Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft
File:                     DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json)
Hash identifier:          hYoAsFJ6GL9GUKt01fU8rMw+MnuZMVF408OpqNEc2YQ=
Subject key identifier:   58:02:97:A6:F0:CF:6E:D5:FF:F9:D2:AD:F9:A2:67:28:8D:23:6A:60
Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4
Certificate issuer:       /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4
Certificate serial:       70617123767E8DB265897D1947816810577EDD66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft
Manifest number:          63
Signing time:             Sun 24 Nov 2024 17:20:35 +0000
Manifest this update:     Sun 24 Nov 2024 17:15:35 +0000
Manifest next update:     Thu 28 Nov 2024 03:25:35 +0000
Files and hashes:         1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: bH92U5NrTFmTgtLkiA8DUyLThOx29Dl50vw3pADlnd0=)
                          2: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: fNuVMOZDlSepO0zLqxceUwT8DknlsX/eFUaWf09Unco=)
                          3: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: 0MBF+GfF+4l1v/jRUWwvYU5e3fbh4JltC3WkHgzH814=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl
                          rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:61:71:23:76:7e:8d:b2:65:89:7d:19:47:81:68:10:57:7e:dd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4
        Validity
            Not Before: Nov 24 17:15:35 2024 GMT
            Not After : Nov 28 03:25:35 2024 GMT
        Subject: CN=580297A6F0CF6ED5FFF9D2ADF9A267288D236A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:f5:64:51:b3:b9:ed:ad:9a:a5:74:c0:06:
                    21:f1:ae:ab:8d:50:07:84:47:a1:77:07:41:05:97:
                    72:48:20:ca:5c:5b:79:a3:4b:6f:af:79:2f:81:e1:
                    4e:f1:df:1c:6a:73:e7:e4:f1:f0:89:82:0e:ed:43:
                    02:a8:02:85:e6:67:04:8e:a7:71:c4:9d:1a:aa:97:
                    27:fb:8c:4e:b0:93:36:2e:e5:15:8e:4f:da:2f:cf:
                    b4:25:c7:2a:9b:6e:59:35:75:30:93:f8:26:a8:f0:
                    84:55:92:8b:52:46:05:db:f1:52:91:b7:4f:5d:92:
                    e5:ae:6e:2d:69:c8:5d:e3:1f:c8:7b:ea:35:8d:4b:
                    b6:9f:3b:f7:00:40:e9:36:98:d3:03:61:c9:3b:1d:
                    54:49:25:40:3a:e6:0f:8a:d6:e4:10:f5:e1:12:35:
                    47:70:d6:b9:80:2c:93:7b:0c:a1:d8:99:b9:04:30:
                    04:dd:0b:d6:a7:e7:fd:dd:b2:97:7e:9c:cb:d3:21:
                    6e:8b:ca:7e:a4:22:c2:25:55:25:d2:c3:3a:65:02:
                    ff:0b:36:c9:88:01:e3:dd:b6:de:b4:ed:e1:47:79:
                    dc:d2:80:ab:b8:4e:c7:59:76:bb:37:f4:e4:76:49:
                    7e:fd:0f:e2:7d:19:00:7d:cd:af:e3:5d:13:ad:1c:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:02:97:A6:F0:CF:6E:D5:FF:F9:D2:AD:F9:A2:67:28:8D:23:6A:60
            X509v3 Authority Key Identifier:
                keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:d5:e8:f1:c3:b1:47:c1:d8:15:96:43:11:dc:25:d7:11:
         a0:52:a1:e4:6e:61:a3:26:db:c9:31:b5:e4:2a:45:6c:dc:b2:
         64:2d:56:1c:00:80:ba:3a:cd:20:ce:11:06:6c:b9:86:ae:8c:
         89:19:8c:cc:cd:33:ea:ac:84:7f:b6:2a:8a:b1:6b:74:82:72:
         ed:e2:5c:8b:3a:e7:56:4b:63:08:11:7f:6a:49:f0:69:d4:86:
         e6:8e:db:73:2f:00:2e:37:7d:ef:ea:a5:41:e9:9f:58:58:2e:
         5c:c0:b3:ed:52:dc:7d:c1:45:ba:2d:82:55:e6:9e:20:08:69:
         e2:47:1d:70:5f:45:95:fd:be:f8:3d:5a:24:48:11:ad:15:9a:
         07:ba:83:c7:d0:05:ae:0c:16:ac:ff:91:b0:f0:b8:f2:93:81:
         74:0e:79:a3:7f:b5:f3:34:da:9f:43:a1:1c:9e:68:87:5a:dd:
         95:f1:f8:aa:32:50:ac:06:c8:a8:06:3a:52:9e:ad:a1:81:05:
         29:cc:97:d6:ea:20:52:c3:54:54:ed:8f:28:32:22:42:e0:0e:
         e7:bb:f6:87:5b:da:44:c7:61:0e:fb:4f:85:af:d9:27:5e:cc:
         ce:d9:4f:12:c7:24:f4:ba:45:c6:9d:57:2d:f6:84:fe:0b:f6:
         5e:85:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org