Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
File:                     AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft (raw, json)
Hash identifier:          uNblfsD3gkbs4KqIKLaXqy+NBNT7J1V27Swsy2E0gX0=
Subject key identifier:   35:FB:4B:5D:88:79:0F:8B:AA:9E:DA:91:03:8C:DC:DF:04:D8:58:6C
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Certificate issuer:       /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial:       525569A05132D611F15F91D6BC974AF58BDBAD3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
Manifest number:          01BE
Signing time:             Mon 25 Nov 2024 23:41:12 +0000
Manifest this update:     Mon 25 Nov 2024 23:36:12 +0000
Manifest next update:     Fri 29 Nov 2024 07:57:12 +0000
Files and hashes:         1: AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl (hash: UViJtaVje2OgbmNRiTxZ1Fy6UAOaD3wQJoiist6HkmM=)
                          2: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: ZzG1au5AdtObdc35C0yqaf24jtKpQfsz8iY430BhnKA=)
                          3: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: kBG2q2NpoQNQY5u4bPq2Trzf/jU8kmYTusuU638oaHo=)
                          4: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: 3odjUif73+czm1/T5NHZhJihhYOLp7wgVGqUFznadDM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
                          rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:55:69:a0:51:32:d6:11:f1:5f:91:d6:bc:97:4a:f5:8b:db:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
        Validity
            Not Before: Nov 25 23:36:12 2024 GMT
            Not After : Nov 29 07:57:12 2024 GMT
        Subject: CN=35FB4B5D88790F8BAA9EDA91038CDCDF04D8586C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:ff:da:53:11:50:e9:24:c7:52:70:68:d6:
                    38:6e:c7:50:78:59:22:af:ec:b4:dc:a0:47:73:16:
                    9b:75:38:82:7a:c6:3d:4e:4e:1b:ca:6d:84:0e:40:
                    35:d7:84:ed:56:55:99:f3:87:f9:b6:a5:89:aa:05:
                    33:1c:0e:fe:78:a7:2b:7f:6c:33:69:fa:27:66:d6:
                    c7:09:22:19:fe:60:98:74:f2:3d:dd:f7:be:cb:9e:
                    c2:81:29:34:ae:9a:4a:19:ef:b3:1a:9d:a4:53:33:
                    df:0f:1f:84:33:e1:06:b1:61:4a:03:e6:e4:37:2d:
                    4b:57:3e:a1:e8:4e:d7:02:e0:f1:c0:08:bc:63:96:
                    a5:b5:37:f2:39:f8:ee:c4:a7:fe:c0:56:64:0e:7c:
                    43:af:3f:a1:97:74:e0:11:ce:e5:dd:47:aa:0a:da:
                    dc:e7:a0:07:4a:8c:77:f3:25:2d:85:a5:ab:71:e9:
                    c9:56:6f:83:97:2b:da:c7:b5:d9:c7:52:5f:a3:b7:
                    c0:c7:17:c3:6d:43:c7:a5:3f:cc:fe:a0:ff:e9:0f:
                    31:6a:6b:3c:0b:24:f8:c7:0f:37:fb:f6:bc:4e:05:
                    38:c1:d4:90:3a:f4:23:0b:36:75:2b:8d:10:b2:89:
                    d9:b5:72:6f:5f:cc:13:d0:7f:fd:00:6e:b4:f0:0b:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:4B:5D:88:79:0F:8B:AA:9E:DA:91:03:8C:DC:DF:04:D8:58:6C
            X509v3 Authority Key Identifier:
                keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:70:52:62:c2:27:66:9b:13:a8:44:38:4e:bb:00:ca:cd:
         a2:41:86:d1:6d:25:7b:57:43:13:2d:e9:42:e1:d3:9c:c9:c0:
         98:2a:b2:fe:d0:e2:3c:ae:14:40:9d:1f:17:e6:39:27:c4:4c:
         8c:76:21:16:e3:df:a2:2c:c4:82:c7:f3:91:6c:00:81:48:9c:
         41:81:c7:29:d7:50:6d:72:de:07:e9:01:c3:2d:db:33:fa:78:
         a6:ec:13:55:f9:f1:6c:cb:e6:d3:71:ca:d9:ca:64:ce:19:e0:
         f7:d5:23:51:52:c1:44:6f:ab:67:de:93:6f:74:0c:08:ce:07:
         0d:83:d8:3d:51:f1:49:2d:e1:c6:64:e4:49:92:f4:b0:91:92:
         9e:b6:c7:8b:59:45:9e:46:f4:c8:5f:c7:3e:d0:91:af:dc:10:
         71:6a:6f:f2:bf:be:17:89:e5:09:73:cc:23:1b:be:84:c0:51:
         59:10:c2:dd:70:18:96:02:c6:b6:7e:ec:d1:a6:d2:f5:a4:2e:
         4e:0c:db:ed:49:7f:e8:5c:b5:1c:d8:5a:72:a8:3c:87:29:c1:
         0d:9e:3d:af:aa:42:f5:29:5c:53:e9:16:23:d0:ce:35:9d:ed:
         46:9f:c2:9e:1a:7b:dc:7c:fb:17:63:0d:62:7b:80:81:66:d2:
         8d:70:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:29 2024 by rpki-client on console-fra.rpki-client.org