Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          8sYlisEDO+8No7cf8FPiSCWJYLudaHSOwlAhSw9JvqA=
Subject key identifier:   C4:DD:13:A4:ED:90:5D:88:A0:A4:BD:82:FA:51:71:68:B4:8F:9F:27
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       2C190F64BF24670B43E0AB7EF219032B866CC81D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          53
Signing time:             Tue 28 May 2024 02:00:39 +0000
Manifest this update:     Tue 28 May 2024 01:55:39 +0000
Manifest next update:     Fri 31 May 2024 13:17:39 +0000
Files and hashes:         1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: vNevFTxN/kvr1paD25KbQf3lWD/ByB/4iqYMgYm0viU=)
                          2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: XarUafFcjAaUpEYg9AiYYD9QXN6gSP5Rh1dGglo3hXE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 21:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:0f:64:bf:24:67:0b:43:e0:ab:7e:f2:19:03:2b:86:6c:c8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: May 28 01:55:39 2024 GMT
            Not After : May 31 13:17:39 2024 GMT
        Subject: CN=C4DD13A4ED905D88A0A4BD82FA517168B48F9F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:0e:33:1e:c6:4c:4a:cf:6c:d4:8c:2c:e3:
                    d3:91:08:0c:92:dd:aa:ab:74:cb:c7:24:c2:e7:91:
                    08:c9:81:69:41:01:a2:a4:c8:51:a5:b0:64:33:42:
                    af:b6:9d:9e:99:2b:51:66:5c:21:4b:af:9f:a1:9e:
                    22:3e:60:56:a3:cb:17:d3:81:dd:7d:3a:0c:0b:75:
                    ea:2b:8b:9b:84:b2:91:fe:f7:89:fc:e6:86:6d:3c:
                    a8:69:f7:f5:d1:8d:2c:ad:fe:a4:74:dc:ae:34:26:
                    5b:9b:40:41:61:f7:3a:2f:a9:c6:ee:c5:19:b5:42:
                    96:89:c5:1d:c2:29:c7:90:7d:cc:1d:64:0d:7b:a3:
                    39:54:0d:9f:8b:0d:ee:98:fd:c4:82:08:50:94:02:
                    1d:ae:af:cd:ba:e0:d2:2f:07:7a:f6:e9:34:da:ca:
                    37:65:d9:53:d8:42:36:f7:6f:8a:c7:90:59:63:7d:
                    fe:a1:cb:2a:80:0f:43:81:3b:eb:df:3b:a1:58:7f:
                    29:d9:a5:f7:4b:44:c2:6a:11:93:ff:50:f1:28:7c:
                    03:9d:cb:fc:5e:38:45:7e:a8:31:5d:9a:24:69:9b:
                    4c:9a:9c:5d:82:be:d7:28:72:3a:b2:60:1a:0b:10:
                    64:00:50:24:51:5b:e2:fa:3d:33:36:f6:12:ba:d4:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DD:13:A4:ED:90:5D:88:A0:A4:BD:82:FA:51:71:68:B4:8F:9F:27
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:f8:77:eb:63:72:43:89:1b:88:34:2b:54:54:b1:e5:fd:
         9b:5e:b0:1f:4b:33:45:d1:6f:02:66:f5:50:a2:c1:c1:57:61:
         72:6d:f4:be:f3:13:2c:6f:3f:30:05:ad:95:55:a9:bd:e3:ac:
         c2:f4:5c:6e:df:63:8a:74:c6:34:11:b5:da:08:3d:6d:fe:81:
         ed:67:a6:06:48:25:56:8d:1b:96:3f:47:38:5c:6b:21:1c:1b:
         56:29:17:9b:01:b4:74:9c:df:de:de:4f:77:2c:38:ec:2e:69:
         39:70:20:18:00:42:2f:78:01:37:02:e9:2a:9f:1b:30:cd:d3:
         9e:51:f7:38:fa:3e:e3:49:7b:ce:fe:98:5f:1e:4d:0a:43:32:
         ff:26:57:b2:c3:89:52:16:3a:a0:2f:24:b2:ad:4c:68:10:e7:
         56:32:dd:68:c7:0e:db:ed:39:16:43:ee:2e:7c:07:d3:da:a7:
         0d:0e:cd:37:d6:65:2b:60:a2:52:dc:ec:99:09:83:61:9a:8e:
         02:02:fe:11:6d:d0:72:06:ce:db:7b:6e:5e:da:c8:da:ef:dc:
         fd:3b:8a:2c:da:29:da:2f:e2:b0:7d:db:e4:1f:92:fc:62:07:
         98:ed:5b:c9:d0:93:33:14:ea:32:73:a5:e1:88:d2:e9:ee:e0:
         4b:ae:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:12:42 2024 by rpki-client on console-fra.rpki-client.org