Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
File:                     DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json)
Hash identifier:          u6+EXIBjh98mMmxMdypk+JGrPwu72ba4QfMUUjPIa6g=
Subject key identifier:   CD:54:D5:69:12:F0:05:0C:71:5B:FD:56:81:A7:64:13:64:18:D5:F7
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Certificate issuer:       /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial:       572B4840C00FBF667EFFA677526C1B2D3A758B65
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
Manifest number:          02BD
Signing time:             Fri 22 Nov 2024 19:01:19 +0000
Manifest this update:     Fri 22 Nov 2024 18:56:19 +0000
Manifest next update:     Mon 25 Nov 2024 23:22:19 +0000
Files and hashes:         1: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: Y94ACgKRW/B6r5u1l5R9++TiByrUg/dDZ6VyKO+Pxik=)
                          2: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: MmDjqY0in3Ron4tXoyw1IFEdlRaJCNk65DIgw6xUgLY=)
                          3: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: ypT2E/4mQi8ZinwGIb3ksHfodPA0Ub74zZ/WxvTHyYI=)
                          4: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: eF6Jj6iTU3NM+WZtS+9TITqlJuAlRJG9oPaWaJizg4s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
                          rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2b:48:40:c0:0f:bf:66:7e:ff:a6:77:52:6c:1b:2d:3a:75:8b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
        Validity
            Not Before: Nov 22 18:56:19 2024 GMT
            Not After : Nov 25 23:22:19 2024 GMT
        Subject: CN=CD54D56912F0050C715BFD5681A764136418D5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:2b:1f:88:51:0d:09:37:c3:d2:39:bd:8b:
                    ad:42:0b:c6:01:48:16:35:c8:42:ad:7b:e2:4b:b7:
                    43:b5:75:2c:f5:b1:98:ee:27:25:2b:d8:cd:ed:92:
                    be:d5:15:0a:b5:6b:e3:e8:38:f6:4f:46:c8:95:43:
                    8f:2a:8f:e3:38:60:82:00:d3:0a:76:3a:58:0c:b2:
                    ec:46:df:1e:f5:93:55:04:74:06:b5:04:f3:b5:76:
                    8d:08:82:bc:71:d9:7c:74:13:23:8e:43:1a:cc:f3:
                    a9:62:08:90:6e:96:9a:45:9d:9a:9c:02:33:42:d1:
                    87:e0:c4:a6:7b:4c:5e:d7:4f:f1:81:5d:e1:59:de:
                    9a:0e:0b:93:84:ca:2a:6e:ba:e0:dd:b9:c3:9e:53:
                    a3:3f:4b:78:ac:67:80:a2:ba:6c:ab:92:36:fe:34:
                    74:11:1e:7f:2f:b3:da:cd:98:41:23:bf:de:81:f6:
                    a1:7f:06:f1:ac:22:94:48:13:a9:e1:8e:fd:91:13:
                    60:5c:16:dd:ce:26:32:23:13:89:70:ae:34:1e:77:
                    98:0a:06:f4:c8:ca:2d:34:4a:1b:2d:00:16:8c:82:
                    1c:df:fb:3d:20:1d:d5:29:c5:fc:dc:37:fc:a9:1e:
                    e0:88:f1:9c:49:00:b1:68:6c:04:55:70:59:b5:c0:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:D5:69:12:F0:05:0C:71:5B:FD:56:81:A7:64:13:64:18:D5:F7
            X509v3 Authority Key Identifier:
                keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:1d:87:89:66:11:06:63:e9:6e:2e:25:08:f9:d7:49:dc:0d:
         2f:1f:14:67:b0:eb:0a:d1:80:73:ae:75:df:d9:9f:65:d0:8c:
         80:27:ae:c4:dc:4b:4e:9e:05:ee:4f:43:0a:e3:01:fb:2b:89:
         6c:0d:53:5f:50:b1:85:ea:50:7b:54:18:b5:ca:f3:83:3e:ad:
         e7:94:49:fa:07:38:4f:04:19:ab:a8:99:e6:4b:d7:63:4f:3f:
         93:73:e6:dd:13:31:c5:8e:61:ff:7a:a7:0b:38:16:7c:b3:6f:
         36:0a:ac:b8:ce:18:96:22:8b:67:61:f3:75:4b:87:09:f7:95:
         98:25:67:f8:48:ac:b1:a2:85:00:34:a3:0b:f9:2a:c3:0d:8a:
         e5:07:ee:be:dd:03:d7:cc:b1:98:4a:0c:65:03:d6:b2:66:da:
         13:00:36:6f:f3:7a:20:a3:71:dc:d2:ec:73:3a:a3:67:21:61:
         32:18:65:24:08:1e:22:b5:79:d6:38:6c:b2:79:e4:b1:52:7e:
         82:cc:7b:43:eb:18:1b:ce:e0:7f:64:27:3d:6e:8c:18:71:0d:
         0a:c4:fd:46:42:3a:46:ef:db:12:6e:f0:c7:3c:94:82:d6:85:
         8d:48:60:5c:0c:b0:e2:26:57:f0:1c:6e:06:87:51:d3:03:55:
         36:81:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org