Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
File:                     D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json)
Hash identifier:          QxKwnSZsWXImVJdmMr6dYOecOONH9M639bwPCAK3nxQ=
Subject key identifier:   68:62:41:5F:5F:D6:51:5E:A9:BE:1C:E3:33:83:85:84:86:CC:B2:8E
Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0
Certificate issuer:       /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
Certificate serial:       3A90D4D8A45DA94FF37C755A3985C14DEAF30C8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
Manifest number:          0165
Signing time:             Sun 24 Nov 2024 05:01:51 +0000
Manifest this update:     Sun 24 Nov 2024 04:56:51 +0000
Manifest next update:     Wed 27 Nov 2024 05:09:51 +0000
Files and hashes:         1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: fv9RvNrlMLKChCQIcAYTSbo4HcQgsNLQLtYWDIaA378=)
                          2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl
                          rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:90:d4:d8:a4:5d:a9:4f:f3:7c:75:5a:39:85:c1:4d:ea:f3:0c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
        Validity
            Not Before: Nov 24 04:56:51 2024 GMT
            Not After : Nov 27 05:09:51 2024 GMT
        Subject: CN=6862415F5FD6515EA9BE1CE33383858486CCB28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:f7:e1:ef:53:d8:30:b6:53:a8:f2:35:30:
                    86:39:7b:f9:fa:9b:3e:3b:94:d0:21:77:ae:ca:9b:
                    c1:22:a3:2e:4f:d1:1f:28:2b:3c:6a:96:57:75:01:
                    11:3f:0c:70:42:63:ef:39:b5:68:5f:82:21:6f:82:
                    87:71:79:c5:2c:ed:8d:76:55:c2:6e:52:0a:31:a0:
                    5f:29:fb:43:c3:24:5b:4c:7e:9f:ed:42:bd:61:d6:
                    56:4a:ed:9b:bd:c8:a3:1c:3e:c8:d1:cd:02:d5:c7:
                    09:3b:73:cc:8f:10:94:5e:87:d7:6f:46:80:40:f2:
                    27:24:1b:f0:86:86:27:a9:69:20:69:f2:18:87:db:
                    f8:ec:18:cf:5b:a7:d0:39:ff:36:b8:74:dc:19:9b:
                    b9:ba:32:34:59:c1:d8:b8:30:b0:54:20:a2:60:0f:
                    44:aa:1e:9a:fc:09:f5:f3:59:cb:75:ec:60:45:cd:
                    11:92:14:95:9c:61:19:3f:64:62:c1:51:0b:a8:70:
                    89:98:ad:f7:fa:7a:57:ed:ca:c8:41:ed:1a:06:5d:
                    6f:3f:f2:ee:d5:fd:8a:83:dd:de:0e:61:ab:83:99:
                    4b:25:37:91:7d:21:c5:f1:3b:6e:41:46:95:b9:b1:
                    80:f2:63:f9:e3:67:eb:da:aa:4c:93:69:a5:8a:f1:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:41:5F:5F:D6:51:5E:A9:BE:1C:E3:33:83:85:84:86:CC:B2:8E
            X509v3 Authority Key Identifier:
                keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:24:2f:1b:79:2c:9e:80:82:d4:74:fe:31:22:97:46:92:
         1a:8f:1e:d9:01:f5:66:94:19:ab:dc:11:d1:33:bd:1d:75:e3:
         da:41:15:0f:a1:5c:32:f1:48:bf:94:57:f8:fd:c7:05:8d:57:
         b8:ce:0b:0b:63:89:7d:4f:27:99:60:fc:9a:fe:00:23:8c:ae:
         66:f0:84:04:60:e9:af:c3:7f:1b:03:56:06:91:5e:62:bc:fd:
         da:e2:41:2c:fb:07:ff:0e:12:c0:92:64:b6:fd:34:4c:69:ff:
         39:00:8d:ab:30:7a:21:16:a5:5b:e2:56:16:c2:d3:ca:f4:74:
         9b:95:55:d4:4b:ff:1d:bf:5b:fb:e3:82:f2:f8:ea:c5:c4:42:
         4e:71:d9:b7:fd:ad:b2:b5:c1:bb:d1:50:38:32:17:74:0d:26:
         c1:67:41:5a:1f:f8:2e:1f:79:c9:8c:45:99:88:73:26:f9:94:
         0e:59:f4:1f:4d:23:ad:13:69:eb:58:df:33:42:56:0e:65:bb:
         73:14:70:7f:78:e6:98:f4:dd:81:19:4b:75:91:e6:96:3b:42:
         d2:ec:d9:5b:4d:f1:fa:46:73:58:cf:c1:44:35:c7:d0:12:da:
         9b:e9:64:d9:a9:07:d4:24:61:38:a0:e7:63:e0:cf:8a:0b:de:
         e8:79:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org