Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
File:                     DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json)
Hash identifier:          UXx5mpJKcSpmJd0qy44ucu2N6MfKg1bhq0Y53mKju4I=
Subject key identifier:   69:62:83:18:CE:B6:9F:67:D4:C4:B2:73:24:F4:77:C9:A6:D2:65:6A
Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70
Certificate issuer:       /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
Certificate serial:       0B1664350881955F731E7EC0B66E9C737CA22B11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
Manifest number:          76
Signing time:             Fri 22 Nov 2024 18:50:02 +0000
Manifest this update:     Fri 22 Nov 2024 18:45:02 +0000
Manifest next update:     Tue 26 Nov 2024 05:19:02 +0000
Files and hashes:         1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: IRB+nGh0JSlBax7abxRuSuiaqKOmbS+pKMIkG1X02Is=)
                          2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: nJikAEl2lf/R6p9ao4rOP9zrE5+9FWcIDa/gJtdaUzc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl
                          rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:16:64:35:08:81:95:5f:73:1e:7e:c0:b6:6e:9c:73:7c:a2:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
        Validity
            Not Before: Nov 22 18:45:02 2024 GMT
            Not After : Nov 26 05:19:02 2024 GMT
        Subject: CN=69628318CEB69F67D4C4B27324F477C9A6D2656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:10:55:a2:fe:43:99:2b:70:23:20:4c:55:
                    a7:ab:cc:6a:d3:96:a3:b7:98:f9:e3:3f:5b:80:53:
                    cc:ba:c7:06:4c:15:ea:47:99:19:99:e8:8b:4b:1b:
                    08:d0:bf:d9:40:39:df:ab:c5:89:9f:2d:d2:b1:d3:
                    10:ed:68:8d:d5:fa:d2:35:04:08:f9:7c:35:a1:e1:
                    e3:46:55:49:29:49:ca:75:9e:64:e3:25:1a:c3:7a:
                    93:6b:9b:c5:b3:0d:d9:05:37:df:67:70:62:8b:b0:
                    0f:06:39:50:58:8a:dc:cc:67:fe:53:db:58:c3:27:
                    66:56:e8:11:76:ec:09:00:5a:5f:31:b4:df:f6:2b:
                    fe:eb:b9:a5:b3:37:39:7a:71:52:9f:6d:ac:68:4a:
                    57:da:60:98:ac:79:44:f1:c6:24:ed:7a:aa:c1:0f:
                    74:b1:ac:08:c2:ec:fa:ea:da:4b:6b:2c:dc:6a:2c:
                    27:37:29:e1:84:42:c5:2d:4a:1d:dd:40:6d:a1:54:
                    67:80:39:d3:15:88:8f:aa:f8:81:f7:cf:6e:9f:03:
                    1c:86:04:5e:72:8f:54:a4:75:92:49:a8:33:ec:fa:
                    ac:d2:30:05:ad:0c:08:da:05:3b:1e:1a:0f:03:53:
                    f6:17:99:15:45:80:00:64:58:1a:84:e5:26:22:74:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:83:18:CE:B6:9F:67:D4:C4:B2:73:24:F4:77:C9:A6:D2:65:6A
            X509v3 Authority Key Identifier:
                keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d9:c8:24:57:b8:e3:61:f8:21:c9:d0:3d:f6:97:de:10:db:
         ea:a8:05:13:ad:cd:db:33:54:b5:86:6f:cc:72:cf:97:97:9d:
         98:d5:31:08:45:dc:a1:bb:86:28:c9:24:6e:e7:33:34:b3:0f:
         f0:08:86:a5:af:35:89:ab:39:12:cd:49:d6:28:97:fd:bc:1f:
         c8:d1:ba:0a:61:fe:22:ab:de:f8:62:47:ea:97:6f:63:46:52:
         3e:bd:e8:3b:bb:ac:09:dd:0b:fe:ce:da:23:10:ba:a9:91:24:
         35:ce:01:20:83:ad:5e:68:4f:50:13:07:32:a9:06:3b:25:02:
         99:0e:20:4f:ba:07:95:b2:d9:7f:b7:7f:6d:ac:64:e6:d1:bd:
         fe:21:99:f2:a3:a9:2d:f7:b6:bf:4c:e8:69:4e:46:76:d2:68:
         c8:ec:ef:76:9a:15:3f:21:16:c0:dc:2d:a2:4a:b9:d8:88:03:
         01:b7:9c:90:99:33:a3:ff:b9:1a:b0:d5:2c:f9:8f:16:38:07:
         c8:b5:6f:e9:b7:08:74:1c:a7:b1:30:c2:5a:b2:64:34:ed:d4:
         e9:c2:0b:18:96:4a:44:18:46:0a:9c:b1:a0:0c:12:9e:a8:1f:
         38:b8:81:e0:35:b9:91:93:29:49:b4:b4:34:4a:56:28:44:08:
         db:6d:63:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org