Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
File:                     625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json)
Hash identifier:          Fl15HFvrM0MABm8B86Ugt8ATZz51Dzr2EamNURs2Pns=
Subject key identifier:   6D:C4:F6:95:67:C6:87:B3:74:3F:45:8A:41:72:08:6D:AE:03:D1:11
Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4
Certificate issuer:       /CN=625D3D358DEFDD65359387A6A36775411462B4D4
Certificate serial:       52EBE1875A34579E922166ABEEEAF454742B56FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
Manifest number:          01AA
Signing time:             Wed 20 Nov 2024 10:00:48 +0000
Manifest this update:     Wed 20 Nov 2024 09:55:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:34:48 +0000
Files and hashes:         1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: ZLKMzF4hF/QgHktfyy1RGBHDQiddcmycRYFX/Ur1Q1E=)
                          2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: 2XsOf7O3GIGaJD+pbkQKIq0D61UCqzSVtcJ4nq6W/LE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl
                          rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 16:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:e1:87:5a:34:57:9e:92:21:66:ab:ee:ea:f4:54:74:2b:56:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4
        Validity
            Not Before: Nov 20 09:55:48 2024 GMT
            Not After : Nov 23 16:34:48 2024 GMT
        Subject: CN=6DC4F69567C687B3743F458A4172086DAE03D111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:88:f1:f1:09:97:bc:b5:fc:e7:84:c4:d7:
                    64:44:69:08:64:da:6e:9f:b6:be:4e:63:81:32:93:
                    dd:e8:ba:bf:f9:96:97:ab:b4:0c:20:de:4a:14:5c:
                    f2:90:84:db:03:53:32:84:97:e4:09:70:ec:1b:fb:
                    2d:5b:7f:d8:01:40:b0:d8:de:65:ab:0d:43:6c:f1:
                    15:75:69:fc:d4:72:d0:ee:f3:83:74:79:08:47:11:
                    71:ff:36:6e:d4:0f:89:98:b3:02:96:b8:40:36:4e:
                    2b:91:dd:b5:86:54:7c:0d:67:d6:81:80:d8:f9:2e:
                    02:ba:17:89:52:53:a3:d0:e7:20:74:92:87:2c:4f:
                    08:8f:4e:14:2e:26:81:97:e7:65:db:4d:22:fe:61:
                    1d:24:f1:1d:21:dc:ef:f2:1d:cc:39:41:aa:4a:31:
                    7c:2d:8b:7a:e1:5a:df:d6:7e:d1:9b:e6:7c:24:4c:
                    1c:2c:75:8e:77:e9:e5:2b:38:f6:cd:45:3a:d8:e1:
                    60:a3:8e:bb:a2:da:c2:1a:84:6e:4e:49:b0:ea:89:
                    90:6b:b4:01:52:c2:68:80:fc:4c:6d:f7:38:88:1e:
                    22:73:8c:be:22:83:ec:22:4e:b1:51:6e:aa:ba:08:
                    2e:f7:f4:18:d7:4c:3f:f3:0f:6b:09:82:07:d0:4e:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:F6:95:67:C6:87:B3:74:3F:45:8A:41:72:08:6D:AE:03:D1:11
            X509v3 Authority Key Identifier:
                keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:38:0b:e4:56:77:59:9f:00:1b:49:3b:f0:94:92:8d:72:90:
         d3:65:23:e1:e9:18:61:74:4d:cd:16:fb:61:87:a1:35:98:e4:
         69:fa:19:f8:57:d5:c0:44:e1:32:49:d4:61:11:67:1a:39:09:
         fd:58:f8:90:04:c4:6b:a3:7a:34:73:87:ea:0b:8c:c3:f4:e2:
         7e:08:1b:1c:dc:e5:bf:3b:8c:de:a0:6a:16:ea:cb:65:f0:b1:
         26:fe:f6:94:15:40:4b:3b:d4:29:76:a6:73:13:98:0f:6f:f1:
         43:70:69:3d:0e:69:61:84:5a:6d:ca:35:ba:65:ef:1c:33:da:
         bc:69:67:04:dc:00:6a:05:47:aa:8c:2f:26:e3:15:46:0c:41:
         57:1b:64:22:f5:22:b8:da:d7:23:2c:53:6f:1c:5d:30:92:18:
         5b:97:2f:c1:c7:47:84:46:dc:c3:5b:7f:53:38:80:35:10:34:
         21:fa:75:cd:4b:fb:af:d6:dd:89:cf:b6:da:7f:81:bc:09:15:
         e8:d6:b9:b6:a3:3e:3b:89:d6:c4:46:cd:bc:46:a6:2c:00:9e:
         1e:c7:14:0b:62:25:d4:e9:7a:df:4b:1e:d9:e8:9b:f1:57:04:
         47:08:11:ef:9d:c4:0b:c5:af:0b:29:a4:aa:35:f2:35:bd:c0:
         0d:3d:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:52 2024 by rpki-client on console-ams.rpki-client.org