Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft
File:                     5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json)
Hash identifier:          GyK0i70xlgVJSjTcqUCD3e4EmgM4Vy8IBnxjy28Sj1k=
Subject key identifier:   8A:1F:03:C3:46:14:A9:DA:C0:7F:7C:93:3F:4C:C1:19:D8:71:8C:51
Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B
Certificate issuer:       /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B
Certificate serial:       5C1373897DC701E80AC4EE6026160720978E872B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft
Manifest number:          0439
Signing time:             Sun 24 Nov 2024 19:22:30 +0000
Manifest this update:     Sun 24 Nov 2024 19:17:30 +0000
Manifest next update:     Wed 27 Nov 2024 22:39:30 +0000
Files and hashes:         1: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: K1yas4SbWVtsMm8RkburVUPyXkpwaoWgiTWNJqb2AcQ=)
                          2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: l2QbtL5+hyyVVRfe0YZF9ChrujkW/kf4eBNWFTqGhOc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl
                          rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:13:73:89:7d:c7:01:e8:0a:c4:ee:60:26:16:07:20:97:8e:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B
        Validity
            Not Before: Nov 24 19:17:30 2024 GMT
            Not After : Nov 27 22:39:30 2024 GMT
        Subject: CN=8A1F03C34614A9DAC07F7C933F4CC119D8718C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:80:b4:c5:41:cc:88:87:df:82:4c:88:ea:
                    fe:dc:71:91:15:bc:0e:b2:3b:dd:f3:a4:15:f3:88:
                    26:f5:c8:78:3f:1a:5f:2a:8c:a0:07:bb:c2:ae:22:
                    cc:f9:19:a8:39:ca:82:89:18:5f:2d:86:65:6a:ba:
                    33:2f:f8:41:80:ba:6d:48:2d:b1:8c:99:ca:7c:92:
                    31:0b:dc:86:68:22:42:62:be:ea:0b:de:5e:c0:ee:
                    42:9f:44:b2:00:32:82:b1:03:92:97:56:c5:41:8c:
                    dd:d3:8c:6a:33:c8:63:ec:1a:0f:d9:7f:24:35:79:
                    b6:76:a3:c6:aa:ff:0c:06:b4:a8:29:17:a7:c9:c4:
                    44:7a:a9:af:be:c1:eb:86:1e:c0:c4:ed:ea:c8:03:
                    75:3a:08:08:63:88:e5:b8:9e:b9:2c:d6:1a:48:8a:
                    d9:6b:41:73:d8:5b:1d:7b:95:dd:db:7f:e6:ec:05:
                    78:2b:cf:e1:45:91:1a:b7:9c:9a:42:b3:ca:58:c5:
                    67:71:de:8c:71:f0:b1:9b:8d:15:af:9e:de:9b:af:
                    77:9c:de:40:87:67:1b:d4:3b:52:c9:ad:d0:f6:7e:
                    3f:42:01:68:b2:29:c7:4d:ae:13:46:6c:b5:3f:78:
                    b9:d6:00:42:e0:90:55:d7:ea:30:68:e1:9f:f4:8f:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:03:C3:46:14:A9:DA:C0:7F:7C:93:3F:4C:C1:19:D8:71:8C:51
            X509v3 Authority Key Identifier:
                keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:56:a8:74:de:e1:89:09:f7:42:69:43:b1:6b:02:2f:03:92:
         38:32:b4:4e:c5:8d:fc:e3:93:68:b1:f8:9d:70:22:79:d7:0b:
         c4:f3:d5:12:e5:0d:ba:3b:e7:64:0f:51:c8:87:b9:bc:2b:04:
         9d:b8:0a:74:30:57:84:41:2e:30:d9:5e:37:58:c2:38:c6:ee:
         7e:4b:3d:58:3b:ce:9b:d0:3a:0f:3d:06:57:a2:9e:9c:e5:2e:
         6a:f8:61:d8:e6:d3:0e:b0:ea:44:9d:74:f6:47:34:1a:e9:13:
         df:2c:d4:b3:a6:f4:68:23:cb:c6:f5:d2:cc:66:28:24:74:22:
         dc:a8:84:e7:df:df:22:af:e8:9e:09:12:01:f4:06:d2:2a:38:
         6b:d2:02:5b:65:b5:ef:2e:b0:7b:02:69:d1:95:57:96:0a:db:
         6d:fb:49:48:46:27:f7:aa:42:c4:d8:00:88:a6:02:ed:22:ed:
         17:d0:a4:20:fc:b9:59:4c:5a:28:f9:9e:7f:b4:b3:fe:f2:a2:
         9e:c2:99:94:f2:12:50:90:f3:c6:4f:53:0f:9f:38:f2:0c:2d:
         1f:19:75:c4:b8:46:40:ff:a4:39:45:51:d4:a2:a5:50:eb:0d:
         78:4f:c4:3c:6c:b9:6b:b7:55:af:4e:ae:f0:fb:dd:2f:b3:60:
         a2:c9:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:11 2024 by rpki-client on console-ams.rpki-client.org