Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
File:                     889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json)
Hash identifier:          0443Cnv5fAB2ZvbO/MGgrJNYWcxzYTyES34vE0Winqg=
Subject key identifier:   2F:98:23:BE:6B:57:EF:A6:D5:5D:67:80:3C:EB:1F:4B:C0:78:75:E9
Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7
Certificate issuer:       /CN=889933E416F356762F7F72858168C9C8A2E241C7
Certificate serial:       1656AD5ACA2099E916C89E5224E13503BFDC62F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
Manifest number:          0110
Signing time:             Tue 28 May 2024 01:10:31 +0000
Manifest this update:     Tue 28 May 2024 01:05:31 +0000
Manifest next update:     Fri 31 May 2024 10:57:31 +0000
Files and hashes:         1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: GNCkaHO6OWLeZVD3TrIV7G+ihR59hE8TXgJSmS9LDxA=)
                          2: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: mxD+N91ORFgbRtLYL6w7I25xQiAZn3HN8OKTcZcon+Y=)
                          3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: ysVB+ZcaoQ9cub+X6K42DRpPBs84ER8czKuJ7+ia5wg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl
                          rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 21:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:56:ad:5a:ca:20:99:e9:16:c8:9e:52:24:e1:35:03:bf:dc:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7
        Validity
            Not Before: May 28 01:05:31 2024 GMT
            Not After : May 31 10:57:31 2024 GMT
        Subject: CN=2F9823BE6B57EFA6D55D67803CEB1F4BC07875E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:2f:e4:24:83:b0:0f:3d:d5:73:6a:bc:4d:
                    53:0a:5a:be:b8:47:cc:96:93:bf:17:17:12:14:bc:
                    37:f1:81:f9:e7:1d:e1:1d:17:6b:67:fd:6c:2f:59:
                    76:4a:94:b0:5d:e8:db:05:57:b4:a4:1a:61:24:ff:
                    12:b0:89:4e:5c:7c:77:65:5c:87:46:64:16:41:9b:
                    30:b8:bd:b9:d9:a7:80:32:88:31:bc:f7:1e:fd:0f:
                    57:f8:eb:60:cd:6b:aa:e9:d7:17:0a:39:97:91:1d:
                    eb:31:a9:e1:3a:27:33:2e:d9:2e:21:d0:b9:87:09:
                    15:bd:a5:46:e9:17:98:4e:38:ce:3b:3c:4c:3b:6e:
                    e3:13:90:d2:1e:52:79:f1:3d:f2:a3:7f:f3:09:8b:
                    70:bf:2f:c8:cb:a9:af:40:0b:d9:89:1a:e7:76:44:
                    dd:db:68:a1:8d:b0:27:aa:50:bf:2f:27:07:39:92:
                    7a:22:02:aa:fb:75:17:9a:a7:4b:8d:69:b1:41:ec:
                    4f:3f:b2:63:e0:76:76:7f:e9:66:3f:05:13:42:93:
                    bc:64:a2:ca:38:5e:99:c6:4e:0b:03:d3:22:82:f3:
                    39:b6:cb:58:31:b9:f7:73:73:45:70:43:fa:32:bd:
                    c3:cf:f5:ba:94:e5:59:1e:ce:c6:cd:5f:6a:65:c5:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:98:23:BE:6B:57:EF:A6:D5:5D:67:80:3C:EB:1F:4B:C0:78:75:E9
            X509v3 Authority Key Identifier:
                keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:f7:4c:24:31:b4:49:0f:d3:9a:32:5b:50:1e:3f:7f:93:
         d6:be:f5:de:69:28:c2:37:bc:87:01:92:e4:e2:d6:1c:5f:ec:
         4a:58:71:e5:c3:0f:20:e6:34:09:82:21:78:51:94:f0:4d:2b:
         f1:97:06:cb:f6:e6:39:5f:40:09:e9:03:dc:2d:bf:ff:2b:7e:
         92:29:25:c7:be:63:11:92:f1:bc:b6:07:02:b9:e4:ab:84:2f:
         a9:ec:00:e5:d3:16:d2:6b:57:f7:0a:fd:0c:99:40:1f:bf:02:
         53:09:3c:2d:f5:e2:e9:f6:33:51:cf:81:28:53:56:f0:2a:d8:
         7d:d9:aa:22:a3:1f:80:dc:e8:26:45:d4:07:71:03:b5:4f:a9:
         68:fe:26:5d:b2:44:66:c5:4c:ae:39:5c:29:97:7a:ea:fe:8a:
         2a:64:f0:95:5e:e8:55:4b:bd:ac:89:b1:41:cb:b7:ea:c7:46:
         38:1e:58:3d:9b:95:0e:8a:6c:6b:33:40:c4:fb:ca:51:73:d9:
         64:01:9d:d4:fa:5f:d1:e1:89:f1:bd:ac:87:b8:74:51:59:26:
         59:5a:0b:2f:e9:29:23:b7:42:b2:b9:e9:f4:8e:03:53:fd:cf:
         77:17:4a:19:33:f7:70:95:97:ee:e4:39:e0:c2:c9:f5:10:fd:
         9b:86:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:06:43 2024 by rpki-client on console-ams.rpki-client.org