Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
File:                     DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json)
Hash identifier:          03EdVtaNMIHTCt1zAazNZo2ZaUZUsmbRWXn8do17PH4=
Subject key identifier:   54:52:8A:AD:A7:AD:7D:11:36:F3:B5:45:70:FD:B2:67:52:B1:32:A2
Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA
Certificate issuer:       /CN=DF3717861F6521730921F11365C5A826CFF24DAA
Certificate serial:       115ED81816A9769F0ADCD969A2C776368C4AA31A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
Manifest number:          3A
Signing time:             Sat 18 May 2024 00:30:00 +0000
Manifest this update:     Sat 18 May 2024 00:25:00 +0000
Manifest next update:     Tue 21 May 2024 11:56:00 +0000
Files and hashes:         1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: dv83ads6B98JXr6W2nivuRbVpP9Jt3nhky2RYXKBVC0=)
                          2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: 5IrTNToIDXjg5EXHVcPGqcizI1IjZlz/i9n8WWYJUmU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl
                          rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 05:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5e:d8:18:16:a9:76:9f:0a:dc:d9:69:a2:c7:76:36:8c:4a:a3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA
        Validity
            Not Before: May 18 00:25:00 2024 GMT
            Not After : May 21 11:56:00 2024 GMT
        Subject: CN=54528AADA7AD7D1136F3B54570FDB26752B132A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:2d:62:2f:94:aa:69:5c:d9:3d:35:35:aa:
                    8a:2d:fb:ff:21:6f:c0:e2:cb:d4:bb:b1:d4:7a:b1:
                    79:ae:53:ef:24:ee:86:71:50:dc:0f:f7:b9:09:d1:
                    77:cb:e6:7d:bd:aa:6c:f8:a8:94:5c:0c:a7:b3:51:
                    95:d5:fc:fe:cc:8f:48:58:6d:3d:aa:ce:00:3b:9b:
                    16:ae:37:4d:12:6f:f4:9b:fd:08:06:fd:62:e0:f9:
                    ad:65:57:8d:87:98:24:6d:f7:45:75:d9:fa:3c:5f:
                    8a:5d:af:d6:2b:2e:c3:b1:2f:4d:dc:31:1c:08:4d:
                    c5:bd:bd:e3:ee:ac:bf:ba:96:02:bd:0d:ac:b5:59:
                    de:2e:8a:63:17:86:ea:3f:b9:52:fe:e7:ea:e3:3e:
                    d9:c3:ad:4c:cb:c7:dd:72:f1:e6:fa:b5:41:a1:54:
                    5e:54:79:a5:c9:2f:4b:e8:7e:ae:2f:8d:92:be:1a:
                    f4:75:a9:58:34:6b:1c:76:3f:f7:aa:c0:6f:d9:e6:
                    99:8e:7a:0b:ab:a7:b8:42:87:1a:66:c5:f9:ab:d5:
                    d1:d9:5f:a0:01:b0:7e:09:87:ea:97:c9:8e:cd:b9:
                    22:c1:e4:29:bf:00:d4:11:23:8f:68:b1:bb:e5:4d:
                    6e:56:11:41:b2:6c:f1:46:f5:f5:dd:8e:55:3c:ce:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:8A:AD:A7:AD:7D:11:36:F3:B5:45:70:FD:B2:67:52:B1:32:A2
            X509v3 Authority Key Identifier:
                keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:54:17:95:46:6b:a7:7e:2a:be:42:11:f6:5d:23:67:95:ca:
         cb:e2:5a:f6:03:26:9e:62:e4:ac:fe:88:f8:bb:29:2e:7e:e8:
         39:f6:75:c4:81:99:ce:be:2e:58:a2:d8:54:b4:af:b8:83:f3:
         62:2e:93:2b:dd:db:3f:83:6c:83:8f:7a:78:58:28:cb:35:73:
         4e:3d:28:da:d4:e1:14:59:e2:41:d1:dc:f8:67:70:09:1f:66:
         ad:3f:2b:79:ea:ef:f3:ed:d9:65:24:d9:5b:96:be:63:9a:d4:
         12:26:34:37:5b:bc:f0:96:80:8d:0b:04:5d:29:8f:11:a5:44:
         7b:5a:a3:2f:cc:b6:fc:20:b2:a2:04:92:0a:20:b4:4b:73:54:
         a8:17:87:d3:9c:58:28:49:5d:40:0e:f3:70:7a:0b:e3:62:6a:
         c8:90:a1:85:97:9b:05:8f:85:70:7b:31:6e:e8:a6:db:46:c1:
         b4:a9:76:be:f1:1b:c2:c8:21:ba:f1:8a:b6:0b:e6:0b:c9:1a:
         fc:d3:48:f7:69:eb:c4:09:a3:79:bf:3b:70:0a:7d:bd:fd:b4:
         92:87:c9:cd:b6:e4:f0:d9:ee:98:f9:f9:94:57:be:8f:7c:af:
         17:3a:91:e2:c5:5c:41:92:49:b3:75:89:4c:f1:af:bd:73:af:
         a7:40:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:29:15 2024 by rpki-client on console-fra.rpki-client.org