Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
File:                     0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json)
Hash identifier:          7J2toNJtvCrSynM4S4tXcmAYEL6vQmIepjFecQ6c2vw=
Subject key identifier:   84:36:68:9D:3C:25:95:CB:46:52:22:43:B8:13:82:94:98:A3:CD:1E
Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96
Certificate issuer:       /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96
Certificate serial:       615AA40FE2F01B64C19A9A36C2D3607E071CC104
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
Manifest number:          BA
Signing time:             Mon 27 May 2024 16:40:52 +0000
Manifest this update:     Mon 27 May 2024 16:35:52 +0000
Manifest next update:     Thu 30 May 2024 22:26:52 +0000
Files and hashes:         1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: 167OSHuP+fBYyTF7u+8i94hD+TtoLTYrSZ/0+P3zW2E=)
                          2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: QQTvRd5IasuSE+h3OUL3w8r10ZtDfAA2ShDiaukAWm4=)
                          3: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: 1TyhLB8fOXjmKceU8yRe4plYrAet4G8VcfEQ2+B2uHc=)
                          4: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 2PVMT7+JuXdxiFs8M2lHxdM8cnqO4FKkgMmUElPIUPg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl
                          rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 22:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5a:a4:0f:e2:f0:1b:64:c1:9a:9a:36:c2:d3:60:7e:07:1c:c1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96
        Validity
            Not Before: May 27 16:35:52 2024 GMT
            Not After : May 30 22:26:52 2024 GMT
        Subject: CN=8436689D3C2595CB46522243B813829498A3CD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:6b:84:08:f8:8c:96:6f:7b:71:90:f7:6e:
                    a9:3e:25:d5:d2:0e:52:03:31:a9:58:b6:28:ee:97:
                    8d:70:9d:3f:06:be:65:74:43:d7:50:f1:e8:64:04:
                    ad:22:3c:ee:4a:dc:fa:f8:38:a2:21:ad:a5:4a:6d:
                    c0:67:29:45:30:4f:99:e1:ea:93:f6:29:42:52:f6:
                    22:95:77:e1:a0:3a:01:cb:b6:8e:06:3a:b3:07:34:
                    d5:c3:b2:04:f4:46:64:88:50:5f:ce:ca:33:36:28:
                    c2:c9:1a:c8:f1:f2:81:9d:c7:4e:34:2a:22:64:fb:
                    4c:ac:fa:97:c3:8b:de:78:a6:0d:f8:81:ab:dd:6e:
                    b5:80:8f:58:ae:ac:df:c3:ff:54:37:41:89:24:e8:
                    f8:13:e3:df:81:05:ca:63:1c:b2:ff:fc:6f:f2:47:
                    62:b8:9f:95:6a:20:10:55:b4:e4:06:bf:d1:36:30:
                    37:9e:ad:75:31:fe:20:e6:a9:e8:58:f6:51:3f:dd:
                    2b:34:0c:db:72:da:b6:e8:76:3c:40:01:1e:70:f9:
                    1c:41:d2:20:f2:80:f1:11:d2:79:4f:28:01:c2:ef:
                    75:18:a2:3c:1d:9c:9a:9b:2a:c7:23:7d:59:ee:5e:
                    c0:41:b8:41:d8:36:a1:7f:3f:3f:fe:f2:7d:b6:17:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:36:68:9D:3C:25:95:CB:46:52:22:43:B8:13:82:94:98:A3:CD:1E
            X509v3 Authority Key Identifier:
                keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:79:1c:9b:92:2d:61:fe:e2:c8:7b:4e:76:b1:a4:ed:34:
         6b:52:cb:a0:9d:ef:20:2c:ab:bf:30:7f:f0:e2:3e:c0:90:2b:
         2f:a1:5a:79:af:68:6f:92:4a:f2:99:87:51:6c:a7:37:18:69:
         b5:17:70:f2:79:0d:16:28:40:27:44:37:48:3c:e3:30:0a:2f:
         92:0d:40:ed:d4:ab:d8:b6:55:92:a2:a8:d7:ad:5a:df:a9:ee:
         83:c4:89:a8:bd:bc:d8:03:57:16:dd:d8:57:fc:29:d2:21:31:
         20:d0:85:bc:de:f1:8a:5c:d2:db:93:0f:19:96:62:30:c6:60:
         90:61:7e:f6:30:0b:9f:43:80:d9:eb:fb:1a:7b:24:d3:d1:b0:
         14:82:11:ce:b5:9a:ed:20:52:d6:5e:52:94:70:87:8b:4f:53:
         d3:80:f2:bb:8f:3a:42:b5:59:65:3e:d3:bc:48:70:8a:8e:07:
         5e:b6:a1:9b:e5:50:9f:2b:64:ba:7f:31:96:2a:c0:76:58:55:
         c2:32:fe:1e:76:14:c2:4c:51:7e:83:65:c5:81:93:0b:88:47:
         09:dd:a3:d4:be:ed:7b:a1:dc:37:c1:6f:3d:4c:e2:13:25:2c:
         b3:7c:70:e0:d6:62:82:3f:40:18:60:d6:72:ad:f8:97:86:9f:
         4c:a1:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:01:05 2024 by rpki-client on console-ams.rpki-client.org