Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
File:                     CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json)
Hash identifier:          afSJtbaIFnZ8vBP3/S0/PNixLbEl3T7Iz+G74664maQ=
Subject key identifier:   5A:1B:80:65:1C:D7:AF:13:92:FA:3E:39:F5:B3:72:ED:BB:33:C5:96
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       2897935F9BE9E61C102630B2ED75697E6B9FC130
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
Manifest number:          DB
Signing time:             Sun 19 May 2024 21:31:54 +0000
Manifest this update:     Sun 19 May 2024 21:26:54 +0000
Manifest next update:     Thu 23 May 2024 06:28:54 +0000
Files and hashes:         1: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PyYiwhlFLYwpVeZMVUP48PPdFiaKcZ+8zWirbz0F2cA=)
                          2: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: l6IRBOPs8x/zEoGdly8nQLjTraLa30G2PSa3XZRGN/w=)
                          3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: I4VijeqzXuGU6NjPNPwNtMenqxEyrUy/AcslXasOyn0=)
                          4: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: oLa9cCei9pKiGWr8BFNqh/B/YQHv8J1MAtYIK4feuIY=)
                          5: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: 1Kl4lg6aHli2wIKfOsAM22MvTCKA9OA1XRLb/LM4blY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:97:93:5f:9b:e9:e6:1c:10:26:30:b2:ed:75:69:7e:6b:9f:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: May 19 21:26:54 2024 GMT
            Not After : May 23 06:28:54 2024 GMT
        Subject: CN=5A1B80651CD7AF1392FA3E39F5B372EDBB33C596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:47:9d:49:54:45:b5:07:10:2d:4d:81:34:
                    9d:ea:43:78:0e:29:0a:c0:b1:cd:d1:96:9b:e3:2b:
                    60:c2:1b:d3:9b:a8:bd:62:1b:c9:53:17:18:90:71:
                    e0:5e:a4:60:71:27:4a:6b:0f:38:72:ff:66:cd:7f:
                    d5:b9:99:d5:69:05:25:e6:5f:9e:d6:ad:0f:5d:b6:
                    0e:93:88:9f:09:36:e4:81:f5:8e:c7:e5:cd:12:03:
                    2f:d7:ec:fd:08:bb:45:eb:c7:40:3d:83:33:10:05:
                    bd:b1:5c:fc:ed:16:7b:7c:be:91:59:49:ec:ce:e1:
                    30:42:bf:3c:a3:76:a2:e6:17:20:ab:a4:1a:c8:69:
                    63:b1:88:87:4c:6f:c1:b2:af:60:6c:86:b2:d4:e1:
                    9c:8a:7e:36:3e:4d:95:ef:19:52:b1:ad:46:33:4d:
                    be:ae:df:e2:64:ad:37:ff:41:33:9f:b5:4d:0b:97:
                    62:bd:cb:8c:cb:e1:ae:fe:d6:07:9e:a0:ba:dd:03:
                    e3:c0:9e:a7:a9:49:d7:79:52:38:9e:bb:1d:aa:7b:
                    6d:d4:ca:e4:d9:c0:5c:1c:02:7f:5b:aa:27:d3:e5:
                    ff:e1:ce:e7:09:c8:83:64:66:f7:54:ff:42:9c:bd:
                    bf:6c:6b:c3:4d:7a:3c:48:7e:bc:8e:85:cf:9d:87:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:80:65:1C:D7:AF:13:92:FA:3E:39:F5:B3:72:ED:BB:33:C5:96
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:d5:a1:f9:f8:2e:b6:66:d2:ba:f5:66:9d:a4:e1:4f:c5:
         20:b5:f1:45:18:ef:e4:ff:94:d3:52:01:df:98:30:29:8c:3e:
         6b:bd:53:a9:d1:b2:60:d2:89:e3:2c:53:7e:4f:b7:06:15:bd:
         35:06:79:e8:7b:cc:ca:52:9f:00:54:43:9d:f8:7c:57:b9:8b:
         a7:3d:d4:a5:7c:12:f3:77:d4:3d:e8:c4:fc:7d:1d:67:3c:5a:
         5d:2a:b7:07:1c:ad:76:70:00:93:bd:e4:26:df:2c:c2:6d:df:
         a2:8e:13:47:1c:d6:f5:44:27:17:84:64:93:16:26:49:bc:ae:
         06:fe:2e:3b:04:eb:04:1d:9f:c8:73:a7:e6:2a:29:28:c1:ca:
         9b:91:5c:5c:b1:bc:34:b7:da:ec:40:68:e3:48:ea:ce:6a:67:
         45:37:3f:75:ca:bc:54:69:d3:d5:e8:92:03:66:8c:d3:6f:b4:
         3d:81:d1:34:a1:d1:56:52:76:22:a4:e2:51:77:4b:67:34:be:
         0c:d6:13:9c:0f:90:b3:49:2e:db:78:d9:17:a8:2c:ad:00:dd:
         ac:9c:75:eb:fb:52:72:59:62:f5:98:dc:00:b3:7a:5c:dd:cb:
         7e:e1:77:01:87:76:4a:31:a9:79:ff:bc:97:fd:1d:24:41:a7:
         e3:47:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:04 2024 by rpki-client on console-ams.rpki-client.org