Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
File:                     DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft (raw, json)
Hash identifier:          YO1iff7GvmdgmDN3clQ+ug6Lgug2ex0aRPX+ED49bLs=
Subject key identifier:   25:AF:26:6C:4E:1B:2B:BA:13:47:B2:82:F4:B6:AD:45:44:C8:C6:C2
Authority key identifier: DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F
Certificate issuer:       /CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F
Certificate serial:       0FDE2B15D92AE801AC82A1DF6E790A261295B0B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
Manifest number:          012F
Signing time:             Sat 18 May 2024 19:32:02 +0000
Manifest this update:     Sat 18 May 2024 19:27:02 +0000
Manifest next update:     Tue 21 May 2024 20:15:02 +0000
Files and hashes:         1: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: MSgc5mzqLWrvOMg4eltpqMcF8Loon1tag37mOMmzYhc=)
                          2: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl (hash: IK+gEL/xRr4Di/7vcDd8HiwpqpqZgP0r7XnJWmyC+9g=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl
                          rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:de:2b:15:d9:2a:e8:01:ac:82:a1:df:6e:79:0a:26:12:95:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F
        Validity
            Not Before: May 18 19:27:02 2024 GMT
            Not After : May 21 20:15:02 2024 GMT
        Subject: CN=25AF266C4E1B2BBA1347B282F4B6AD4544C8C6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:3c:49:5b:7d:a7:ab:7c:40:69:0e:10:7f:
                    a3:ca:2b:c7:9f:7b:fb:e7:ca:98:c8:7c:f0:89:fe:
                    4a:fe:17:bc:83:ed:f9:d4:ba:de:70:21:8c:bb:96:
                    69:7f:89:6b:7b:f3:a8:69:93:04:1b:1b:92:8a:40:
                    88:4e:c3:e3:0e:1a:74:e3:8b:e5:37:61:3c:36:26:
                    bb:34:2e:da:83:c3:34:63:30:34:af:7c:37:9e:ae:
                    db:e8:5b:fa:56:3a:d5:2a:d4:81:dc:d8:61:a7:86:
                    7c:54:52:e4:9d:ae:dd:be:f8:e0:2c:79:46:88:8e:
                    22:90:15:a2:3a:5f:72:05:1a:ea:01:f4:5f:dc:ee:
                    5d:ec:69:49:d0:9c:8b:04:8d:35:e1:9e:72:5d:c1:
                    0b:f2:14:ef:8e:f8:f7:fb:91:b0:e5:bb:51:be:c5:
                    5e:cd:d0:c8:6c:d9:d6:c2:04:c2:2b:d8:78:39:cf:
                    26:7f:f3:98:33:a1:fe:76:a1:6a:4b:0c:8e:f7:51:
                    44:b3:41:9d:ad:c4:bb:4d:35:9c:ea:f7:b4:3b:ab:
                    ce:17:38:a3:a8:b4:9c:f7:69:53:57:a1:af:d4:26:
                    a7:47:d7:8b:3a:29:09:5e:c5:f7:e8:9c:cb:7a:5f:
                    c9:14:2b:70:7a:b9:d0:91:d6:90:da:5f:04:9f:b0:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AF:26:6C:4E:1B:2B:BA:13:47:B2:82:F4:B6:AD:45:44:C8:C6:C2
            X509v3 Authority Key Identifier:
                keyid:DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:c9:b7:b1:29:71:55:15:be:c9:8f:3e:9a:5a:e7:76:6b:
         9a:3a:e2:d6:8e:e5:a4:f3:e7:f9:b2:e2:4e:bf:86:c3:41:41:
         4b:35:c1:a1:bd:51:11:3e:3d:2d:92:7e:9f:eb:19:7d:36:1b:
         ac:f0:d7:40:c7:4a:2b:35:6a:37:65:3c:71:89:8d:4c:ae:1a:
         5c:31:de:8d:10:db:ef:42:a3:fd:b8:f2:f8:c4:0d:21:36:6f:
         73:68:f9:e7:29:b4:44:33:37:df:ba:81:dc:12:10:f8:ad:91:
         22:c7:f0:7f:02:cd:f1:f3:76:76:20:d3:4d:31:d0:4b:94:61:
         d1:ac:df:28:3d:62:4a:62:43:25:34:dc:60:28:f9:06:28:00:
         6d:27:13:1b:cf:ee:b2:81:2d:e6:28:d4:b1:a2:b0:43:5c:c7:
         3f:a5:37:db:32:ae:c3:9d:4c:eb:20:5d:6a:37:9f:37:24:6b:
         0e:61:00:8e:b1:2f:30:8f:f5:c0:de:f5:6b:09:d1:33:57:ee:
         80:ed:0a:b2:63:10:f9:48:cc:49:c9:66:bf:ea:2c:8c:02:f3:
         36:74:de:e7:06:78:ac:77:20:27:f5:e1:b4:67:73:f0:dd:87:
         58:2f:25:95:eb:e2:bf:49:14:db:d3:e7:76:03:28:59:af:80:
         f9:3b:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:15:34 2024 by rpki-client on console-ams.rpki-client.org