Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier:          /NyWex7CJD+5yrxZLSEXwpyilPe6rOxUdcF0c4b+ieY=
Subject key identifier:   FD:C9:4F:C5:3D:0C:5F:41:FE:65:55:3F:4F:ED:DB:4F:9B:0F:0D:46
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       132E05521F78A4DD5BD41FB291D8DF407D959DAE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number:          2A
Signing time:             Sun 19 May 2024 06:11:38 +0000
Manifest this update:     Sun 19 May 2024 06:06:38 +0000
Manifest next update:     Wed 22 May 2024 16:49:38 +0000
Files and hashes:         1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: /jPihvNxbl0t+HcjcCBqCu+66A97nK2QYzca1evHECo=)
                          2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: RQJFyHIHyNRj0nJCy8pNlqNzI8dpaPdBpKHt8lsP3YY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 00:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:05:52:1f:78:a4:dd:5b:d4:1f:b2:91:d8:df:40:7d:95:9d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: May 19 06:06:38 2024 GMT
            Not After : May 22 16:49:38 2024 GMT
        Subject: CN=FDC94FC53D0C5F41FE65553F4FEDDB4F9B0F0D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:09:9e:1e:41:89:81:06:33:48:98:50:58:
                    81:17:10:3b:97:fd:d6:fd:3b:d1:18:d8:1b:02:5e:
                    97:b9:a4:a7:a4:b7:73:a7:61:96:f4:6a:1a:a0:12:
                    8f:30:87:23:c7:e7:f8:3b:8c:26:86:b5:46:5e:9b:
                    67:92:b5:26:3d:01:05:1a:59:fa:38:a2:73:7b:89:
                    55:3b:8a:03:fd:b5:ec:89:f7:ea:25:db:e5:ad:ef:
                    45:b4:cd:d7:6f:dc:83:19:f0:07:16:ec:e5:f1:92:
                    8e:8b:57:e2:17:f9:ac:bd:e2:cb:6e:eb:69:40:25:
                    73:7c:ea:11:dc:24:ce:62:05:74:36:46:d9:9a:fe:
                    d2:91:26:0f:cb:43:d7:6b:c5:d2:e6:2e:55:ad:77:
                    bf:ac:ff:74:9d:29:b6:5a:6b:54:7e:9b:84:f1:a9:
                    50:ad:c0:d9:a9:5a:61:ef:0f:10:d9:d9:ce:5a:ac:
                    cc:28:a7:85:d0:a3:3f:0c:01:48:59:95:da:a0:56:
                    55:83:36:46:4c:f1:63:73:e3:23:8d:0f:00:de:66:
                    a3:74:9a:34:cd:5b:2f:63:cd:92:d0:b3:7d:5d:87:
                    57:6a:f3:2e:e0:64:76:21:26:c4:db:aa:f4:f5:ab:
                    d5:b5:91:17:4d:b8:4c:7e:8e:12:18:03:18:20:d0:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:4F:C5:3D:0C:5F:41:FE:65:55:3F:4F:ED:DB:4F:9B:0F:0D:46
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:cd:d9:95:1f:ca:8b:cd:1f:a6:23:e1:ea:57:da:fe:bd:
         8a:50:c5:ad:a9:bc:3f:10:79:19:05:59:bb:f2:53:ea:21:9b:
         7f:56:9c:fb:03:5d:1d:16:30:45:c4:38:7b:70:0e:8e:f1:e6:
         bf:ff:24:33:c6:84:d7:16:93:2d:cd:5f:a6:5f:05:84:48:96:
         5a:fd:fd:92:3d:ac:aa:ed:0f:c8:db:d9:6e:28:16:44:fc:23:
         f8:3d:22:ad:5a:e0:79:97:82:f0:f1:b4:88:1e:7f:81:3c:5b:
         a8:c7:50:3e:71:33:a0:e6:f4:1a:8d:27:eb:17:c6:87:fb:25:
         fa:0d:55:03:03:93:fb:6b:67:67:cb:2a:c8:b2:74:48:aa:fd:
         f6:42:1e:04:77:47:9c:bd:32:86:5d:d6:d8:5d:f0:98:30:4e:
         b2:d8:23:8d:94:a4:5c:e9:e5:de:ff:6d:9d:7d:ea:ac:aa:e9:
         00:06:31:00:ec:92:6c:74:7e:12:da:b2:52:39:be:e8:d6:f7:
         62:79:a7:30:92:46:d7:00:c8:1a:5e:9f:a3:a2:de:92:8e:04:
         5e:66:4c:86:44:e5:1d:99:18:ad:40:59:34:85:84:21:48:ca:
         65:05:79:41:62:d1:34:18:c1:e5:fb:4b:83:d7:d4:f2:e2:75:
         2f:91:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:10 2024 by rpki-client on console-fra.rpki-client.org