Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          UELz5DHzO8TvGvfruNQJGULwivdgX/Qzh9iv0BhXNM0=
Subject key identifier:   4F:10:AF:3D:F6:E6:0B:75:74:B4:1D:66:93:89:46:8C:1D:DE:C7:55
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       1E96C563C5EA156BE2C3E0755A46A7F710B70FB3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          0428
Signing time:             Wed 01 May 2024 13:01:58 +0000
Manifest this update:     Wed 01 May 2024 12:56:58 +0000
Manifest next update:     Sat 04 May 2024 17:39:58 +0000
Files and hashes:         1: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: bOcqzNKKCzOEiumbcqx108z3D9fEuqeGbLCa1XWttek=)
                          2: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: NuYbQhYrZeTuagYSrZmxOk8DcUhrY2KakstDDqoH304=)
                          3: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: bMJE/451bd4d43sm+bBoQrgVdgOIGMatn+HNDruuSmc=)
                          4: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: Ky6XN796cf2txtUxbWEpggQtCPPFAnIkO+y2jWLuoYk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 15:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:96:c5:63:c5:ea:15:6b:e2:c3:e0:75:5a:46:a7:f7:10:b7:0f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: May  1 12:56:58 2024 GMT
            Not After : May  4 17:39:58 2024 GMT
        Subject: CN=4F10AF3DF6E60B7574B41D669389468C1DDEC755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:5b:75:c8:2c:48:f3:db:20:9b:d8:a8:74:
                    18:89:b8:49:5a:c5:2f:40:10:80:c4:02:87:f3:67:
                    57:00:3b:df:f1:4f:7e:9a:01:01:ab:ba:14:29:34:
                    2a:7d:02:ea:51:d1:e0:1d:65:4c:e3:2d:89:b7:d6:
                    c0:5b:60:a3:8b:83:af:c2:1d:b4:16:20:f6:04:4a:
                    69:f5:0a:d5:9a:07:3b:75:da:9d:71:b4:64:46:2e:
                    43:8e:5a:db:41:ff:e8:1e:52:89:36:b2:46:41:75:
                    38:42:ba:5d:64:45:6a:bf:59:65:48:03:87:59:e7:
                    3a:c8:13:be:33:cb:e5:8b:d8:d8:52:0b:af:4e:4a:
                    3a:e8:5d:3e:87:f3:66:29:3e:75:05:98:4d:1f:64:
                    55:80:be:25:55:cd:54:c6:0a:6c:21:25:06:fb:f6:
                    7d:bf:e8:58:f2:39:ab:18:11:7d:6d:c0:85:00:bb:
                    3d:c2:27:15:98:4c:55:74:e8:f0:aa:86:4b:ed:b3:
                    e9:73:98:83:fb:36:f8:d9:32:2c:79:72:ad:fb:4e:
                    2b:25:6d:74:18:d5:5e:27:db:60:d9:af:f5:ec:e9:
                    13:7f:87:c1:2e:5a:d6:b0:93:0f:b2:dd:0e:bf:94:
                    7e:ce:06:ce:c5:54:0c:64:32:9a:22:c5:58:22:ef:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:10:AF:3D:F6:E6:0B:75:74:B4:1D:66:93:89:46:8C:1D:DE:C7:55
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:17:01:21:cc:19:57:97:8b:03:ca:d4:d3:30:2e:13:98:
         1c:b3:64:16:88:2c:b9:62:8c:a8:53:63:5f:de:20:ca:7f:b0:
         83:81:0a:30:79:55:f5:3c:cc:bc:b0:1f:e9:0a:26:4d:b5:f5:
         14:78:20:1c:0b:a1:b6:13:cb:01:5a:1b:f6:d5:18:97:28:82:
         c8:5d:75:f9:ad:15:6f:5a:30:0f:c6:16:30:2f:07:e6:78:99:
         b3:0f:a4:e3:7e:c8:2c:df:a8:d7:ac:bf:a4:fe:d1:34:39:4b:
         cf:35:dd:90:8d:fd:e9:df:aa:03:71:c1:3f:e2:6b:41:24:20:
         54:16:f6:8d:28:ef:fe:47:63:d9:ed:75:1d:86:7f:b2:c4:fe:
         2a:8f:f6:db:89:00:ac:df:d8:1a:30:21:93:2e:81:44:fc:da:
         88:29:5e:c5:91:b4:2a:99:66:aa:43:87:2e:6e:8f:1b:08:7d:
         f7:c1:3f:0d:a0:7c:c7:c1:ea:76:22:f7:e4:7e:4c:b1:25:28:
         cf:52:90:b7:9f:54:dc:8d:9d:bb:3c:29:e7:6e:a3:6a:2a:8d:
         95:dc:b6:91:ee:ee:75:ac:cd:86:1c:a0:a0:5e:a2:87:21:ed:
         50:92:88:c5:46:09:aa:9d:ed:30:2a:ba:d2:ca:d8:a1:74:6d:
         fa:1b:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:04 2024 by rpki-client on console-fra.rpki-client.org