Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft
File:                     D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json)
Hash identifier:          pGpTe7b7iRcg0T3zfq8Pevz0n/MMH5wBohygSHEOVvE=
Subject key identifier:   60:93:54:15:D8:82:51:16:D8:E9:38:F3:84:29:F2:C8:B5:89:CF:6E
Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71
Certificate issuer:       /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
Certificate serial:       3737CE623A5693183D61DDD0B7CBEF89D85E3BE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft
Manifest number:          0249
Signing time:             Tue 28 May 2024 00:20:30 +0000
Manifest this update:     Tue 28 May 2024 00:15:30 +0000
Manifest next update:     Fri 31 May 2024 11:42:30 +0000
Files and hashes:         1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: 5XCXLjdoCrNFds2KhZouuZ7TYxbkemH7Kbq+LGmP2c0=)
                          2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: l3izLKTtSNKIZKaYlvxdyIwogoaFANwCiyhOMfscN8c=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl
                          rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 21:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:ce:62:3a:56:93:18:3d:61:dd:d0:b7:cb:ef:89:d8:5e:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
        Validity
            Not Before: May 28 00:15:30 2024 GMT
            Not After : May 31 11:42:30 2024 GMT
        Subject: CN=60935415D8825116D8E938F38429F2C8B589CF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:9e:fc:2a:69:a3:7d:40:db:99:cd:85:c0:
                    12:5f:86:cb:4e:fb:38:fb:6f:51:4d:dd:e8:b7:c5:
                    fb:17:79:dc:ce:99:70:fb:01:fd:06:9f:ea:25:be:
                    6b:eb:39:5c:31:b4:7e:66:6c:dd:b5:da:31:fc:85:
                    d0:61:4e:73:c0:9c:c8:20:8b:dc:78:1b:bf:94:b1:
                    b8:a3:a9:38:d1:c3:1b:be:3f:6e:c3:46:45:10:ad:
                    77:e4:f2:14:f2:ca:4c:33:cb:db:00:aa:7c:f1:ef:
                    af:91:0a:9a:12:ed:7d:22:48:1b:ea:f1:e1:7c:0e:
                    81:40:e5:4c:a5:9c:1f:c4:80:78:26:56:8b:7a:97:
                    7a:3f:dd:76:3a:82:d1:39:cd:61:fa:ea:45:92:f6:
                    85:10:20:7f:de:c7:80:0a:bb:8b:ef:85:eb:59:9c:
                    72:6d:55:f9:ca:97:6c:c4:5d:fb:5a:43:4d:f1:ce:
                    e7:37:1c:9a:a4:c5:13:39:05:5c:07:bc:ae:4d:66:
                    a7:a5:f7:a9:4e:ba:18:79:34:a2:b9:ed:59:55:9e:
                    d3:52:50:0c:56:3a:f2:87:03:08:a4:b7:14:94:1a:
                    c1:9a:7e:97:17:bc:5b:7c:d7:29:00:84:b6:2a:a4:
                    35:ad:67:ce:43:bc:c3:bc:2a:e8:5c:a0:90:1f:74:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:93:54:15:D8:82:51:16:D8:E9:38:F3:84:29:F2:C8:B5:89:CF:6E
            X509v3 Authority Key Identifier:
                keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:e6:f2:e5:c0:c9:83:6d:b2:6c:e5:71:76:10:1f:89:4b:
         43:4a:46:af:7e:40:ee:0c:85:b6:f4:86:9f:0b:16:8a:1f:26:
         fe:58:f2:28:e2:d6:2a:07:1c:9d:c4:0b:01:9f:80:7b:81:5d:
         91:d0:fe:05:5e:85:46:a0:34:fd:db:64:02:a0:9f:20:bc:c1:
         d1:c8:74:5b:52:24:f0:d6:7a:36:f8:3b:7b:83:84:53:59:e7:
         68:56:c8:68:42:07:b1:94:a9:24:35:27:bc:6c:f8:e3:ed:4c:
         69:99:5d:14:19:0c:40:97:9e:46:20:54:a3:03:3d:d9:ed:05:
         0a:6b:e1:8e:93:46:ae:c8:69:9c:a9:56:a4:8b:fd:3d:da:81:
         ad:8b:f0:96:69:27:d9:30:2c:49:64:4d:63:66:93:9d:be:cc:
         53:9c:ef:ab:02:af:4d:2f:f1:81:3f:c9:87:ed:27:66:81:70:
         63:1a:06:b0:ea:ed:d0:5d:16:ea:23:5c:b9:87:c6:a3:0c:a5:
         11:31:83:d9:76:71:0c:b9:8d:2f:a9:b0:5c:73:38:76:b3:1e:
         9d:25:3c:8b:77:35:53:f7:e7:1e:fd:8c:ec:7f:9e:8f:8a:79:
         cf:9a:9e:7d:ff:b7:8e:ea:6a:9a:63:b2:c1:ef:47:91:f0:eb:
         b0:00:02:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNzfOYjpWkxg9Yd3Qt8vvidheO+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG
RkE5QTI3MTAeFw0yNDA1MjgwMDE1MzBaFw0yNDA1MzExMTQyMzBaMDMxMTAvBgNV
BAMTKDYwOTM1NDE1RDg4MjUxMTZEOEU5MzhGMzg0MjlGMkM4QjU4OUNGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxJ78KmmjfUDbmc2FwBJfhstO
+zj7b1FN3ei3xfsXedzOmXD7Af0Gn+olvmvrOVwxtH5mbN212jH8hdBhTnPAnMgg
i9x4G7+UsbijqTjRwxu+P27DRkUQrXfk8hTyykwzy9sAqnzx76+RCpoS7X0iSBvq
8eF8DoFA5UylnB/EgHgmVot6l3o/3XY6gtE5zWH66kWS9oUQIH/ex4AKu4vvhetZ
nHJtVfnKl2zEXftaQ03xzuc3HJqkxRM5BVwHvK5NZqel96lOuhh5NKK57VlVntNS
UAxWOvKHAwiktxSUGsGafpcXvFt81ykAhLYqpDWtZ85DvMO8KuhcoJAfdKLvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYJNUFdiCURbY6TjzhCnyyLWJz24wHwYDVR0j
BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz
NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5
QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw
M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG
NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIY05vLlwMmDbbJs5XF2EB+JS0NKRq9+QO4M
hbb0hp8LFoofJv5Y8iji1ioHHJ3ECwGfgHuBXZHQ/gVehUagNP3bZAKgnyC8wdHI
dFtSJPDWejb4O3uDhFNZ52hWyGhCB7GUqSQ1J7xs+OPtTGmZXRQZDECXnkYgVKMD
PdntBQpr4Y6TRq7IaZypVqSL/T3aga2L8JZpJ9kwLElkTWNmk52+zFOc76sCr00v
8YE/yYftJ2aBcGMaBrDq7dBdFuojXLmHxqMMpRExg9l2cQy5jS+psFxzOHazHp0l
PIt3NVP35x79jOx/no+Kec+ann3/t47qappjssHvR5Hw67AAAsI=
-----END CERTIFICATE-----
Generated at Tue May 28 02:06:45 2024 by rpki-client on console-ams.rpki-client.org