Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
File:                     B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json)
Hash identifier:          Pt3e1m0Td/Ho3J8yoLvH4qF4d+0gTwWgbmzePbObNKI=
Subject key identifier:   54:3F:61:21:1B:C2:DC:00:CF:D6:C3:4E:69:5F:5D:EA:76:4F:7D:2E
Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E
Certificate issuer:       /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
Certificate serial:       756F3FA24830BB3EF138DAD61E7E003ADE756B8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
Manifest number:          0429
Signing time:             Wed 24 Apr 2024 09:21:48 +0000
Manifest this update:     Wed 24 Apr 2024 09:16:48 +0000
Manifest next update:     Sat 27 Apr 2024 16:15:48 +0000
Files and hashes:         1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: MpCBQMpnK1SF+RwtDbwopL+kaRulmgdyoZ5O7ZfX5os=)
                          2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: wgPe9kmSkp5NXwaxCxBmrYqLe/FPRlB9l9/RMocCiqc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl
                          rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:3f:a2:48:30:bb:3e:f1:38:da:d6:1e:7e:00:3a:de:75:6b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
        Validity
            Not Before: Apr 24 09:16:48 2024 GMT
            Not After : Apr 27 16:15:48 2024 GMT
        Subject: CN=543F61211BC2DC00CFD6C34E695F5DEA764F7D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:37:ef:fe:ce:9b:44:4a:7d:22:40:09:d9:
                    2c:76:1a:1b:c3:ed:03:27:eb:e6:f2:a1:90:71:8e:
                    86:b4:6e:8d:3d:be:dd:a8:75:29:d1:40:0f:9f:78:
                    b0:de:fe:10:91:c0:e4:b0:e7:ed:d6:87:ee:eb:95:
                    2b:3e:f1:20:11:16:f3:a3:d2:40:cd:69:4b:cf:7a:
                    b4:23:a4:38:40:dd:38:b1:73:84:e7:01:2f:e9:e4:
                    0e:2c:17:a2:a0:17:78:66:ff:b7:96:b0:0a:9c:c4:
                    1e:71:c8:a7:4b:b0:b9:12:32:89:68:18:df:20:c5:
                    82:3b:73:00:39:84:7a:80:69:29:61:e7:46:bb:ca:
                    15:d2:5a:cd:04:dd:da:0f:29:51:0f:4c:c0:34:94:
                    77:95:42:b0:b3:2d:f2:86:35:08:7d:21:96:01:be:
                    56:f7:7f:3a:0d:82:a0:de:8f:9a:4b:ea:2a:d0:28:
                    a4:87:ca:5d:59:b6:ab:96:87:38:46:31:fe:72:b5:
                    91:f8:55:23:49:1d:5e:4b:b5:c3:42:ee:35:7b:48:
                    3d:88:47:21:27:52:5f:be:49:c5:b1:de:da:36:a2:
                    aa:df:61:d6:ad:99:c5:63:7c:e0:0a:1f:f9:bc:73:
                    bf:c9:38:df:21:4e:52:08:bd:03:7d:85:65:58:b2:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:61:21:1B:C2:DC:00:CF:D6:C3:4E:69:5F:5D:EA:76:4F:7D:2E
            X509v3 Authority Key Identifier:
                keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:68:30:f8:04:01:b1:c4:e4:3f:ee:e2:36:68:ca:ee:93:
         1b:64:37:50:52:fd:f1:1b:42:f9:16:a8:0b:16:ef:cf:11:f4:
         75:7a:d3:c9:a6:10:d1:71:4d:87:49:0d:41:30:e5:68:19:a1:
         44:49:6a:34:c1:02:a6:b7:b6:ce:b7:70:c9:35:a7:f0:95:0a:
         5b:09:6f:05:fe:06:87:a0:77:84:5e:07:76:17:ab:0f:1a:1a:
         ec:01:55:26:01:73:74:4d:51:92:0c:88:47:b9:8f:17:4c:82:
         3e:96:9f:64:d7:8f:0a:03:ba:8a:cc:d8:9a:96:b7:1b:04:1c:
         f9:85:4b:7c:49:af:03:31:be:85:b6:45:f3:e8:ed:91:2a:6c:
         90:06:30:b7:50:29:c0:49:40:a8:15:8e:d4:26:3f:70:df:d7:
         dc:77:8a:d4:c5:fd:76:84:6b:c7:2b:81:a5:4e:ca:3c:f3:04:
         83:3b:dc:91:e0:d4:f8:a5:92:97:c6:fd:91:3b:78:af:dc:a2:
         8d:04:87:25:03:75:8f:3e:3d:09:b0:94:31:08:7e:bb:c0:6a:
         57:d1:51:fd:7f:92:76:4a:cc:5e:b7:14:2f:16:60:fc:df:f0:
         bd:d0:f2:6f:af:07:e9:ae:b0:a8:c4:5e:c3:bf:b7:03:ab:9d:
         da:82:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org