Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
File:                     04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json)
Hash identifier:          Hfh1WA6R4ynvmuYLTWwOmuVBlGvddibsmwkwyUYBRQc=
Subject key identifier:   2C:F5:E0:F1:3D:3D:B1:27:78:DC:8D:66:A8:78:FB:23:66:39:FB:DA
Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00
Certificate issuer:       /CN=04D3D2E060243AD917D4F682922E4A805EDE3300
Certificate serial:       670583AF59024BCF1F77FD3D653B8DD41BD191D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
Manifest number:          55
Signing time:             Wed 20 Nov 2024 16:22:00 +0000
Manifest this update:     Wed 20 Nov 2024 16:17:00 +0000
Manifest next update:     Sat 23 Nov 2024 21:51:00 +0000
Files and hashes:         1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=)
                          2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: 3kSjEUpVTV8VFBThVF8gsyELzoa22jfXNp/idAi+yM8=)
                          3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: /J4qwElze/bQ2HOvKHKpbauyy3nIBEQmoLrnIDKLWb0=)
                          4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: YOfV9l8mIphWSX9GO2VG6QOcO1lYY9wjqJShR8OC/dU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl
                          rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:05:83:af:59:02:4b:cf:1f:77:fd:3d:65:3b:8d:d4:1b:d1:91:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300
        Validity
            Not Before: Nov 20 16:17:00 2024 GMT
            Not After : Nov 23 21:51:00 2024 GMT
        Subject: CN=2CF5E0F13D3DB12778DC8D66A878FB236639FBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:4d:da:43:49:7d:1a:6a:33:78:0f:e8:4e:
                    2c:b1:8a:67:31:44:a9:c9:ee:6f:de:ee:c4:8e:c3:
                    73:2d:cb:ea:90:14:2b:a7:e1:d5:b4:3b:78:46:dc:
                    1b:5b:5a:18:7b:f8:e1:8c:d0:d2:a9:bc:0d:83:01:
                    b7:93:ac:69:ff:0c:4f:a7:a0:cc:33:6c:53:11:32:
                    e6:6e:84:c3:d4:0f:15:8a:1c:68:45:70:9e:f2:5d:
                    76:18:f9:57:85:4e:10:f2:82:f3:26:c5:4b:a7:1b:
                    c6:9a:20:f7:b4:83:c9:52:c4:a6:a4:e8:7c:b9:b1:
                    fe:ac:7a:97:44:00:7f:33:2d:d0:7c:78:63:2e:eb:
                    92:7d:bc:94:91:dc:14:1c:34:94:6b:9e:0f:59:b9:
                    46:4b:66:c1:f5:dd:a9:07:e5:36:9c:ce:79:90:f1:
                    5a:15:d4:c9:10:ed:42:30:65:c1:3c:16:36:5a:9f:
                    52:53:f4:aa:4c:9b:d5:e3:22:e5:75:77:08:25:2b:
                    27:bf:ff:f1:41:9a:e3:b7:9a:6f:a4:52:40:8a:f2:
                    ac:24:6e:4c:9a:9e:3a:00:8c:47:7b:07:ea:cb:db:
                    b9:7c:a5:f1:d8:d1:ce:dd:60:e0:d0:d3:df:26:ee:
                    e1:dc:63:3b:d6:4a:ee:8e:13:c0:92:3b:d9:35:cd:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:E0:F1:3D:3D:B1:27:78:DC:8D:66:A8:78:FB:23:66:39:FB:DA
            X509v3 Authority Key Identifier:
                keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:d0:d7:d3:90:64:85:1d:db:6c:e4:db:a9:97:80:e0:81:
         b0:9f:8e:da:b1:69:3f:3c:4d:04:b7:df:d0:64:41:8f:2d:ca:
         44:5b:80:83:6f:36:74:be:e3:07:5e:fa:85:87:57:73:3b:a5:
         b3:79:2d:0a:e5:f2:42:64:67:a2:40:9c:46:91:cf:1a:b2:73:
         75:42:49:d5:d5:87:5d:e4:00:3c:89:43:e0:9b:0d:bc:db:14:
         e2:37:52:62:c3:68:09:0a:3d:d3:34:71:cb:1e:43:29:61:75:
         c1:96:65:1e:1e:94:3e:33:e6:b3:a8:8a:be:eb:4c:83:d8:aa:
         8f:9c:26:6e:6e:90:e2:29:7f:70:31:2c:f3:0e:8d:40:49:38:
         2c:18:2e:36:0e:19:33:f6:de:4f:88:2f:22:3d:71:57:c5:42:
         9d:f7:03:e5:28:49:98:e0:4a:08:ab:51:7c:4c:d4:32:02:f2:
         a0:62:90:38:50:08:57:08:c0:58:05:b3:fe:d8:3f:60:a7:85:
         0d:f8:06:47:84:a7:70:e1:1f:7c:58:8c:11:19:a1:5c:87:8a:
         e5:4b:59:26:40:bd:d5:e4:50:77:0a:8d:c4:b2:d5:02:3d:14:
         5e:2c:fb:c2:12:c4:71:a8:5c:e5:4a:04:0f:60:a6:eb:51:c3:
         22:2e:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:41:49 2024 by rpki-client on console-fra.rpki-client.org