Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
File:                     0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json)
Hash identifier:          ESQDKHJgbg3NGXc/r9xmYUFzpjT51WvAvV+w04xVmmA=
Subject key identifier:   05:FE:0F:DC:95:F1:E9:59:7D:71:48:FD:9C:53:F5:8C:78:4C:78:B1
Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
Certificate issuer:       /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Certificate serial:       2CEC09B534D5C6F82658582E06D6473827EE1C80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
Manifest number:          0488
Signing time:             Tue 26 Nov 2024 05:01:58 +0000
Manifest this update:     Tue 26 Nov 2024 04:56:58 +0000
Manifest next update:     Fri 29 Nov 2024 05:49:58 +0000
Files and hashes:         1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: F9tdd5QeHhebEkNoEGhOjfsGdvOlEa0e160KkFu+gy8=)
                          2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vaCug1qVwQYV4Eir0Vlivt2Eyx887UV2TVWoqX0yQVI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
                          rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ec:09:b5:34:d5:c6:f8:26:58:58:2e:06:d6:47:38:27:ee:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
        Validity
            Not Before: Nov 26 04:56:58 2024 GMT
            Not After : Nov 29 05:49:58 2024 GMT
        Subject: CN=05FE0FDC95F1E9597D7148FD9C53F58C784C78B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:f5:d6:f2:9e:b4:9f:d4:97:65:8b:9f:f7:
                    9c:6f:67:9f:a2:f6:19:78:8e:53:dc:ad:7d:a9:64:
                    c9:bd:73:88:25:4f:ab:33:24:cf:3c:5d:5a:85:d1:
                    e3:9d:59:f6:60:b8:6d:d6:40:f1:71:82:5d:f0:37:
                    59:23:ae:c5:40:b5:ba:a5:32:c0:d9:ff:8f:d0:78:
                    84:36:ea:01:ab:32:e8:a4:84:e0:d5:10:75:4e:f5:
                    67:83:b4:a1:dd:7d:9e:43:5a:64:0d:77:19:d2:fc:
                    49:e1:71:6d:b8:bb:ff:55:a2:ea:cc:cd:81:1d:d0:
                    0e:0e:da:f0:51:bc:a1:e9:08:21:2a:c7:8f:43:c4:
                    54:d8:fa:e0:cc:a0:7b:24:d7:8e:f1:a9:5a:23:ec:
                    93:5d:2d:16:9c:e5:21:69:c6:09:6a:ab:ef:38:a8:
                    3c:f1:c9:cc:4b:c8:a6:59:80:44:6c:32:4d:07:3a:
                    e6:4f:c3:4d:6e:d7:92:78:60:a0:fd:26:c8:47:82:
                    54:bc:c4:40:6d:2c:b2:22:de:0b:87:82:86:f5:10:
                    84:fc:d5:f1:38:f4:31:6f:27:58:4e:7f:87:d2:61:
                    d3:20:77:7c:72:09:8e:1d:c3:45:d3:09:8f:63:fa:
                    11:b6:94:d3:b3:66:7c:33:e5:6b:e9:ae:2a:22:cf:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:0F:DC:95:F1:E9:59:7D:71:48:FD:9C:53:F5:8C:78:4C:78:B1
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c3:ec:f4:7d:cd:e5:37:71:6a:1c:4e:12:12:9d:d7:38:80:
         27:28:11:24:46:1e:d2:a0:8a:4d:97:59:74:9f:b6:70:88:0d:
         76:99:45:7a:e0:e0:bc:a1:c2:30:f9:80:72:78:cf:4e:df:94:
         53:28:48:7a:b3:5b:5e:fb:e9:e4:5f:9f:a4:99:9a:36:b5:e8:
         e8:d0:30:9e:1e:f9:f6:cf:47:5f:88:1d:ed:ca:5c:6f:ff:94:
         3e:95:69:4d:2b:df:21:46:c2:19:4b:12:c0:22:01:e6:34:fc:
         f3:72:5c:cd:76:97:df:d7:40:71:2f:c6:7d:b1:58:95:6c:1a:
         f6:03:54:6a:5f:d7:02:b8:d2:ff:16:b9:b5:d6:0e:67:78:fa:
         a6:df:50:a6:6e:13:e1:d9:b8:d1:86:a5:92:b7:7c:2d:2a:dc:
         53:92:16:43:6f:46:fd:30:ed:35:7f:84:85:6d:95:4b:86:db:
         98:11:95:fb:19:41:9e:ac:ec:11:ad:47:e5:42:da:53:ea:27:
         ae:b7:5b:71:7f:38:04:cb:ef:57:ca:a4:dd:40:73:f1:cd:13:
         e8:eb:da:e6:16:ea:bd:24:fa:11:f2:74:2b:58:4c:ef:13:e9:
         0d:c2:b6:1b:14:c3:a8:ac:47:9c:8b:9e:7a:e2:78:98:de:3c:
         7b:63:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:31:35 2024 by rpki-client on console-fra.rpki-client.org