Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
File:                     89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json)
Hash identifier:          hjF2SVhenc7MUavbBMq+TIltuaU49HYMiTb86UZU9cA=
Subject key identifier:   6E:7C:49:0A:68:63:F9:11:3F:60:2C:A2:94:C7:52:D0:B0:22:4A:96
Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E
Certificate issuer:       /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
Certificate serial:       7BD173650C581C0B8CBA11627F1B6059A49C9F66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
Manifest number:          3F
Signing time:             Thu 27 Jun 2024 15:30:00 +0000
Manifest this update:     Thu 27 Jun 2024 15:25:00 +0000
Manifest next update:     Sun 30 Jun 2024 20:49:00 +0000
Files and hashes:         1: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: wEVK5uLf0yAxFYkHnLGyVU9mqqByu2h3R5RO/5kpSr4=)
                          2: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: x+tcMxSetwv0a/KQppEaHfjktTHb2Ld1yiJcPv0bo44=)
                          3: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: SvD3X9eCmtqXidXDt4wEI5SOF39X6XsgPJbXVQqcbs4=)
                          4: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: Qln6ACiT4IfivVrlrt5dnGFTIL97rtP2V/TeVXQDmTo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl
                          rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 17:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:73:65:0c:58:1c:0b:8c:ba:11:62:7f:1b:60:59:a4:9c:9f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
        Validity
            Not Before: Jun 27 15:25:00 2024 GMT
            Not After : Jun 30 20:49:00 2024 GMT
        Subject: CN=6E7C490A6863F9113F602CA294C752D0B0224A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:ed:51:38:3a:1e:05:ec:2e:52:65:8d:b4:
                    a1:13:4e:ae:2d:68:5f:af:11:05:73:f0:b4:08:7e:
                    13:cb:a7:10:49:78:fd:db:6a:1a:fd:99:4a:bd:1e:
                    0f:d6:d2:dc:ec:2a:4b:17:4b:75:d1:a6:23:27:0a:
                    a0:7c:90:52:09:59:51:1a:fa:e3:93:21:72:40:2a:
                    f8:da:e5:6c:b5:36:54:4f:cb:e9:85:2b:30:6c:15:
                    2c:72:54:6b:b8:c1:73:d5:42:9d:a4:e7:72:d5:c9:
                    c5:22:53:1d:61:f6:86:bc:a8:8a:f2:3d:7a:fb:f3:
                    02:b6:12:db:77:ca:a0:80:09:3e:5e:9e:09:5f:45:
                    5c:e1:fc:c9:d2:db:0b:e6:3d:1b:20:d3:92:e0:12:
                    f2:90:da:ac:d4:ab:97:aa:27:38:a9:6f:84:e2:b3:
                    65:30:c8:48:37:46:09:52:f6:4b:12:e0:13:72:c0:
                    97:2b:c2:ea:b1:d3:c0:7e:0d:37:94:8c:ca:69:07:
                    8a:cc:ea:5e:47:b3:38:39:bf:e7:c6:8c:eb:c1:46:
                    99:23:5b:73:da:79:22:fd:08:c1:2d:5c:42:bc:e5:
                    fa:45:4a:73:d0:17:12:57:97:d9:ce:c8:1b:23:91:
                    22:f6:2d:ce:8e:34:e9:e7:a6:2b:35:1b:28:ac:3c:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:49:0A:68:63:F9:11:3F:60:2C:A2:94:C7:52:D0:B0:22:4A:96
            X509v3 Authority Key Identifier:
                keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:45:ca:f9:d2:d6:39:7f:e6:c5:b2:ba:2d:f9:ab:70:cb:
         65:90:e3:2e:df:6b:6e:2d:80:50:61:c3:6d:77:eb:3d:b0:b1:
         06:4d:ad:e9:c6:d5:c1:99:c8:c7:c6:59:63:7c:b4:90:4b:de:
         41:66:43:bc:5f:40:64:7f:4d:68:e0:66:74:46:9b:db:1b:2d:
         be:49:8a:3b:d2:6c:e1:5c:d2:55:fd:cb:58:a0:4d:1e:e5:85:
         4a:b1:fe:a3:e0:f4:8e:29:95:bf:d6:87:a0:a5:0c:f1:16:4f:
         e7:eb:b7:67:e7:92:3b:1a:f2:12:ae:37:e9:31:f2:65:56:58:
         7f:1d:81:49:a2:2d:fa:07:35:9c:8f:bd:4b:b4:56:ea:b0:2d:
         07:94:3c:24:03:96:53:74:05:8f:5b:70:80:67:eb:e6:c9:3f:
         0a:a3:af:d9:51:14:bb:ad:2d:26:38:97:29:47:b8:6f:a9:5f:
         cc:1e:e1:4c:83:7a:0e:67:b5:8c:ac:f0:8a:d0:b7:a0:b5:ee:
         73:7e:db:99:c8:b9:89:6b:9c:2f:ee:3f:81:ea:82:7a:7b:f7:
         7a:cf:79:cb:b8:16:6a:e8:24:af:78:6d:b7:1f:5d:56:6a:a1:
         37:5a:7b:98:2c:39:8f:64:e2:94:fa:d9:35:e6:38:3a:0d:d8:
         ed:5f:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:25:10 2024 by rpki-client on console-ams.rpki-client.org