Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft
File:                     D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json)
Hash identifier:          0ljnYmPNua53aILU/qPGtMQdkhGDVsQfuDbs//VVEOw=
Subject key identifier:   55:D9:35:B0:0E:B6:AB:90:18:3C:DB:B4:E5:78:B5:EB:B3:6C:1F:E7
Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B
Certificate issuer:       /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
Certificate serial:       7FCA11373DDAA47CBBAF93A584522DE03A0DF08A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft
Manifest number:          3E
Signing time:             Mon 25 Nov 2024 21:02:10 +0000
Manifest this update:     Mon 25 Nov 2024 20:57:10 +0000
Manifest next update:     Fri 29 Nov 2024 00:48:10 +0000
Files and hashes:         1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: YzMeBHl/gp0hPsD74Syrnw/fYYcZ9K46SBc/IU62Y+g=)
                          2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs=)
                          3: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: +c4TZDTvECr/8UJ20sEaDqbw7uApIxKb561Ri5XrRDY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl
                          rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ca:11:37:3d:da:a4:7c:bb:af:93:a5:84:52:2d:e0:3a:0d:f0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
        Validity
            Not Before: Nov 25 20:57:10 2024 GMT
            Not After : Nov 29 00:48:10 2024 GMT
        Subject: CN=55D935B00EB6AB90183CDBB4E578B5EBB36C1FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:70:f2:14:2c:99:97:5c:b4:34:22:e1:cc:
                    28:9e:41:98:61:14:46:33:50:34:c8:ee:88:77:17:
                    4f:ff:a5:1a:02:ba:f9:ff:9f:1e:2a:48:38:24:7e:
                    ab:74:48:38:1d:63:1e:6d:26:a6:1a:fe:e2:0c:03:
                    8a:de:3c:d0:52:2c:a3:4c:1a:01:4f:93:d9:ea:69:
                    4b:40:00:da:25:8b:6d:36:64:ee:1f:dc:b0:cf:59:
                    05:d0:6a:17:e4:0f:39:c4:94:7b:29:22:b2:b0:ed:
                    b7:ea:12:b7:11:77:07:de:c5:f1:f8:23:9b:8f:49:
                    43:e0:81:b7:58:70:10:28:11:4c:9b:04:19:f2:f6:
                    4d:00:08:11:7b:93:f6:45:88:87:b2:c4:d4:d4:44:
                    75:9f:d5:a0:22:aa:72:0d:3e:f3:8c:78:94:84:61:
                    33:a5:cc:66:76:e4:f0:55:1d:2a:40:05:49:b8:16:
                    c5:84:19:03:28:9c:7f:02:cb:1f:a3:68:5c:d6:ee:
                    59:cf:72:15:96:66:e0:92:a7:1b:e2:d6:13:45:c8:
                    6b:44:56:56:6d:7f:ce:6f:36:00:19:3f:68:6c:70:
                    01:f4:e4:e1:fe:2b:74:8c:85:aa:c7:c8:f4:d1:d9:
                    8e:dc:9d:3e:56:b9:6b:81:cd:55:a1:42:74:26:95:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:35:B0:0E:B6:AB:90:18:3C:DB:B4:E5:78:B5:EB:B3:6C:1F:E7
            X509v3 Authority Key Identifier:
                keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f3:09:08:06:1a:29:22:8e:c9:f7:d7:d5:76:2f:2e:e0:1d:
         05:ef:19:8c:93:f7:ab:84:d2:44:cc:21:5e:25:7e:9e:29:46:
         5b:22:e2:18:30:32:af:0a:25:e0:55:d2:2c:36:63:95:1a:1c:
         46:18:bb:33:0f:dd:15:36:35:e7:7b:ba:4b:04:d2:3d:30:02:
         04:74:5e:49:32:30:f1:fa:95:9f:3b:5a:7a:70:3c:bd:9b:6d:
         da:9f:c2:0d:0e:17:e4:2b:f9:ad:51:ef:9b:63:5a:89:88:51:
         7d:7f:d5:1c:bc:86:52:6b:86:ce:d3:f9:73:c4:88:c5:d5:a0:
         75:82:10:4e:1f:b4:93:89:58:81:37:ac:f1:52:1b:8f:bc:b1:
         2c:ff:32:da:35:e4:32:ee:59:95:a7:40:2a:f9:46:78:a6:a3:
         02:b3:1a:cd:20:29:65:03:a0:99:62:a2:a3:8a:83:6d:ce:90:
         bb:32:ba:f2:17:b4:7a:4f:35:16:29:59:13:81:32:4c:85:96:
         4d:c8:96:df:70:6f:9b:c4:e5:fd:da:7d:f3:4b:91:5c:53:c9:
         c9:a6:1c:1c:82:31:2d:dd:e2:ba:1c:e6:6b:71:53:22:35:db:
         48:0c:e1:d8:2d:38:c6:aa:6a:fc:f2:48:90:b7:6f:83:89:6e:
         d7:47:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:29 2024 by rpki-client on console-fra.rpki-client.org