Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
File:                     E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json)
Hash identifier:          dr+vB+1RdHrFT1jVHssBCL8YhR+9gqSSLDXs1Jw4DDA=
Subject key identifier:   F7:DE:5D:7B:F1:CE:A0:70:9B:D6:3D:10:B1:47:C3:33:92:08:D1:81
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Certificate issuer:       /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial:       7A590F3A9F3CF37881438DEA0E1B22131F3E2D22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
Manifest number:          013C
Signing time:             Sun 24 Nov 2024 08:02:11 +0000
Manifest this update:     Sun 24 Nov 2024 07:57:11 +0000
Manifest next update:     Wed 27 Nov 2024 18:10:11 +0000
Files and hashes:         1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: P1/YWh5HHMj/ODxZsOeg0/xfmRTq2o2uJd+9b0UbgXE=)
                          2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
                          rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:59:0f:3a:9f:3c:f3:78:81:43:8d:ea:0e:1b:22:13:1f:3e:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
        Validity
            Not Before: Nov 24 07:57:11 2024 GMT
            Not After : Nov 27 18:10:11 2024 GMT
        Subject: CN=F7DE5D7BF1CEA0709BD63D10B147C3339208D181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:9a:fb:15:18:d4:94:7a:bd:b7:aa:e2:28:
                    5a:24:d9:77:71:ec:c4:4a:fe:d4:11:84:57:a7:bc:
                    57:77:72:35:b4:a6:25:f3:73:24:f7:a6:2e:c1:8b:
                    9b:da:d7:82:d1:f9:82:5d:3f:4c:aa:7a:f1:7e:6a:
                    03:57:b7:19:b4:f9:38:36:5f:6f:33:f1:bf:28:82:
                    4d:de:3e:28:25:a8:4f:e0:0b:87:8b:6f:8f:a9:33:
                    81:1e:15:5e:81:10:f1:14:a1:69:00:79:85:6e:23:
                    cc:65:30:48:a0:da:ee:ea:ec:22:69:48:93:dc:6e:
                    81:e8:92:6f:33:94:f8:85:36:41:ba:d3:91:50:a2:
                    f6:6c:cd:77:65:91:cd:f4:a4:8a:01:2f:b7:f8:b4:
                    8d:13:8e:0e:fc:9a:48:a2:df:01:c2:02:c9:c3:e4:
                    4c:11:66:21:22:3e:5d:99:41:b0:dc:8d:ac:2d:c4:
                    b5:ae:72:7d:52:d9:ba:f0:f6:b7:3b:de:86:9f:79:
                    86:52:63:9c:0a:86:c5:f3:b0:9d:47:f1:83:48:0f:
                    75:0a:69:fa:88:02:6b:37:a5:65:da:96:97:d7:25:
                    c5:eb:47:59:53:ae:d7:5c:95:e3:5b:09:ef:41:2e:
                    ff:e7:b3:7d:ce:41:ae:da:21:b6:ff:74:f6:8e:1b:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:5D:7B:F1:CE:A0:70:9B:D6:3D:10:B1:47:C3:33:92:08:D1:81
            X509v3 Authority Key Identifier:
                keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:06:85:b1:6c:cd:0d:ac:6f:36:55:c0:a6:6d:f5:e1:a2:d8:
         45:34:cc:e9:c8:e2:19:47:de:31:e6:5f:c2:d6:d4:09:81:5e:
         9a:ea:56:98:1f:62:59:ee:1d:d5:3a:31:89:5e:d8:13:72:22:
         49:26:a7:6b:74:e0:80:8a:4b:d7:18:4c:c8:31:b9:eb:43:fa:
         1e:10:44:b0:52:78:f6:b3:f4:b6:8f:2a:0a:e0:54:cc:b0:83:
         ac:84:84:e9:8b:cc:f7:d0:85:dd:06:14:27:75:bd:5d:b9:21:
         40:33:9d:16:d3:d7:5c:cc:5c:65:b6:85:14:63:b4:3f:86:96:
         32:66:84:f1:7b:53:f7:e2:3c:e8:ae:36:6c:ed:63:d1:ac:b0:
         48:1f:47:22:42:64:d1:c1:66:1e:6f:04:3d:a8:1e:da:8e:0c:
         27:23:37:3f:3a:0b:03:b0:b0:e5:03:31:74:92:83:fa:1c:8b:
         eb:28:24:cf:0d:2f:ba:c2:a7:ca:ab:a7:bf:f1:dc:16:3c:4b:
         bf:d6:ca:ba:27:30:84:ce:b1:37:30:50:e9:5c:30:31:97:be:
         cd:1d:29:f6:55:90:cc:d2:70:3d:ba:ed:16:2e:6c:16:7a:50:
         62:a5:1d:41:de:59:d2:5a:cb:70:11:03:17:a8:2c:23:b7:68:
         86:dc:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org