Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
File:                     DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json)
Hash identifier:          jzKgKIQGjEcyCfosf/KQ8SEIJTys9bKz5d/9z1TbTQw=
Subject key identifier:   21:DF:5A:6A:A5:33:CC:87:9B:CC:70:ED:7B:C9:14:36:F8:C5:4D:1D
Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
Certificate issuer:       /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Certificate serial:       13A6B5BBE4D4A496D482273965FFC64BDC96A374
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
Manifest number:          E7
Signing time:             Sat 23 Nov 2024 16:52:29 +0000
Manifest this update:     Sat 23 Nov 2024 16:47:29 +0000
Manifest next update:     Tue 26 Nov 2024 21:29:29 +0000
Files and hashes:         1: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: 09trBlM0X7cPILlYSlJaUQWhmbw7RC+j1hg9ineoeq4=)
                          2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: r76LZQkGw3+r+mOs9EO3jBRtJ2qqrSf+AOrOMbwVEKI=)
                          3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: OAAK4zwNVY3HB/EC7gjtn1kWIMzq0rMuIqda2VXfGTc=)
                          4: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: EcFXjiBFgpM0EFq475DNDSffbGfpictm7Po6O/3zApw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
                          rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:b5:bb:e4:d4:a4:96:d4:82:27:39:65:ff:c6:4b:dc:96:a3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
        Validity
            Not Before: Nov 23 16:47:29 2024 GMT
            Not After : Nov 26 21:29:29 2024 GMT
        Subject: CN=21DF5A6AA533CC879BCC70ED7BC91436F8C54D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:6e:68:29:2f:72:d4:e1:33:af:05:38:ce:
                    04:dc:14:e5:10:69:e7:22:12:9e:d2:ad:8a:09:bd:
                    73:39:25:fb:35:6d:62:de:b0:77:31:b7:14:96:45:
                    43:8b:b6:d0:d1:a2:72:10:5c:34:2b:72:49:99:fd:
                    3c:d3:3f:f6:b3:65:5e:27:29:04:f2:e4:df:bc:64:
                    e3:4b:f4:68:34:d3:c9:7c:a4:a0:ec:48:54:84:63:
                    16:26:dc:6b:d7:78:f0:96:15:c8:03:e5:91:d9:20:
                    e4:36:10:7a:87:a1:67:0d:08:75:5e:44:1f:56:ab:
                    8c:fa:0a:45:ec:d1:81:86:84:b8:07:bd:21:34:c4:
                    0a:fd:0a:7a:97:c3:44:2a:8b:c3:7e:0a:fa:5e:7c:
                    0e:5c:94:75:30:e2:b0:54:00:19:7e:19:b7:ae:13:
                    b1:ab:ee:e7:22:f5:3f:e5:1f:c0:98:49:d6:af:59:
                    a2:5a:9f:59:fc:06:75:cd:36:87:04:57:2c:19:74:
                    66:28:cf:d7:83:0e:10:30:c3:e5:35:ce:c9:ca:14:
                    b6:75:8a:0d:e6:36:ad:65:6e:c1:25:06:90:04:f8:
                    ca:52:33:b2:0d:10:27:48:9d:48:8e:6a:d9:89:b0:
                    9d:ae:ca:8c:6a:fd:1e:6c:28:d4:ad:53:43:41:34:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DF:5A:6A:A5:33:CC:87:9B:CC:70:ED:7B:C9:14:36:F8:C5:4D:1D
            X509v3 Authority Key Identifier:
                keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8b:a3:58:b7:46:fb:83:37:67:9d:7d:70:15:b6:49:c7:12:
         20:ec:3f:72:57:8d:75:42:5a:e1:dd:09:de:14:38:fe:b8:e7:
         94:94:83:11:76:a8:cd:47:96:1b:17:0a:6f:44:7d:36:df:ca:
         c2:37:92:00:99:15:5b:46:14:3b:f4:85:df:ae:2e:53:0b:10:
         6c:e1:7e:2c:fd:cb:3c:26:2d:fe:a0:47:0e:ba:2d:fb:be:6d:
         53:db:0f:10:24:d2:82:dd:a2:a6:4e:cb:96:6c:b4:0f:1b:c2:
         00:74:dc:6a:8c:35:8e:1c:25:fe:c6:fd:a6:b9:58:bc:d5:59:
         5d:77:4a:ee:3e:bc:96:a3:31:00:1f:bb:98:df:0b:30:8a:72:
         23:d9:dc:57:96:42:f2:f2:5d:df:34:5a:db:d1:ae:d4:d1:17:
         61:a5:94:2e:62:10:b7:c0:e9:af:8d:d0:8f:e3:21:05:03:dc:
         d0:02:29:06:4b:fb:c3:be:14:06:a8:1d:4f:5e:be:a7:ef:f2:
         0f:35:74:c9:bc:3e:bc:8f:de:c4:25:36:83:7c:15:a2:d1:1b:
         79:25:cb:dd:9b:79:95:0b:42:07:9d:11:e9:2a:9f:9b:5a:3b:
         15:5a:34:87:f0:9f:e7:2e:3c:b9:47:46:58:5a:26:fd:26:b6:
         94:b4:cb:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE6a1u+TUpJbUgic5Zf/GS9yWo3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5
MEU4QjdBRDAeFw0yNDExMjMxNjQ3MjlaFw0yNDExMjYyMTI5MjlaMDMxMTAvBgNV
BAMTKDIxREY1QTZBQTUzM0NDODc5QkNDNzBFRDdCQzkxNDM2RjhDNTREMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvm25oKS9y1OEzrwU4zgTcFOUQ
aeciEp7SrYoJvXM5Jfs1bWLesHcxtxSWRUOLttDRonIQXDQrckmZ/TzTP/azZV4n
KQTy5N+8ZONL9Gg008l8pKDsSFSEYxYm3GvXePCWFcgD5ZHZIOQ2EHqHoWcNCHVe
RB9Wq4z6CkXs0YGGhLgHvSE0xAr9CnqXw0Qqi8N+CvpefA5clHUw4rBUABl+Gbeu
E7Gr7uci9T/lH8CYSdavWaJan1n8BnXNNocEVywZdGYoz9eDDhAww+U1zsnKFLZ1
ig3mNq1lbsElBpAE+MpSM7INECdInUiOatmJsJ2uyoxq/R5sKNStU0NBNASVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUId9aaqUzzIebzHDte8kUNvjFTR0wHwYDVR0j
BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC
MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4
QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz
YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF
Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGmLo1i3RvuDN2edfXAVtknHEiDsP3JXjXVC
WuHdCd4UOP6455SUgxF2qM1HlhsXCm9EfTbfysI3kgCZFVtGFDv0hd+uLlMLEGzh
fiz9yzwmLf6gRw66Lfu+bVPbDxAk0oLdoqZOy5ZstA8bwgB03GqMNY4cJf7G/aa5
WLzVWV13Su4+vJajMQAfu5jfCzCKciPZ3FeWQvLyXd80WtvRrtTRF2GllC5iELfA
6a+N0I/jIQUD3NACKQZL+8O+FAaoHU9evqfv8g81dMm8PryP3sQlNoN8FaLRG3kl
y92beZULQgedEekqn5taOxVaNIfwn+cuPLlHRlhaJv0mtpS0y14=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:33 2024 by rpki-client on console-ams.rpki-client.org