Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft
File:                     DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json)
Hash identifier:          i5CkC72WaZsGqOao6qU4iU2N0PU218FbTKpNN0iSv0c=
Subject key identifier:   45:BD:2D:10:C4:8C:88:24:ED:50:5D:9C:7B:3D:57:50:06:4D:F3:ED
Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5
Certificate issuer:       /CN=DD8ADB0CD599281204D387EB652787650920B6C5
Certificate serial:       5CA296C13DB9A1E822C1F1BC813768736ADDB180
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft
Manifest number:          DE
Signing time:             Sat 05 Apr 2025 01:00:36 +0000
Manifest this update:     Sat 05 Apr 2025 00:55:36 +0000
Manifest next update:     Tue 08 Apr 2025 07:56:36 +0000
Files and hashes:         1: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: lT97SFBGNp2AGYpIB5us6B1nOEYJ3rE/PTttG7gk39A=)
                          2: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: 5FFzhuEH4sCF54XVtFSTU94fa/L5mjleJyrEVu3hEAE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl
                          rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a2:96:c1:3d:b9:a1:e8:22:c1:f1:bc:81:37:68:73:6a:dd:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5
        Validity
            Not Before: Apr  5 00:55:36 2025 GMT
            Not After : Apr  8 07:56:36 2025 GMT
        Subject: CN=45BD2D10C48C8824ED505D9C7B3D5750064DF3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:fe:3d:0e:b9:f5:82:46:e5:b6:37:e2:3d:
                    94:18:35:2b:13:05:f0:d9:90:b7:aa:e2:d9:93:99:
                    f2:8f:10:d5:ed:0c:1b:54:08:90:f5:c3:61:57:3d:
                    fe:96:3c:ec:95:b8:04:b6:b7:be:0e:e9:dc:e5:67:
                    07:00:71:84:34:b7:7a:3a:de:f4:b9:c6:43:c7:37:
                    a7:b8:ca:2a:da:60:3e:d4:d8:c5:17:4e:60:90:ce:
                    6d:60:56:46:6d:69:21:25:73:82:bc:29:67:3e:91:
                    6e:77:6e:9c:57:31:a0:ea:ea:3d:cd:1a:e1:cf:55:
                    77:4b:f0:99:41:42:6c:34:ed:2b:bf:31:ac:3e:0e:
                    8c:a9:d3:a3:6f:fc:92:02:2f:77:c7:3b:d4:d4:0c:
                    03:c6:e9:23:49:13:c7:93:0b:ef:dc:06:ec:b5:f8:
                    6a:79:47:3d:e5:fe:e0:23:79:46:79:74:bd:e6:18:
                    51:a5:4f:e1:b4:65:82:2f:61:b7:7b:f5:d0:c7:a1:
                    f3:93:b6:f7:e3:c9:57:b4:aa:e6:4b:18:3e:86:22:
                    2b:09:df:60:78:5a:63:d6:5e:c6:02:ba:18:69:2b:
                    90:2e:fa:d0:97:ae:2d:84:cc:44:7f:93:ed:e3:fe:
                    18:8c:d1:43:51:0c:d2:f2:9e:ef:35:1e:c8:e3:68:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BD:2D:10:C4:8C:88:24:ED:50:5D:9C:7B:3D:57:50:06:4D:F3:ED
            X509v3 Authority Key Identifier:
                keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4d:3f:3e:87:51:0d:1e:19:00:8f:07:30:82:a6:b0:a8:20:
         35:9a:b6:65:8f:93:d6:13:2e:51:b8:2a:f6:3f:c6:01:d8:bc:
         14:ca:17:49:81:57:37:c5:71:43:a6:93:8f:70:00:49:90:d6:
         e0:01:cb:f7:47:0c:ed:22:db:c8:53:31:8f:56:dd:d1:d7:d3:
         8b:84:6a:c4:be:9d:70:74:54:30:17:fe:e7:28:5f:ee:c6:0f:
         62:97:73:18:54:f1:69:85:0e:4f:af:c6:78:7a:a3:c5:ed:76:
         f2:d4:75:32:9a:c7:cc:37:3a:22:9f:4d:51:a5:55:f6:63:e4:
         f4:26:63:98:48:2f:8f:15:4c:c1:05:00:8f:9a:c5:f8:22:8a:
         46:ec:8d:98:5c:8f:77:7e:06:f2:c4:5b:67:86:e0:30:1f:de:
         b8:db:6b:eb:be:15:e2:86:84:6f:33:c3:9d:3d:c2:57:46:22:
         1d:8d:14:d8:89:9b:32:ef:9d:61:cb:c9:61:e5:ea:c2:c4:db:
         bd:68:7f:f9:94:5c:6b:0e:6d:fb:41:e6:fb:b0:22:68:b3:1a:
         08:4a:cb:5e:a7:64:56:aa:3d:69:e6:67:4c:05:09:10:eb:d5:
         81:f3:72:7f:ff:a9:69:33:fd:11:b0:76:93:08:95:c6:ce:99:
         44:ac:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:46 2025 by rpki-client