Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          wbpW34ejjytduJLD8VLfGtyCAObblG93X6+0m79lSeU=
Subject key identifier:   1D:0A:6E:10:1E:D5:EC:C5:D6:94:BB:0D:BC:27:84:CF:24:7D:B1:44
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       420FEA3A7B81802C0805A88695E5D2E4C8C806C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          0439
Signing time:             Wed 01 May 2024 15:30:44 +0000
Manifest this update:     Wed 01 May 2024 15:25:44 +0000
Manifest next update:     Sat 04 May 2024 15:52:44 +0000
Files and hashes:         1: 3131302e37362e3134362e302f32332d3234203d3e203338353036.roa (hash: oDVi4H1J5Xqyjb4MCTrrMWPJK/1ImjqOXECh+BkFmwU=)
                          2: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: qQJ6jnEpqkagSZS3Czt8tnXV6YM0MQSY5KuiCGCC3w8=)
                          3: 3131302e37362e3135312e302f32342d3234203d3e20313339393632.roa (hash: vpo9vN4piERL2VolK9N7bS+ZeVr6x4uW4VOo6sgDYuc=)
                          4: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: LxkNw1wqE1e2Gllb6h9NQFIHDrAa1NajpeMpU+YFZ84=)
                          5: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: PzCkuAVrPC6ULmMdsmHlDmI1kDwS+Og7na9NNMIi/hk=)
                          6: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: fBOewGvfKirBOUYDZv6M775GlpgyK29eVN/eFkaqN9c=)
                          7: 3131302e37362e3134382e302f32332d3234203d3e203338353036.roa (hash: 5SOKZtz0qAVv6oTfyC5+29aFlE6C0OoeMkcic0T/KnA=)
                          8: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: BY+gcjkX4Q6G2fzs48mtl7lLOT5/vBmE6jun9KWAdGo=)
                          9: 3131302e37362e3134342e302f32342d3234203d3e203338353036.roa (hash: r+ViugV5RhgPHQmZyCcoGRzqLCw8sx3rcMxPlHPSaH0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 15:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:ea:3a:7b:81:80:2c:08:05:a8:86:95:e5:d2:e4:c8:c8:06:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: May  1 15:25:44 2024 GMT
            Not After : May  4 15:52:44 2024 GMT
        Subject: CN=1D0A6E101ED5ECC5D694BB0DBC2784CF247DB144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:7e:09:f5:67:df:48:27:07:f4:1d:3c:3d:
                    ab:91:0e:66:64:d8:92:e3:4c:8f:06:e1:fe:74:a6:
                    f6:2a:b1:6c:6b:6c:99:20:d5:9f:b5:5f:8c:1c:e2:
                    e8:95:72:21:fc:5c:b1:06:f8:f5:c1:5c:54:b6:d6:
                    8e:02:bd:91:6f:6e:a8:1a:1b:55:e5:58:74:8d:0e:
                    02:3e:70:a6:ce:5c:58:02:e7:2b:aa:ea:e5:37:1c:
                    2b:1f:bc:e5:1a:d5:9c:23:43:ec:72:46:0a:cd:27:
                    f0:e5:49:7c:f8:22:40:58:8b:74:c4:22:70:7f:5c:
                    fd:e1:f5:11:b2:ac:ad:16:73:2f:b5:92:03:17:f1:
                    b6:ed:4f:f2:9c:6d:4a:21:65:89:7a:83:0c:3e:87:
                    d2:3b:de:4b:d4:02:e6:d6:b2:c2:64:57:84:82:9e:
                    db:3e:95:ea:8c:03:77:9e:e5:02:7d:75:d3:cd:6b:
                    fe:c8:6c:ab:09:e6:6d:7b:fb:ec:1e:43:0c:cb:7d:
                    47:77:9e:4b:13:02:d0:b2:ed:37:65:19:cb:f3:70:
                    3c:8e:78:f6:d6:50:78:5b:36:8c:52:cc:0f:63:ec:
                    80:f7:74:11:8b:ee:0b:ac:74:cc:8f:ae:6b:b0:d7:
                    a3:0b:fe:4c:04:c0:b2:87:7d:bb:56:af:6d:3b:6a:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:6E:10:1E:D5:EC:C5:D6:94:BB:0D:BC:27:84:CF:24:7D:B1:44
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:50:31:01:f1:f4:41:11:9a:20:53:b6:eb:20:0c:a5:7c:ec:
         ef:5a:bc:37:7f:10:6b:7f:12:c3:cc:ae:a3:f8:a0:c2:0a:d8:
         e5:51:f1:78:53:54:6b:c6:a9:f8:7d:59:dd:be:a9:0c:df:44:
         87:42:2d:a1:04:b3:79:a6:d1:bf:a8:7e:a8:9b:ce:6c:ee:c5:
         1b:4c:ed:2b:93:36:82:31:25:b1:c5:fc:71:83:99:00:af:85:
         f7:16:30:d8:57:5e:72:7c:d2:be:3b:d1:0a:33:b9:32:b8:c4:
         63:91:a7:93:c7:7f:45:3c:c6:2d:96:ba:e6:db:bc:b1:b8:d7:
         11:e5:be:6b:15:a6:86:aa:6e:64:10:a4:1c:91:84:f1:89:01:
         d8:89:d1:e7:00:be:cf:93:21:db:4a:cd:bc:ca:66:a3:65:bb:
         ed:5c:ad:4b:32:85:a7:fa:0f:39:13:b0:35:fe:92:3c:4e:b8:
         80:f1:09:1c:cd:73:7a:4e:06:f3:0e:07:03:b6:a6:55:d0:dd:
         23:9f:b4:89:a3:2a:84:b3:7d:cd:b8:28:38:78:b6:1b:8a:a0:
         f6:96:92:1b:f4:a4:f2:81:94:5c:23:17:48:52:9f:cc:7e:1a:
         26:39:0c:be:a5:db:78:80:cc:9c:53:eb:25:a4:d7:d9:6f:2f:
         1a:63:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:23 2024 by rpki-client on console-fra.rpki-client.org