Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
File:                     566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json)
Hash identifier:          gEmBJy2AzvXoLl6MM1Z/96m7ytNQABp4k31ETJXoLSs=
Subject key identifier:   49:9C:39:6F:47:BA:DF:13:9C:0A:24:40:5E:C4:D8:1C:6E:11:7A:AB
Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1
Certificate issuer:       /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
Certificate serial:       73874B470AD0E2C65DE45CE0982A0C49027D1383
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
Manifest number:          15
Signing time:             Thu 27 Jun 2024 12:32:02 +0000
Manifest this update:     Thu 27 Jun 2024 12:27:02 +0000
Manifest next update:     Sun 30 Jun 2024 12:41:02 +0000
Files and hashes:         1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: nZZMov2ZHv9xvPqDQJLudYEweQtD3cCvDGFJ8VCvd1s=)
                          2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: KSK7ScbNRQ+lUkEtmVbviXmrBCQkEnG9EhonXgY43V0=)
                          3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: w1O5sIs09uM50C6QpuSxDrjaoKgNxs5pZ2RXf5YMkGM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl
                          rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 12:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:4b:47:0a:d0:e2:c6:5d:e4:5c:e0:98:2a:0c:49:02:7d:13:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
        Validity
            Not Before: Jun 27 12:27:02 2024 GMT
            Not After : Jun 30 12:41:02 2024 GMT
        Subject: CN=499C396F47BADF139C0A24405EC4D81C6E117AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:e1:9b:74:61:fa:24:56:f6:59:6a:7f:f0:
                    4c:88:66:d1:d0:d0:e3:6c:39:41:00:d6:3b:ca:57:
                    f7:e5:08:df:ef:65:ad:62:5c:d2:0e:26:66:39:74:
                    9c:4f:04:43:3b:b7:26:a1:fd:30:56:49:30:c9:47:
                    b8:b6:4b:e0:9d:7d:20:e7:01:81:36:e4:28:e0:6c:
                    ce:3d:11:ef:31:ed:0b:11:03:75:b3:41:04:dc:32:
                    85:a8:3f:14:f4:07:01:32:5f:17:16:92:39:e0:2e:
                    f9:bd:b2:de:da:d4:46:bc:c5:57:b4:8a:e3:77:e9:
                    a0:2b:3b:99:43:eb:d0:08:8a:1c:3c:2d:1a:1e:dc:
                    dd:93:59:5c:f8:0f:f8:22:dd:07:6b:6c:af:e7:50:
                    48:03:6f:97:d5:7d:dd:4c:54:e3:9b:87:8b:da:49:
                    f2:3a:99:09:73:52:27:13:12:a2:42:00:60:56:52:
                    a5:9a:37:1f:e4:48:8a:26:e0:b5:ba:92:54:6b:4d:
                    cd:c4:0a:3c:44:46:49:3e:e2:0a:1e:d3:fa:08:0a:
                    89:25:ec:ed:6d:c5:47:96:a9:8f:e9:c2:a5:a9:27:
                    4e:6f:b6:ad:cc:47:2e:31:31:6f:45:a7:e3:b8:68:
                    9c:b7:04:18:41:b0:7a:52:34:b9:f9:1c:fd:73:99:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:39:6F:47:BA:DF:13:9C:0A:24:40:5E:C4:D8:1C:6E:11:7A:AB
            X509v3 Authority Key Identifier:
                keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:32:37:36:11:b3:07:ca:1d:d7:9e:4d:c7:e3:ec:4c:86:03:
         cc:4d:6f:e0:5f:4d:ac:c2:08:f5:b7:55:63:8a:bf:aa:01:ad:
         5d:ba:2b:7a:59:57:b5:d8:34:53:0b:89:03:72:d0:29:18:86:
         54:e9:67:1f:c8:c5:c6:50:ae:0a:d5:b1:ce:b7:d0:ba:9e:f7:
         00:ec:d4:20:87:e8:74:41:0d:81:d6:f0:ba:85:cd:1a:02:21:
         a4:61:ec:4a:c9:6e:49:41:c3:fc:b9:22:c1:ab:e5:59:c6:12:
         d5:59:c8:49:50:e1:66:36:54:58:56:b3:96:e3:e4:1c:8b:76:
         d7:79:e3:4f:fd:a6:5e:5c:9f:95:2c:96:e2:10:bf:1b:12:fc:
         f9:ca:eb:34:7f:58:88:46:5f:01:8b:17:29:90:0e:60:96:4d:
         80:e1:8d:7b:0d:d0:fe:d4:ae:5a:15:ff:1e:3f:98:33:4c:6e:
         ac:8c:16:ee:37:9f:0c:54:ac:cf:5b:c7:3a:50:6e:4c:b8:6d:
         b9:fd:a5:2b:ad:3b:52:c5:c3:ba:1d:4c:e9:8f:0f:3a:79:6f:
         05:5f:c7:f4:63:da:31:25:4b:26:8e:64:1d:71:8c:94:7d:36:
         45:fd:80:04:25:a4:80:c5:d9:37:c4:63:55:1e:e1:df:9f:2c:
         47:bf:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 18:23:02 2024 by rpki-client on console-fra.rpki-client.org