Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
File:                     DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json)
Hash identifier:          LQmtvVnjB3Qe6kauVbXLQy9tSrcQEx6H6UpgTuqP1DI=
Subject key identifier:   A7:89:A0:B8:3E:CF:F0:2E:50:16:E2:21:9A:6C:AE:DC:08:3F:CA:54
Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E
Certificate issuer:       /CN=DE871A367510652B50812EF1D04572635502AD6E
Certificate serial:       560C385C11153D38E78E2FFB833B14527289C28C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
Manifest number:          01EC
Signing time:             Mon 25 Nov 2024 18:31:10 +0000
Manifest this update:     Mon 25 Nov 2024 18:26:10 +0000
Manifest next update:     Fri 29 Nov 2024 01:48:10 +0000
Files and hashes:         1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: F7zxTJGRzEm7KvbGuyi/9rqS3w2J//UfUyd7jIcSDko=)
                          2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=)
                          3: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl
                          rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0c:38:5c:11:15:3d:38:e7:8e:2f:fb:83:3b:14:52:72:89:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E
        Validity
            Not Before: Nov 25 18:26:10 2024 GMT
            Not After : Nov 29 01:48:10 2024 GMT
        Subject: CN=A789A0B83ECFF02E5016E2219A6CAEDC083FCA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:86:ec:e5:0a:de:9e:30:c7:f6:9d:35:b8:
                    17:36:fd:f1:d5:69:a0:29:b2:33:a9:9f:e1:df:a4:
                    23:c9:5d:44:80:e3:d2:52:e8:a0:d6:5d:aa:23:c8:
                    e8:79:ea:45:87:3a:0a:66:f0:42:41:af:7d:7c:08:
                    34:eb:07:54:11:fc:85:51:cd:77:3d:04:94:b4:64:
                    a1:39:42:48:00:a6:e1:44:bc:73:61:9f:3a:62:c6:
                    c0:b5:19:e0:07:38:18:3e:c2:66:54:58:1c:70:e4:
                    6f:ae:c7:f2:af:6a:7f:a1:e9:be:b7:91:8a:f6:6a:
                    b9:79:03:a6:ad:56:98:36:c8:d3:8a:df:dc:af:af:
                    91:5e:4f:ef:d7:62:64:7c:af:5b:51:68:61:f8:64:
                    26:0b:b8:88:82:a8:4f:67:c1:a0:6b:76:a8:4b:82:
                    e8:98:38:39:70:c8:62:0f:58:64:f8:1a:7d:c4:9c:
                    92:f6:a5:80:74:13:8f:77:5e:44:64:32:0c:98:9f:
                    e7:3e:48:e4:ac:0a:34:a6:da:8c:59:41:f5:2a:db:
                    0b:36:0c:82:12:85:7e:f3:2c:2f:30:e3:6a:65:57:
                    17:a8:47:04:18:3f:e9:4c:5b:51:b4:a7:77:58:3d:
                    82:28:5d:d7:4e:c8:8d:07:56:de:1a:a6:b0:cd:2f:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:A0:B8:3E:CF:F0:2E:50:16:E2:21:9A:6C:AE:DC:08:3F:CA:54
            X509v3 Authority Key Identifier:
                keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:26:c2:2e:68:2b:c4:58:d2:63:75:97:67:41:40:01:8e:
         b4:2d:62:8d:e8:2d:a2:35:e5:88:2c:16:3a:c2:69:c0:ef:9f:
         53:f0:6b:eb:5f:c0:ac:96:c0:b6:2b:8f:6c:cb:42:61:ed:ca:
         38:09:2b:98:d5:c4:78:69:f8:5c:0c:18:1f:57:3a:c9:04:b3:
         e5:da:25:c7:4f:31:95:35:72:8a:3f:15:b7:84:02:36:eb:3b:
         5b:73:3f:a1:f5:76:64:75:cf:c3:f3:d9:3b:27:85:e9:5f:b1:
         9b:82:69:3a:ab:b7:5d:e1:b0:37:f6:f6:37:aa:cc:b8:b6:7a:
         c7:61:8d:bb:50:51:99:34:30:ce:00:d5:7a:17:87:7d:54:27:
         a1:84:54:ae:de:02:ad:c3:5f:db:0c:fe:61:85:23:23:69:ff:
         a7:b2:12:46:78:4f:a4:89:dd:8b:d1:ad:59:7d:ac:9f:20:c7:
         9e:14:77:8e:7c:b7:5f:9b:5c:cd:3e:28:da:ca:13:6f:38:ec:
         ba:bf:fd:a6:84:99:72:c1:e1:87:d9:56:0a:33:a4:81:b3:cd:
         12:49:d0:32:7b:d2:b7:1c:4f:ae:c9:0c:03:a2:f1:8a:b2:e0:
         75:8d:d4:ea:7b:27:a4:b5:c3:00:4a:ce:76:02:85:67:c1:36:
         bd:41:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org