Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
File:                     A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json)
Hash identifier:          4xOztAotrnryV9PHt3wGniYu70xQg3pR0BoDHeeP6DE=
Subject key identifier:   16:3B:71:5B:2D:89:D8:19:27:C6:EE:F6:7E:C3:AF:E4:1E:C5:48:67
Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Certificate issuer:       /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Certificate serial:       3CDD0DD3FB0C976C01FEBD53CCDD009346E46EFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
Manifest number:          0388
Signing time:             Fri 10 May 2024 14:50:00 +0000
Manifest this update:     Fri 10 May 2024 14:45:00 +0000
Manifest next update:     Mon 13 May 2024 23:40:00 +0000
Files and hashes:         1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: wnxXzfw+KCeGQsRNNLp+bCM5b0nAP4MZsU79DsPKlW0=)
                          2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 2seZDXO4pcnd1JynB4V1//2E6KgnitMomhQoGmg2FZQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
                          rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 16:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dd:0d:d3:fb:0c:97:6c:01:fe:bd:53:cc:dd:00:93:46:e4:6e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
        Validity
            Not Before: May 10 14:45:00 2024 GMT
            Not After : May 13 23:40:00 2024 GMT
        Subject: CN=163B715B2D89D81927C6EEF67EC3AFE41EC54867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:99:78:2e:4f:20:1e:1d:bc:77:a9:81:44:
                    59:11:96:3c:82:df:f5:a8:06:14:e9:07:b7:8a:a6:
                    d8:5e:fd:2b:ec:9a:85:4a:68:05:c7:36:d0:e7:36:
                    48:84:3a:6e:31:1d:b1:6a:f0:eb:d5:bf:29:fc:df:
                    0a:59:5d:d3:c3:de:6d:05:3a:98:89:b2:56:8e:ca:
                    f2:dd:02:80:9d:d0:a1:c8:8c:b5:ba:9e:3c:a4:92:
                    e9:31:f7:09:6e:b8:51:7e:f9:a8:2c:51:69:17:22:
                    b9:82:c7:34:5d:88:fa:86:ae:d1:b7:ab:2e:6c:87:
                    b6:a4:5c:e3:2f:46:10:24:39:8a:c7:ac:63:38:d6:
                    ab:76:e5:52:bf:ae:d7:a6:39:0e:2b:a6:c6:d0:cb:
                    f1:46:af:9e:5e:7e:6d:95:4b:2e:c2:bd:b2:b6:b8:
                    ec:4b:56:2c:f7:9a:8c:63:b9:79:c8:97:bf:f6:d7:
                    de:84:bd:8c:1a:a4:c3:b2:44:cb:91:10:c5:71:96:
                    0b:cc:a7:b1:b0:d0:78:cc:ef:27:51:2e:a7:0b:d8:
                    fd:7c:5e:d0:5b:87:f6:7b:15:b0:54:28:10:9e:cd:
                    88:fa:49:7a:55:6d:2c:42:4f:6f:68:3b:47:41:5d:
                    2c:71:48:c1:86:b3:ba:1d:67:97:c1:8f:75:27:ba:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:71:5B:2D:89:D8:19:27:C6:EE:F6:7E:C3:AF:E4:1E:C5:48:67
            X509v3 Authority Key Identifier:
                keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:5a:73:bb:83:6b:dd:8c:39:0d:2c:97:e3:f3:ce:df:65:
         16:7d:09:fe:ec:7f:e0:c6:a8:43:da:34:ee:42:82:37:0c:bf:
         23:fc:13:48:51:a2:9e:9e:f9:f6:94:79:13:9c:71:ca:26:bc:
         e6:8d:a3:7b:6d:5e:fa:94:3d:3d:54:82:d7:a4:1c:20:ad:56:
         8a:f7:38:53:26:bf:4a:12:c6:5e:92:1e:89:e7:58:46:7e:70:
         e9:15:2b:6f:97:0c:b2:0d:85:b9:18:ec:53:c0:83:ea:b0:fc:
         36:88:24:ca:4e:37:f6:64:00:53:5b:d5:2e:6c:19:2b:ee:1b:
         68:d9:68:b9:d9:dd:26:73:53:6d:11:d7:92:29:be:3d:02:2e:
         ef:7d:96:d0:e8:af:12:29:15:c2:e5:9b:9e:f9:90:cb:f7:ac:
         13:5c:4b:59:5f:72:5c:9d:cd:56:da:d6:dc:ee:08:54:13:f7:
         24:86:61:d8:6d:f3:c7:21:13:36:ca:ae:1c:99:dc:a9:49:7d:
         d6:13:fc:db:e1:19:5c:b4:e6:d8:ae:21:96:66:42:e1:47:c1:
         e1:dc:ef:06:24:1a:7f:35:1c:4f:a3:d4:87:3a:c8:35:eb:a4:
         dd:b5:db:ca:cb:00:85:2e:8d:ff:57:80:f5:df:6d:eb:39:5a:
         ab:1f:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:07:12 2024 by rpki-client on console-fra.rpki-client.org