Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
File:                     25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json)
Hash identifier:          qj86evuSxE0qY5FjTh90UxMB995A7nLYibypy4l+pns=
Subject key identifier:   75:6D:0D:94:4D:F7:24:2F:C8:8A:E6:78:16:49:45:27:E5:1B:50:60
Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0
Certificate issuer:       /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
Certificate serial:       744C53A67EBFBE9EB8362DCC2692840C37460253
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
Manifest number:          0230
Signing time:             Sat 18 May 2024 23:50:38 +0000
Manifest this update:     Sat 18 May 2024 23:45:38 +0000
Manifest next update:     Wed 22 May 2024 00:07:38 +0000
Files and hashes:         1: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: ar9mWD1mA3g6Qr4pQeBmzkqSeXL6gM0xBz14rAPJF8c=)
                          2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: qHmdjcv4uoQirMGqe31vIMcRz4Leb1T6/+sE54OTdYI=)
                          3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: ugWYVHs75NsWXHXMV1E4ni1vP/LjtMNAJFnJ0Q/Ud7s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl
                          rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4c:53:a6:7e:bf:be:9e:b8:36:2d:cc:26:92:84:0c:37:46:02:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
        Validity
            Not Before: May 18 23:45:38 2024 GMT
            Not After : May 22 00:07:38 2024 GMT
        Subject: CN=756D0D944DF7242FC88AE67816494527E51B5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:46:18:4f:01:79:1e:44:73:8e:8c:bf:1d:
                    80:e3:f1:78:f1:d3:47:51:f0:fc:26:f3:fb:d3:13:
                    33:1b:6e:f1:d9:55:42:b5:25:f1:d0:5e:83:ea:8e:
                    6a:19:1c:f5:30:70:df:5f:f3:59:0e:55:84:f5:f7:
                    20:4a:81:5e:74:b0:2a:33:76:b9:7e:c2:64:d5:c7:
                    cc:28:78:9a:25:e1:66:28:7c:c3:1b:73:10:9d:d6:
                    bb:4b:49:8b:f9:e6:cc:c2:67:e2:da:bf:26:c9:80:
                    bd:11:23:75:6b:b5:70:59:8e:9a:6f:90:c7:5f:11:
                    48:e2:f4:e3:c6:8a:d6:d5:ad:73:0c:15:9e:e9:da:
                    30:ed:3c:87:82:dc:88:59:94:10:58:8d:77:6c:4b:
                    7b:46:a7:60:88:f9:61:42:56:e6:91:9e:f5:74:e6:
                    30:eb:73:0f:40:ab:13:82:34:71:00:35:e4:1f:44:
                    48:41:96:ef:15:f4:df:ff:df:7e:55:db:a7:22:66:
                    ea:c6:54:3d:a3:c9:ea:91:24:aa:f4:65:f1:a2:89:
                    e3:8d:5f:a7:7b:bf:a9:4f:65:e8:d0:4c:42:aa:2e:
                    69:5f:03:3f:d0:53:21:ea:b4:4d:b4:3f:8a:9e:76:
                    5e:d1:86:9d:b6:d1:6d:39:30:48:55:38:bc:10:0f:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:0D:94:4D:F7:24:2F:C8:8A:E6:78:16:49:45:27:E5:1B:50:60
            X509v3 Authority Key Identifier:
                keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:16:d9:74:d2:ec:eb:6b:05:aa:14:13:e6:81:be:3d:82:c6:
         87:de:3d:41:72:d1:a3:ba:02:72:34:44:23:a7:af:a5:56:51:
         94:94:93:dc:29:d1:f7:5c:03:7e:c6:a4:61:c5:53:e9:f2:67:
         02:e5:45:de:ab:c0:f8:23:05:e7:88:59:fe:79:2d:5c:b9:47:
         01:3d:03:c1:d1:fd:4d:dc:2f:5a:ea:6b:58:18:f4:ec:dc:66:
         95:13:9d:20:6d:77:0d:bb:ac:ab:b4:f0:fc:7c:18:b3:d7:ba:
         32:ea:13:9f:49:e0:67:1e:09:5b:f0:30:29:44:e4:7f:aa:99:
         91:e4:ff:d8:53:89:e9:c5:76:ba:11:36:af:ad:c1:1e:44:b4:
         e7:20:bc:a2:ec:91:a4:68:e5:37:80:49:73:6e:e1:b8:10:5b:
         4d:d1:f6:95:f7:93:6c:a3:00:cb:fb:b0:e2:b7:43:f5:73:1c:
         63:6f:e1:ba:9a:f3:51:84:57:6a:ce:cc:cd:95:f0:36:3b:e0:
         63:3c:39:98:23:05:ea:1f:4d:a7:f7:43:f6:88:24:04:55:89:
         dc:cb:16:0d:99:fe:95:bd:94:70:86:13:f5:10:16:5b:7f:a7:
         b6:5d:2f:8d:c6:ce:1f:f3:9f:9a:78:0c:91:58:21:d3:9f:ae:
         ac:c8:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:29:18 2024 by rpki-client on console-ams.rpki-client.org