Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
File:                     D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json)
Hash identifier:          aAolScuWiPNtui1AQqdjn+B5Ssv4jz1lWVpHoTzhnQI=
Subject key identifier:   E4:79:79:05:20:0F:9F:2C:A6:D9:C2:C3:AF:38:7E:2F:6D:B2:18:3D
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       2957B5A6999765702D52FBDF9EF29369ED5A5096
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
Manifest number:          0158
Signing time:             Mon 25 Nov 2024 10:21:43 +0000
Manifest this update:     Mon 25 Nov 2024 10:16:43 +0000
Manifest next update:     Thu 28 Nov 2024 17:52:43 +0000
Files and hashes:         1: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: nyxEiEnYYNCSfVeOiZSN9y0/3mt7TIMLKUKQ13f7+II=)
                          2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ZU6cyNYkIUPGF40k5MNIL/bcfaMQCK3GLUO1mmc7O+4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:b5:a6:99:97:65:70:2d:52:fb:df:9e:f2:93:69:ed:5a:50:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Nov 25 10:16:43 2024 GMT
            Not After : Nov 28 17:52:43 2024 GMT
        Subject: CN=E4797905200F9F2CA6D9C2C3AF387E2F6DB2183D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:45:1c:c7:fa:0c:64:3b:b9:d3:c6:4d:18:
                    ee:3b:91:1e:8e:e5:cb:23:86:f1:89:f5:b4:e7:bd:
                    db:fb:d8:6c:72:21:4a:83:67:d1:f6:57:22:df:5e:
                    fb:ed:bb:50:37:8c:1d:11:6c:07:51:4c:2f:ec:65:
                    da:cc:bf:b7:92:68:ef:50:0a:a3:6a:b4:ef:3b:57:
                    df:56:15:39:c8:e3:47:64:14:6a:d6:0b:6a:be:0b:
                    31:47:8a:66:9a:c5:59:e2:2c:54:ed:c0:9e:da:7b:
                    cb:f3:e3:de:fc:61:95:79:c9:e7:10:cc:5e:c1:c2:
                    2d:ac:9a:67:14:88:78:d4:71:f8:9a:1f:97:66:b2:
                    38:ca:be:54:49:84:70:58:54:ff:6e:31:b3:e1:3e:
                    5b:21:ba:d5:04:75:69:56:82:b0:ce:6a:90:88:c3:
                    17:79:e1:4b:a2:df:fd:be:d4:dd:2c:c6:c9:f1:bc:
                    94:c7:ac:4f:9e:42:54:50:71:c5:aa:f6:55:cb:49:
                    b3:aa:61:13:fa:fe:0e:91:2d:1f:91:d0:a2:a2:72:
                    57:99:7d:32:3f:35:0e:3a:4e:4c:ae:dd:14:4b:ba:
                    f9:dc:ad:c6:09:b3:42:80:bf:0b:81:b2:f1:c7:51:
                    2c:9c:0d:a6:3f:3e:4e:48:2a:0a:ff:84:06:24:94:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:79:05:20:0F:9F:2C:A6:D9:C2:C3:AF:38:7E:2F:6D:B2:18:3D
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9a:b5:11:39:5a:c9:14:a4:8b:70:b6:67:31:9c:1e:60:4a:
         9b:91:51:66:f0:76:2f:c1:2f:2b:7f:45:48:3e:2a:2e:c7:a7:
         35:a2:d4:44:94:6d:3f:36:90:3b:54:56:f7:40:94:44:a0:fa:
         c6:ae:53:35:51:c8:a4:75:0b:97:af:1c:cc:64:57:ac:c0:4d:
         3b:ba:df:fa:2d:e8:47:45:97:a3:8e:6a:d3:e6:a5:13:d6:29:
         0b:c5:56:e2:7d:08:d3:60:26:cd:c1:05:40:7b:69:f0:ee:8b:
         cb:5e:dd:6b:42:3d:0c:6a:38:db:3a:b9:67:c3:8b:db:82:22:
         ad:2c:df:32:e0:6a:39:e8:69:9d:d8:0f:59:3d:52:87:83:f2:
         69:c5:2c:b5:a6:a8:75:91:ee:23:8c:6f:46:3d:5e:8e:ea:29:
         98:34:73:0c:76:f4:d2:8b:08:32:78:79:83:e7:1a:4f:c1:a7:
         b4:75:56:f8:a2:05:5a:4a:f7:8e:3c:14:52:30:ab:2f:ea:21:
         76:34:09:e3:42:b7:5e:9b:0a:d5:aa:a7:54:90:d9:b6:c0:76:
         05:b0:15:11:f7:e9:0e:3a:7b:f3:ec:dd:a7:33:98:73:a4:bf:
         cb:b0:e6:38:b2:68:06:7a:c7:41:e4:a2:9a:64:3f:f0:e1:df:
         da:3a:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:43 2024 by rpki-client on console-fra.rpki-client.org