Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
File:                     5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json)
Hash identifier:          hFpHwazDZWDQaby5vLkyUlL4A9+7nkMUtiZwF+6s6Sk=
Subject key identifier:   2D:C0:D6:7C:85:FE:74:35:2A:B9:41:B7:3B:52:3D:89:A3:68:1E:79
Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
Certificate issuer:       /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Certificate serial:       608AC488D3FCC0A106A22D630935D212243E8CD4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
Manifest number:          012A
Signing time:             Sat 23 Nov 2024 21:11:07 +0000
Manifest this update:     Sat 23 Nov 2024 21:06:07 +0000
Manifest next update:     Wed 27 Nov 2024 06:59:07 +0000
Files and hashes:         1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: g9qsg71dBzNY6geBvVqGus+UjLu8X8PH3RYeBMs7PiQ=)
                          2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: kRPdW4oxj+hvjcmVwU9UlA2s739QjFlaX++bGbJQbbM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl
                          rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8a:c4:88:d3:fc:c0:a1:06:a2:2d:63:09:35:d2:12:24:3e:8c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
        Validity
            Not Before: Nov 23 21:06:07 2024 GMT
            Not After : Nov 27 06:59:07 2024 GMT
        Subject: CN=2DC0D67C85FE74352AB941B73B523D89A3681E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:c3:43:0f:31:02:d3:bc:8e:69:cc:d4:0f:
                    dd:dd:f4:4f:33:d5:36:4d:de:2c:68:6e:46:03:59:
                    21:c8:63:19:17:f0:11:d4:05:eb:fd:5a:e4:e7:17:
                    8c:eb:b0:f5:cf:ae:3a:e4:87:db:70:e6:42:9d:85:
                    89:60:25:5b:bd:26:c5:15:07:9d:ed:9a:cf:81:e2:
                    ec:a5:33:00:18:94:a6:89:4b:eb:73:59:36:b8:e8:
                    a7:62:2e:c9:bb:54:6f:0b:87:89:33:88:04:74:81:
                    66:32:81:40:e0:44:6b:d5:67:7a:79:82:1f:78:3d:
                    2e:c3:f7:d8:52:7e:ad:87:a1:2a:ea:26:47:e4:97:
                    2b:94:a7:d2:49:35:fa:81:27:0d:57:f9:27:15:d2:
                    ae:fe:47:e0:60:0b:f4:e9:15:ec:98:eb:81:12:ad:
                    5f:3f:69:b6:eb:1e:8e:b0:68:33:de:10:85:59:ed:
                    61:d9:30:b9:4d:21:d8:76:8d:9f:0a:e5:d0:20:8b:
                    78:3f:01:fa:25:45:87:50:22:78:cf:c5:c0:b4:73:
                    0e:4f:ef:3f:8a:83:c3:b0:bf:32:a9:d6:fe:e8:e7:
                    19:19:94:81:cf:0d:32:32:b9:de:88:4c:2a:2b:bd:
                    5d:dc:30:30:62:c7:c5:fe:c7:3f:50:16:1b:25:00:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C0:D6:7C:85:FE:74:35:2A:B9:41:B7:3B:52:3D:89:A3:68:1E:79
            X509v3 Authority Key Identifier:
                keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:c0:4a:04:2c:2c:87:21:58:4a:da:e8:75:13:c1:1a:4a:
         00:b0:da:00:1f:c3:e9:33:4b:da:30:60:7b:dd:e3:54:aa:4b:
         79:b7:c2:a2:25:0f:7c:2e:2e:ad:71:2e:b9:7d:cc:36:fe:c0:
         a8:98:48:02:c8:83:8c:91:ae:68:76:79:d1:16:6f:a8:37:af:
         ae:a8:66:60:8a:c8:37:51:34:89:a5:2f:dd:d8:56:2a:14:6f:
         35:08:a1:91:f4:26:df:9c:69:8d:7e:23:b0:47:81:4f:4a:38:
         c9:d4:6a:6e:fc:82:d0:92:bf:93:b3:0d:f6:df:d0:73:06:9c:
         45:60:04:43:77:ab:4a:f5:83:ba:98:2a:54:3f:04:bc:51:d2:
         f7:68:40:f9:da:3d:f4:ce:5c:9e:30:f1:b4:e0:98:60:6e:e7:
         5f:f6:65:02:14:4c:a4:f4:64:e0:f3:0d:80:84:12:fb:2e:f9:
         f3:89:93:25:7b:73:f0:44:06:79:6b:8f:d7:3a:42:5f:1c:ae:
         f4:3d:4c:fc:5e:16:0b:26:39:2c:31:b1:c6:51:9d:9a:89:13:
         e5:42:fe:7c:0c:97:f1:24:94:c0:04:93:ae:b5:a9:8e:52:2c:
         15:24:15:2f:94:2e:d7:4d:3e:e2:c5:2c:78:39:65:ef:46:18:
         ce:1c:fa:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYIrEiNP8wKEGoi1jCTXSEiQ+jNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC
NEM3ODM5MjAeFw0yNDExMjMyMTA2MDdaFw0yNDExMjcwNjU5MDdaMDMxMTAvBgNV
BAMTKDJEQzBENjdDODVGRTc0MzUyQUI5NDFCNzNCNTIzRDg5QTM2ODFFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVcNDDzEC07yOaczUD93d9E8z
1TZN3ixobkYDWSHIYxkX8BHUBev9WuTnF4zrsPXPrjrkh9tw5kKdhYlgJVu9JsUV
B53tms+B4uylMwAYlKaJS+tzWTa46KdiLsm7VG8Lh4kziAR0gWYygUDgRGvVZ3p5
gh94PS7D99hSfq2HoSrqJkfklyuUp9JJNfqBJw1X+ScV0q7+R+BgC/TpFeyY64ES
rV8/abbrHo6waDPeEIVZ7WHZMLlNIdh2jZ8K5dAgi3g/AfolRYdQInjPxcC0cw5P
7z+Kg8OwvzKp1v7o5xkZlIHPDTIyud6ITCorvV3cMDBix8X+xz9QFhslAAmjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULcDWfIX+dDUquUG3O1I9iaNoHnkwHwYDVR0j
BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF
MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3
ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw
ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy
QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG4kwEoELCyHIVhK2uh1E8EaSgCw2gAfw+kz
S9owYHvd41SqS3m3wqIlD3wuLq1xLrl9zDb+wKiYSALIg4yRrmh2edEWb6g3r66o
ZmCKyDdRNImlL93YVioUbzUIoZH0Jt+caY1+I7BHgU9KOMnUam78gtCSv5OzDfbf
0HMGnEVgBEN3q0r1g7qYKlQ/BLxR0vdoQPnaPfTOXJ4w8bTgmGBu51/2ZQIUTKT0
ZODzDYCEEvsu+fOJkyV7c/BEBnlrj9c6Ql8crvQ9TPxeFgsmOSwxscZRnZqJE+VC
/nwMl/EklMAEk661qY5SLBUkFS+ULtdNPuLFLHg5Ze9GGM4c+m4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org