Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft
File:                     2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json)
Hash identifier:          bpFEjHHeSS+UauP56fNTlMXcG3LwMmz8QQW47bPZVgI=
Subject key identifier:   84:67:44:63:FD:6D:4E:BF:C4:17:E5:A3:77:07:17:97:B5:C1:D6:32
Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17
Certificate issuer:       /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17
Certificate serial:       019DBD9CA17D22413F95A91153C8811B73183C29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft
Manifest number:          03EA
Signing time:             Thu 16 May 2024 23:01:35 +0000
Manifest this update:     Thu 16 May 2024 22:56:35 +0000
Manifest next update:     Mon 20 May 2024 10:11:35 +0000
Files and hashes:         1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: iSSO2z+FVr8idR0Ark5PgBp8D/wD8PAQ09cDfCIPUT8=)
                          2: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: nLaASs9tLnFtsMmTK6mYdWM74LCdJ+9HtBpIw1GZ1DI=)
                          3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: nz2AEU8nn9AMM02S13QC6wiAWu/J78Mx5UkS49jdfKk=)
                          4: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: /4S8d6m7jX0GR4TalIVSPa6sqOSraNgZKAKOG7IlQ1U=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl
                          rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:bd:9c:a1:7d:22:41:3f:95:a9:11:53:c8:81:1b:73:18:3c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17
        Validity
            Not Before: May 16 22:56:35 2024 GMT
            Not After : May 20 10:11:35 2024 GMT
        Subject: CN=84674463FD6D4EBFC417E5A377071797B5C1D632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:a5:25:ce:fa:43:3f:ab:bc:d6:3f:6c:67:
                    d0:e2:d9:49:c6:a3:ef:a1:ec:da:9f:04:11:79:48:
                    18:d6:2b:d3:ad:ef:ed:bb:5e:a8:13:a2:81:2b:8f:
                    46:ba:d7:a3:2e:70:7b:ef:fb:96:3e:3c:84:7b:05:
                    88:ba:e7:6d:b8:c9:7e:2f:77:dc:74:2d:ec:a3:db:
                    ea:46:c7:c7:9e:e0:70:a8:8d:6b:b1:13:c8:3b:4f:
                    61:e1:9c:34:f8:f3:c8:13:75:18:9a:23:d9:6a:4b:
                    39:32:85:42:69:31:20:47:fd:e2:03:2c:59:11:1d:
                    42:d2:20:1b:4b:c4:42:d7:6a:f4:b9:09:7b:de:b5:
                    12:ab:43:ee:3c:88:39:38:cc:22:9d:1a:26:60:3e:
                    bb:32:43:6d:f8:56:23:b3:94:78:7f:18:e8:4c:6a:
                    79:13:87:a7:11:cd:17:bc:a0:96:bc:97:65:07:1c:
                    d9:57:4a:65:8d:83:71:0c:05:f7:ad:80:c0:c7:b0:
                    9f:28:61:40:b7:50:27:e4:29:50:c5:99:62:49:80:
                    87:0f:83:c4:16:47:d6:5a:91:bf:51:3a:24:37:d4:
                    4a:7f:bb:3c:15:62:bc:b2:1b:9c:2d:98:6a:76:e1:
                    ef:5d:df:95:18:82:ef:0a:47:b2:02:25:d1:ff:a2:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:44:63:FD:6D:4E:BF:C4:17:E5:A3:77:07:17:97:B5:C1:D6:32
            X509v3 Authority Key Identifier:
                keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:88:c4:f3:5f:b7:59:0b:21:5b:5c:e8:d0:21:5b:2f:6c:
         be:75:9c:0f:39:10:75:9d:70:4c:9b:0e:ff:03:73:1a:87:37:
         31:b6:83:2a:f0:0e:b4:24:bf:97:17:95:9b:3c:19:e1:0c:78:
         ac:9d:69:f6:d0:7e:80:97:99:13:9d:01:a1:40:6e:40:4a:32:
         8f:a6:a6:ef:03:5a:3c:5d:02:16:a8:7a:8c:61:da:69:cb:aa:
         a2:0f:9d:b9:cd:13:bb:ba:55:e4:96:39:ac:82:ad:fe:e3:9b:
         e6:62:58:96:73:04:eb:59:fb:99:46:ff:18:b5:fd:63:56:b0:
         28:18:cc:e4:a0:8f:15:72:83:57:c5:ba:78:ff:18:8f:0f:59:
         66:c2:51:e6:fd:08:87:d9:3f:e0:b4:35:fd:d7:0e:73:b6:09:
         4a:12:09:e0:23:56:00:2d:a2:06:3b:57:16:e7:fb:80:78:66:
         6d:ac:c1:ac:b8:53:40:f5:ac:52:5d:b3:f0:c9:0f:49:84:61:
         66:1c:22:f8:11:80:71:98:85:05:f6:84:ab:31:51:be:db:91:
         05:43:54:32:a1:fa:09:3e:51:fc:d5:c6:c8:45:95:62:97:ec:
         d2:3f:91:9d:e6:d2:02:23:21:00:ef:d5:6f:a3:4d:11:41:0f:
         d0:9e:5d:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAZ29nKF9IkE/lakRU8iBG3MYPCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy
RUJEMkExNzAeFw0yNDA1MTYyMjU2MzVaFw0yNDA1MjAxMDExMzVaMDMxMTAvBgNV
BAMTKDg0Njc0NDYzRkQ2RDRFQkZDNDE3RTVBMzc3MDcxNzk3QjVDMUQ2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/6UlzvpDP6u81j9sZ9Di2UnG
o++h7NqfBBF5SBjWK9Ot7+27XqgTooErj0a616MucHvv+5Y+PIR7BYi65224yX4v
d9x0Leyj2+pGx8ee4HCojWuxE8g7T2HhnDT488gTdRiaI9lqSzkyhUJpMSBH/eID
LFkRHULSIBtLxELXavS5CXvetRKrQ+48iDk4zCKdGiZgPrsyQ234ViOzlHh/GOhM
ankTh6cRzRe8oJa8l2UHHNlXSmWNg3EMBfetgMDHsJ8oYUC3UCfkKVDFmWJJgIcP
g8QWR9Zakb9ROiQ31Ep/uzwVYryyG5wtmGp24e9d35UYgu8KR7ICJdH/og6PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhGdEY/1tTr/EF+WjdwcXl7XB1jIwHwYDVR0j
BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG
RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE
MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw
MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5
MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADNriMTzX7dZCyFbXOjQIVsvbL51nA85EHWd
cEybDv8DcxqHNzG2gyrwDrQkv5cXlZs8GeEMeKydafbQfoCXmROdAaFAbkBKMo+m
pu8DWjxdAhaoeoxh2mnLqqIPnbnNE7u6VeSWOayCrf7jm+ZiWJZzBOtZ+5lG/xi1
/WNWsCgYzOSgjxVyg1fFunj/GI8PWWbCUeb9CIfZP+C0Nf3XDnO2CUoSCeAjVgAt
ogY7Vxbn+4B4Zm2sway4U0D1rFJds/DJD0mEYWYcIvgRgHGYhQX2hKsxUb7bkQVD
VDKh+gk+UfzVxshFlWKX7NI/kZ3m0gIjIQDv1W+jTRFBD9CeXVs=
-----END CERTIFICATE-----
Generated at Thu May 16 23:38:47 2024 by rpki-client on console-ams.rpki-client.org