Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
File:                     DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json)
Hash identifier:          sMkq0OOXXrI5T3xDs4DF+2BqVicgif675YrxSpizviE=
Subject key identifier:   31:30:29:47:06:88:C4:E0:69:A0:34:71:06:03:23:E2:07:ED:B8:74
Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70
Certificate issuer:       /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
Certificate serial:       0A507746596B42F088F3463FFE00E56A38AE5DA8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
Manifest number:          23
Signing time:             Sat 18 May 2024 20:00:02 +0000
Manifest this update:     Sat 18 May 2024 19:55:02 +0000
Manifest next update:     Tue 21 May 2024 23:30:02 +0000
Files and hashes:         1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: lDZPCP1WarcZrgLH6d0fraPQM/nvXkROv1tJ4SjSCVw=)
                          2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: nJikAEl2lf/R6p9ao4rOP9zrE5+9FWcIDa/gJtdaUzc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl
                          rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:77:46:59:6b:42:f0:88:f3:46:3f:fe:00:e5:6a:38:ae:5d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
        Validity
            Not Before: May 18 19:55:02 2024 GMT
            Not After : May 21 23:30:02 2024 GMT
        Subject: CN=313029470688C4E069A03471060323E207EDB874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f9:b1:1b:fd:3e:a5:cf:33:33:bb:d6:02:ea:
                    db:1f:36:e9:b2:e3:cb:ad:fe:e6:94:0a:d4:f6:6c:
                    fe:50:bf:4d:ed:3c:f8:7e:fc:22:cd:df:17:16:be:
                    05:41:8c:6a:d9:88:33:74:ce:5b:5f:19:ba:1c:42:
                    c6:43:ed:e8:aa:dc:4f:3d:d5:77:96:43:e1:6c:42:
                    bf:6f:47:6a:75:cf:6e:3c:74:54:e0:9b:2a:17:ad:
                    90:77:50:90:ce:4a:32:5a:a5:c7:b2:dd:35:7a:27:
                    c9:2d:6b:33:41:c9:36:1a:fc:a6:53:4a:64:d7:3e:
                    2f:1e:4c:3f:17:db:5d:6c:18:d5:a2:51:b9:ed:21:
                    cb:0f:05:52:eb:e2:79:64:2a:c2:cf:8d:14:31:37:
                    54:ce:54:ed:7c:54:6f:f9:51:92:2d:7f:f5:ce:28:
                    2e:cd:05:75:32:76:b5:97:bc:53:be:0e:5e:66:d0:
                    05:00:95:25:17:e2:2a:1d:08:c5:68:7c:8f:e0:6a:
                    fd:f7:54:84:ce:37:18:fb:a6:c3:66:8a:8b:13:9a:
                    ee:50:cf:97:ca:60:db:c9:28:88:f4:51:a0:a9:7a:
                    51:17:9d:d6:f8:35:d8:15:10:f4:96:91:92:1a:82:
                    66:08:91:9c:3a:0f:40:da:9b:6f:95:f7:44:95:e5:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:29:47:06:88:C4:E0:69:A0:34:71:06:03:23:E2:07:ED:B8:74
            X509v3 Authority Key Identifier:
                keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:15:ef:d0:c2:b4:39:44:3e:93:ef:23:a0:a6:a9:06:d7:76:
         bd:75:dd:e8:55:39:c6:20:87:bc:78:b4:46:e2:f0:12:57:63:
         f9:94:47:63:1a:a4:b1:47:f9:c5:57:25:8c:e2:3c:b8:dc:65:
         8a:52:7d:4a:74:8c:78:8d:05:a6:76:b5:54:2d:9d:4c:06:ba:
         cf:57:bb:87:6f:04:50:d3:94:68:ca:ed:8c:ef:81:e5:34:79:
         9f:90:0a:65:99:a0:38:38:69:cb:28:e5:21:92:5e:ae:89:42:
         30:42:25:21:5b:9e:69:bf:c5:b1:71:c0:0b:2d:03:c3:95:1c:
         c9:2f:41:4d:44:36:15:b5:86:98:15:0c:5a:cf:e3:91:27:31:
         a5:aa:02:15:aa:2d:cc:ed:11:38:84:a6:5e:54:41:0b:c3:91:
         41:d6:87:c3:21:49:63:55:80:2f:d4:23:fc:e6:0d:e4:a9:f8:
         a4:d5:96:c1:97:c2:02:09:77:eb:67:60:0b:89:f6:da:c5:56:
         34:22:74:0e:f3:72:be:99:d8:7f:d9:fe:17:7c:2c:da:20:08:
         71:d5:72:cb:a3:40:56:88:c1:79:fa:04:24:ab:1b:89:e3:2b:
         9f:fb:da:b5:14:4c:4f:7a:e7:69:79:f4:d9:54:1f:5d:4d:0c:
         fe:e9:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:30:46 2024 by rpki-client on console-ams.rpki-client.org