Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
File:                     E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json)
Hash identifier:          Heipj+Pgb89Vd/uJtoMsgRwAnje1RAcroKFeIah0Rnc=
Subject key identifier:   45:86:4B:66:27:3B:A8:AD:24:FC:AF:CD:25:56:BF:7E:BF:74:69:2B
Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43
Certificate issuer:       /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
Certificate serial:       5B49B328D6942C40216AE0827EDE5B9EA9D28624
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
Manifest number:          2A
Signing time:             Sun 19 May 2024 06:11:01 +0000
Manifest this update:     Sun 19 May 2024 06:06:01 +0000
Manifest next update:     Wed 22 May 2024 14:02:01 +0000
Files and hashes:         1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: Np/t8IuGG6aQddkGmruvdeMxBiMsTkW8puQwaVRjg24=)
                          2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: +nVjF5rDMGN6GQO5kbnVGx8HKrpIshvz0VxBevj3Unw=)
                          3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: sXf4BcMfZRL1PeXchMd9Ww8pnI1NwYZ7ChPheuRBnrw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl
                          rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:49:b3:28:d6:94:2c:40:21:6a:e0:82:7e:de:5b:9e:a9:d2:86:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
        Validity
            Not Before: May 19 06:06:01 2024 GMT
            Not After : May 22 14:02:01 2024 GMT
        Subject: CN=45864B66273BA8AD24FCAFCD2556BF7EBF74692B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:cd:56:32:1a:90:4e:82:bb:98:02:ab:65:
                    df:06:d4:53:18:48:d4:c6:3a:2b:ff:bb:77:fa:9b:
                    aa:1c:fc:cc:e6:cd:9f:88:a3:5f:d0:ba:6b:82:a5:
                    cc:f0:ce:dd:03:df:ca:01:ce:76:5c:6d:7e:30:c5:
                    0c:a9:5a:2b:c8:f6:c7:ba:ea:0e:b3:7b:76:2c:31:
                    7d:a9:dd:82:9e:d3:c3:5a:be:e9:93:99:28:72:8e:
                    48:b4:06:38:78:5e:e8:9f:1a:75:5f:b0:43:f9:a6:
                    7e:2c:6a:d9:66:26:d1:b8:e8:e1:13:14:62:4c:85:
                    0b:68:9e:e4:5d:ab:d1:a3:95:55:ac:60:e1:4d:d9:
                    ed:f3:ef:d9:17:27:8a:91:85:67:c5:2e:0b:d4:30:
                    39:cf:7f:64:3f:5f:2f:99:d5:6d:8c:ca:08:36:bc:
                    95:ff:b2:bd:cb:2e:52:50:fc:d5:98:34:b9:80:25:
                    b6:7c:b1:1e:61:89:86:10:63:75:23:3c:db:f8:b1:
                    8d:32:a6:2a:3d:42:fb:7a:c9:a7:db:56:dc:b3:61:
                    96:20:62:c5:bb:35:8d:cc:bb:6a:78:1b:3d:48:d8:
                    8c:91:35:9b:c6:60:62:33:7e:e9:cf:43:d6:66:a6:
                    47:13:59:e3:29:79:98:c6:61:ba:2b:3b:c0:a7:bf:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:4B:66:27:3B:A8:AD:24:FC:AF:CD:25:56:BF:7E:BF:74:69:2B
            X509v3 Authority Key Identifier:
                keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:92:13:87:7b:8d:3e:5c:9f:2d:08:28:6f:05:c5:63:ff:
         e1:8e:0f:99:2d:6b:dd:d9:8a:c7:46:5e:e0:83:ae:70:dc:0a:
         36:ca:f0:96:11:fb:35:85:76:c8:ef:2d:6d:f8:3f:b2:10:f4:
         b5:72:21:c6:cc:ed:85:fe:47:f4:5f:d5:6f:d5:dc:2d:e7:60:
         a6:8e:40:22:fc:aa:8e:7e:ad:13:cc:74:c4:fd:6b:64:b1:02:
         f7:68:8e:22:d5:25:5b:af:dc:06:1b:43:56:24:5c:50:83:f1:
         6d:c7:4c:35:b9:79:6f:3f:ed:b6:4f:5d:75:fd:6d:e7:8e:0d:
         ce:21:59:9a:f3:13:76:e2:fb:d1:7c:a4:51:e1:9b:00:d0:c4:
         d3:a0:62:d6:71:ff:24:39:bf:5a:6d:c1:78:73:10:c1:c0:5b:
         36:0a:cf:b1:80:2e:5d:94:e3:29:19:82:67:e9:e6:4a:dd:de:
         9f:d1:1e:64:e7:a0:4c:b8:09:4b:4c:8d:0d:c6:f2:f9:39:04:
         6b:4d:ab:d6:ae:df:40:93:7b:dd:f0:42:0a:c7:d4:90:e9:a1:
         e6:d5:e3:91:02:5f:d1:6f:38:07:06:0c:15:d9:0d:ad:05:a2:
         a9:6a:d8:d7:25:92:e8:f6:d9:a3:d7:68:fd:ef:c7:af:7f:49:
         04:75:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:24:28 2024 by rpki-client on console-ams.rpki-client.org