Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File:                     A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier:          NrNKOljUJyYJTL8OdQQGYqg7HA1FjfLdpdO6azEFar0=
Subject key identifier:   D6:15:DF:97:8A:8F:48:CD:BA:1C:DF:6F:37:29:67:75:57:DA:FB:85
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer:       /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial:       244980EB71ED1FEAFC41587735464BB17D84D55F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number:          0427
Signing time:             Thu 02 May 2024 16:21:58 +0000
Manifest this update:     Thu 02 May 2024 16:16:58 +0000
Manifest next update:     Mon 06 May 2024 00:02:58 +0000
Files and hashes:         1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: IEmK77Zg/0IEdwG5tYI1SbJ2UWNBoIXJyMmh+Ku6TIw=)
                          2: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: h9eV+eF2uZj5/POgIJx2qpOO7ZA5GwqWD7LEpwxE2L0=)
                          3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: fIqJaN9C1+zShmL6PCQrtUAmG3456/h7RtmjhnVJBtU=)
                          4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 1YUgeFlg/w0+bilqhHICZfuA4GsQ6FdkIIRgplUeor8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
                          rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 00:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:49:80:eb:71:ed:1f:ea:fc:41:58:77:35:46:4b:b1:7d:84:d5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
        Validity
            Not Before: May  2 16:16:58 2024 GMT
            Not After : May  6 00:02:58 2024 GMT
        Subject: CN=D615DF978A8F48CDBA1CDF6F3729677557DAFB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:11:ee:49:2d:4e:78:fa:92:1a:b8:42:f0:
                    ec:16:2a:23:a5:4b:75:0b:1b:45:88:26:cb:b2:a2:
                    af:c9:90:4a:66:f2:2a:0a:2c:6f:88:ef:2b:26:e7:
                    a3:1a:a1:37:96:81:33:34:28:93:60:ee:75:22:a6:
                    55:b0:83:bd:18:02:78:ec:a6:e0:7a:91:51:d9:53:
                    a7:b7:0c:6d:a4:2e:35:8f:fd:f7:32:90:9f:4d:b0:
                    a9:27:7c:fc:8c:35:b3:61:b4:56:ba:46:8b:10:3b:
                    81:bb:6b:b6:d2:6f:1d:b9:20:e7:d8:96:0e:89:6f:
                    20:8e:18:a5:85:b8:c5:44:76:f1:a5:dc:6f:37:ed:
                    81:7a:98:ec:1e:e0:39:a4:b2:86:ab:d1:fe:6b:10:
                    93:f6:10:37:e0:4a:13:71:79:00:9d:09:4e:27:d6:
                    59:ab:12:d5:97:11:ad:a3:9a:2e:f5:1b:28:cf:e2:
                    0f:35:c1:2f:b7:64:1e:6c:d0:de:b2:b3:31:fc:25:
                    5d:9a:23:02:92:be:d3:d2:a4:aa:40:36:84:e3:95:
                    6e:27:9e:d6:32:3d:76:98:d6:15:7c:d3:9b:e4:d5:
                    82:f0:31:0e:95:be:ed:56:7c:ef:3e:c9:68:dd:cb:
                    17:cb:1d:8e:f3:bd:82:0c:a9:85:f4:56:e8:3a:f6:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:DF:97:8A:8F:48:CD:BA:1C:DF:6F:37:29:67:75:57:DA:FB:85
            X509v3 Authority Key Identifier:
                keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:75:99:9b:4c:be:b4:ad:f7:55:34:f0:f7:f1:82:b9:4e:
         ba:c6:e9:04:7b:e3:74:07:5a:b3:7e:3c:28:28:e7:dc:10:db:
         7f:b5:71:cd:52:a6:2e:e4:fa:9b:9c:50:31:5f:d9:13:df:64:
         c0:d3:bd:72:2f:e6:76:fc:6f:71:e6:c9:73:23:b7:d2:b8:74:
         3d:68:b3:fe:af:a1:9a:a6:38:03:af:9e:a4:10:95:64:82:f6:
         04:75:27:d3:8b:8c:0f:b3:91:1b:5e:b5:f2:ac:3b:89:f5:9f:
         e4:1d:d8:b0:28:fd:5f:b6:00:ad:60:e0:04:d1:2e:d6:6c:fc:
         d6:25:e4:f8:85:8b:a4:85:75:8e:9d:6b:44:32:6e:ea:c3:ac:
         3b:f9:81:f8:bd:c7:28:03:77:7c:3a:18:26:d1:b7:06:45:7c:
         53:64:ec:a8:30:cd:b3:af:5d:c4:9a:a8:86:a5:04:96:8e:91:
         4e:c1:fb:11:e7:27:43:fd:f4:91:5c:ec:e4:f2:59:d6:58:03:
         f3:d3:ac:84:76:53:2e:21:b9:55:d6:10:f6:26:3f:f1:ba:92:
         0c:8c:05:19:89:20:ea:f4:7e:46:b1:c5:38:41:97:2c:e8:3a:
         a2:79:ce:67:a2:21:8f:21:69:60:19:67:bc:6b:aa:51:67:86:
         1b:42:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:22 2024 by rpki-client on console-ams.rpki-client.org