Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft
File:                     2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json)
Hash identifier:          6vNrpnKigB5ea3fwnrsSRqZNFf76ZMyVcqjejk0LJ4c=
Subject key identifier:   3E:F9:66:BC:F4:21:5A:24:E2:22:D1:91:A4:51:91:50:73:5A:25:24
Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7
Certificate issuer:       /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7
Certificate serial:       52296CAF4096D9154727A473F71E6F64D2AA122B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft
Manifest number:          5B
Signing time:             Wed 29 May 2024 08:50:44 +0000
Manifest this update:     Wed 29 May 2024 08:45:44 +0000
Manifest next update:     Sat 01 Jun 2024 13:33:44 +0000
Files and hashes:         1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: AADExNiiBWgJ5RV4zOaq0b+w1ae9OU3EQHpBYWpIv4A=)
                          2: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: Bat51wPSpeKMJUjQklfxK3d6ZkQEDnLzR3Ijw3M3EYk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl
                          rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:6c:af:40:96:d9:15:47:27:a4:73:f7:1e:6f:64:d2:aa:12:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7
        Validity
            Not Before: May 29 08:45:44 2024 GMT
            Not After : Jun  1 13:33:44 2024 GMT
        Subject: CN=3EF966BCF4215A24E222D191A4519150735A2524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:2e:ee:19:2d:d0:04:4c:c3:0b:1d:99:62:
                    b2:66:e2:76:11:95:bc:79:75:25:dd:27:e8:a8:56:
                    c9:2c:ac:72:90:fc:53:e9:a1:31:b4:e6:c1:fe:20:
                    fc:e7:b1:92:80:a9:a1:9a:d1:fb:a3:ca:80:d9:0a:
                    b0:a6:86:3c:2e:19:a8:47:ef:88:81:aa:20:42:c7:
                    d9:58:f3:67:25:84:23:25:7f:6a:58:4d:b7:25:af:
                    5e:b4:35:58:b4:57:1c:62:8d:6e:bf:ca:38:6c:83:
                    ad:7b:bf:73:69:3b:2e:23:07:aa:1e:43:e2:66:c9:
                    58:ec:e8:34:81:6f:f8:2f:45:18:c7:d4:3f:d1:7c:
                    49:a7:79:65:55:a5:5d:89:52:30:40:f6:21:00:09:
                    b1:e5:0c:d0:dc:5d:e0:be:e0:af:d9:4c:38:26:e1:
                    26:7a:9d:b9:e8:74:d3:26:77:a3:ac:1e:f9:2d:69:
                    f0:74:b2:89:6d:1c:08:38:39:e8:ef:f2:4b:e7:0c:
                    30:01:05:fc:7e:ef:fa:b5:8a:22:95:29:95:ef:f8:
                    9b:04:b7:6d:ee:aa:19:ae:fa:26:d5:d4:2e:16:8c:
                    ec:36:46:c5:28:66:a4:00:49:8b:29:db:5c:6b:8b:
                    cd:56:57:ed:2d:94:8a:c1:52:e5:96:40:ca:6e:fc:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F9:66:BC:F4:21:5A:24:E2:22:D1:91:A4:51:91:50:73:5A:25:24
            X509v3 Authority Key Identifier:
                keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:b8:98:19:c6:2b:b4:d4:37:71:34:ca:39:c6:dd:93:5b:
         74:6d:e6:71:3e:78:00:43:ff:c2:2b:17:09:30:f1:2a:7d:4a:
         29:0e:86:95:e4:b0:f2:01:46:30:f8:9d:af:16:05:ca:c4:b9:
         0f:4c:16:e3:b0:9e:5d:8a:55:3a:ad:09:e5:10:d8:c4:6f:1a:
         0d:24:00:0f:99:5d:1f:9c:80:6f:56:0e:2b:a0:23:89:7f:38:
         4a:26:57:e2:59:a9:5f:66:41:38:3c:25:69:11:9c:35:b6:3e:
         1f:bb:f3:f5:b2:8f:57:7f:d7:e7:08:60:2c:e5:7a:c7:d8:52:
         b2:81:e7:13:c5:f9:a4:04:3f:ef:b1:5c:b3:0a:bd:29:e6:1b:
         47:5f:fb:6d:b9:c6:7b:5f:fa:41:e1:9b:52:62:e5:31:7c:60:
         6b:6c:6d:dd:8c:db:f7:18:78:e7:84:7d:3f:3f:8b:01:74:85:
         82:85:08:d0:19:0b:ef:05:51:02:bb:a9:d9:4c:cc:8b:9b:f7:
         92:b4:ff:d6:23:e6:9f:f2:c1:51:fe:4c:94:a0:8a:bd:31:73:
         15:a4:ca:02:22:aa:de:ee:1f:ee:93:8b:28:e6:9f:60:50:0e:
         95:16:66:10:a5:a3:e7:e8:10:18:55:7a:1e:98:ea:e7:d1:6d:
         8a:f0:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:15:14 2024 by rpki-client on console-fra.rpki-client.org