:
         f3:19:76:be:4e:0b:31:08:6a:a5:b7:b1:31:66:f3:73:47:9c:
         eb:44:12:7e:35:ab:76:ab:50:de:19:6d:31:60:74:5f:82:e8:
         25:fe:a4:69:ab:92:93:15:2d:cd:ea:27:ac:da:69:0c:c9:29:
         44:6a:89:e7:c4:1d:60:99:0a:e6:06:4b:06:17:67:f4:28:9d:
         e8:b0:94:54:65:25:6b:13:21:90:98:25:00:0c:81:f4:4a:eb:
         1f:e4:1e:28:b8:f4:5e:cd:87:87:bb:fd:33:81:41:2d:bf:33:
         a3:1f:83:83:93:9a:43:c0:d5:fd:71:bd:66:a8:e1:65:a3:a1:
         d2:72:71:21:61:dc:e3:91:b7:95:0a:32:7a:e9:22:db:a4:7c:
         5d:a0:67:19:14:be:bd:fc:11:5c:44:d5:89:e2:b0:df:c6:88:
         b0:f3:eb:32:32:43:da:e2:e7:83:cb:bf:79:68:e3:ef:08:f4:
         f0:8a:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org