Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
File:                     CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json)
Hash identifier:          +DyRNCT+ImuyCI5YInlmFFb6eIH7KcrBVkiysrBMSNs=
Subject key identifier:   1E:F4:C1:14:97:3E:2A:0B:1B:E1:FE:8A:E7:B0:96:17:51:6C:90:62
Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Certificate issuer:       /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Certificate serial:       2C52E750F06581D43BDB640B485C99ACB3BCD8D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
Manifest number:          2D
Signing time:             Sun 16 Jun 2024 08:30:35 +0000
Manifest this update:     Sun 16 Jun 2024 08:25:35 +0000
Manifest next update:     Wed 19 Jun 2024 19:37:35 +0000
Files and hashes:         1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: dQqdGzwsOH4w6OoRumtaDfHU4ux71p/P4WkaxWzep5I=)
                          2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: dYLGwX6x//D+8eoU/n2virU9jHf3lYDEXKf6fC2Iwc0=)
                          3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: Sn05/bSNK3UI+jgzbHNVh7sI4gpBMEGsPIWMzl/hpfI=)
                          4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 7kk5lzX+ABHwnoVX8AogEcbZ2Bl1IUp9EP4dmPT8sis=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
                          rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 16:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:52:e7:50:f0:65:81:d4:3b:db:64:0b:48:5c:99:ac:b3:bc:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
        Validity
            Not Before: Jun 16 08:25:35 2024 GMT
            Not After : Jun 19 19:37:35 2024 GMT
        Subject: CN=1EF4C114973E2A0B1BE1FE8AE7B09617516C9062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:72:28:f3:08:4e:c1:f5:39:f2:ca:f4:d6:
                    09:d8:36:ec:14:c3:00:2a:41:84:8e:8a:72:a0:aa:
                    41:0d:82:6c:80:a5:b8:cb:49:35:49:3e:e5:54:8d:
                    39:9d:83:2a:8a:9b:ca:8a:64:46:fe:15:4e:9f:5a:
                    5b:78:4a:40:c8:c4:11:0e:84:a0:09:4e:cb:99:1f:
                    ad:a8:0e:10:e6:93:e1:ef:2b:e8:2c:83:05:1c:8a:
                    0b:63:9b:d1:3c:43:e2:55:87:49:16:0f:ca:6c:61:
                    dd:9f:c8:71:45:d7:d9:ec:e3:2f:d4:93:7f:ac:ce:
                    4d:63:2a:fd:32:e9:a4:3e:5c:97:05:e4:d9:98:90:
                    6d:46:e1:00:25:ae:ba:58:a8:1b:ce:aa:e4:4d:16:
                    d1:bf:05:97:58:5c:3f:f1:fd:8a:b8:63:b3:35:d7:
                    a2:f6:83:69:aa:4c:b6:87:86:d9:89:26:23:1a:e9:
                    1b:28:73:f3:64:8b:aa:ed:0b:db:a8:a0:56:c5:f2:
                    7d:a3:2f:17:6a:04:e3:6f:23:10:79:d9:31:d9:13:
                    bf:ed:86:cf:cf:79:63:80:73:50:34:a1:c4:35:42:
                    3c:21:34:35:1a:c3:8e:39:14:83:0e:43:19:36:4f:
                    dd:14:51:28:d3:75:5b:b9:9b:f4:33:b4:51:75:56:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:C1:14:97:3E:2A:0B:1B:E1:FE:8A:E7:B0:96:17:51:6C:90:62
            X509v3 Authority Key Identifier:
                keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:36:e9:cc:e7:2a:ed:30:47:0c:c7:e1:df:58:f1:5c:ff:
         96:4d:d0:60:81:30:6d:98:21:9d:24:01:1e:99:21:50:08:bb:
         8f:05:b7:ff:ae:5d:a1:41:c9:66:23:cc:14:0c:2a:35:24:3d:
         4d:5d:35:99:ff:73:cf:0f:86:36:db:94:cc:6f:f8:08:f3:66:
         d2:74:16:f1:ce:49:e7:7a:03:2b:f1:92:d7:0c:71:77:18:c4:
         3c:da:0e:20:1f:93:c0:d5:98:8b:a9:3a:fe:05:08:f9:ce:53:
         3e:f1:04:7d:8b:ba:61:42:c5:b9:18:87:a7:5d:c0:2d:3c:9b:
         0e:eb:7b:89:2e:49:7c:36:ba:20:75:6b:b3:3e:4f:1b:87:3c:
         71:2a:fe:e1:d3:ed:71:94:8c:3f:6e:1d:37:9d:ae:d9:d3:38:
         f2:43:65:bd:e5:20:df:c1:ce:13:9c:3c:60:a4:43:7b:c6:1f:
         09:60:60:f6:4e:2e:07:ee:52:f3:75:e8:f2:73:bf:26:cc:55:
         fc:eb:b2:6b:c4:a0:19:70:90:04:a0:a3:b3:4f:41:e5:da:8e:
         32:ba:de:10:02:56:b7:7b:28:d9:f7:5f:3d:af:d0:39:f1:60:
         fd:b2:b5:8b:07:9e:30:c5:22:9f:41:91:55:d9:b5:9c:c7:f9:
         cc:2a:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:54:48 2024 by rpki-client on console-fra.rpki-client.org