Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
File:                     D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json)
Hash identifier:          rgUAWEI8ufUSz+qspTI9o6ckwkEjYmS33C9gtLjMwz0=
Subject key identifier:   DE:83:8E:43:66:2A:AE:37:89:01:91:2F:37:50:92:18:1F:48:BA:70
Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
Certificate issuer:       /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Certificate serial:       237E0FF514BEC720E0F0AC04D691B568FC0F25BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
Manifest number:          013B
Signing time:             Wed 20 Nov 2024 09:12:23 +0000
Manifest this update:     Wed 20 Nov 2024 09:07:23 +0000
Manifest next update:     Sat 23 Nov 2024 17:32:23 +0000
Files and hashes:         1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: obWXqK1TXAplDV5CQsyKX8E15e8o6UXEFXSRfFx1ssU=)
                          2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: owzFX97yUwQlgrwuIyX44838/uUdwYXvl6IShRtLOss=)
                          3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: 7nqCoBs4UD5Q0zFXqw657mJUgZK2hC/5uxbKdURPAzM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
                          rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7e:0f:f5:14:be:c7:20:e0:f0:ac:04:d6:91:b5:68:fc:0f:25:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
        Validity
            Not Before: Nov 20 09:07:23 2024 GMT
            Not After : Nov 23 17:32:23 2024 GMT
        Subject: CN=DE838E43662AAE378901912F375092181F48BA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:99:8a:bd:1c:df:b2:d1:0f:5b:18:10:b1:
                    b5:0b:03:be:7a:1c:c3:b9:48:ad:4b:b1:cf:7b:16:
                    e0:19:20:e2:dd:c3:60:00:2b:21:b8:dc:2a:f0:43:
                    6b:bf:de:64:3d:ac:4e:69:d0:b0:0a:63:b2:54:3c:
                    32:5c:ac:ae:59:e3:8d:42:0c:ee:0b:2a:4a:16:ec:
                    0a:09:ca:ff:48:33:ca:dc:05:3a:09:48:06:58:bd:
                    74:1c:92:ee:f0:40:d6:99:1e:90:28:3d:0f:7c:f7:
                    e3:41:8e:5c:20:f6:39:ec:fb:de:46:2c:cd:22:8a:
                    81:27:02:43:77:39:25:ea:11:4f:e0:fc:38:67:e1:
                    8b:14:72:74:ef:58:25:41:2b:14:21:7b:b5:eb:ee:
                    55:7b:e2:89:e7:42:a0:d0:e4:e4:31:8a:73:ec:08:
                    bc:6a:02:fb:c3:fd:2f:2d:52:68:9c:e7:45:bf:6b:
                    d5:70:26:35:68:bc:38:89:e6:44:4b:74:9a:f8:71:
                    d4:c9:cf:8f:e5:d3:53:d5:98:83:d9:fb:00:b1:d1:
                    5b:14:a6:3e:20:64:6e:31:80:a7:fc:0f:2f:10:6a:
                    8c:cd:25:b0:a1:97:6b:7b:b8:08:34:2b:9b:cf:fc:
                    5f:a0:c7:29:4e:fe:7f:76:45:b3:f1:58:55:d8:5d:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:8E:43:66:2A:AE:37:89:01:91:2F:37:50:92:18:1F:48:BA:70
            X509v3 Authority Key Identifier:
                keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:02:c8:f7:89:a2:da:de:33:ac:a0:dc:5e:51:06:98:1e:57:
         85:1d:76:2e:ed:95:7f:dd:ac:ab:fe:71:e4:e1:03:a5:5a:86:
         04:13:a3:27:91:be:04:c2:72:79:23:45:a0:5d:d7:fb:42:22:
         1f:13:31:af:c2:a1:a0:4b:c6:59:4e:74:38:9f:fd:90:67:07:
         b2:fd:dc:b9:41:ce:90:3f:89:78:f1:a0:42:09:47:dd:c0:88:
         1a:05:3f:4b:8f:66:70:52:08:71:0f:80:b6:12:41:24:cb:18:
         d2:a5:ef:61:1e:a4:ab:6e:d0:75:ed:a5:ea:83:d9:57:75:eb:
         e8:cc:99:1c:4e:1e:95:3d:69:71:89:13:8b:62:49:b3:74:a7:
         65:28:49:14:78:8c:44:b9:be:a4:2a:ba:a5:4d:d0:c1:1c:8e:
         2d:fd:15:20:92:b4:29:ea:42:5a:75:e3:fb:ef:44:aa:12:8d:
         bc:76:4c:b9:cf:af:a9:00:07:d0:93:4d:a7:4f:39:49:08:d4:
         05:a3:a9:32:ac:e2:7f:be:88:2e:88:ca:4b:e7:9a:19:2f:71:
         c0:dd:fc:ec:fd:6e:ea:19:5b:a4:b1:87:2a:68:ef:de:7e:ee:
         f6:92:41:7c:6d:78:a3:c0:6c:30:da:02:0d:18:6f:f8:17:78:
         29:e6:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:34 2024 by rpki-client on console-ams.rpki-client.org