Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
File:                     8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json)
Hash identifier:          03BI8fKguGHcja7pTKG0xic+QfhetjpGp3XZTl42W/c=
Subject key identifier:   DB:02:32:3F:38:F6:97:AB:73:53:9A:21:D8:0D:30:62:8E:1C:47:16
Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8
Certificate issuer:       /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
Certificate serial:       5510A4F6B5DDAA1BD97A96DAB3F59AAA433B7A60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
Manifest number:          042A
Signing time:             Fri 03 May 2024 15:50:30 +0000
Manifest this update:     Fri 03 May 2024 15:45:30 +0000
Manifest next update:     Tue 07 May 2024 01:53:30 +0000
Files and hashes:         1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: efhf5Nk2xbq8feLBY5SmsJ3sbXi6MPyny7iu+b1sHcg=)
                          2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 0j69uKJLjlT2d8unvfasXypib7pwWHkBfQS8TXKpYG0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl
                          rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:a4:f6:b5:dd:aa:1b:d9:7a:96:da:b3:f5:9a:aa:43:3b:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
        Validity
            Not Before: May  3 15:45:30 2024 GMT
            Not After : May  7 01:53:30 2024 GMT
        Subject: CN=DB02323F38F697AB73539A21D80D30628E1C4716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:2b:a4:0b:d4:67:34:74:92:25:5b:0f:fe:
                    4e:65:a4:ac:00:b2:69:48:e7:64:fe:ed:e0:56:c9:
                    60:d6:52:71:c4:75:b1:fb:61:ea:00:d6:33:b3:b2:
                    ed:eb:9d:32:4c:4d:2a:7d:7f:ef:46:19:a7:e4:8b:
                    c6:fa:29:7d:61:b2:17:a6:5e:26:80:cb:bd:bd:12:
                    5e:f9:c3:ac:e4:d9:41:33:16:4b:61:44:a7:53:e7:
                    17:a7:93:40:b9:da:84:65:d1:3d:82:ba:a2:46:dd:
                    e8:0c:23:66:9d:09:cb:91:6d:e0:b6:25:54:0a:91:
                    68:7b:e3:24:77:8c:82:77:67:24:79:d0:88:a2:f2:
                    85:ca:e6:3f:29:cc:11:ef:d5:c0:bf:4c:81:18:93:
                    d5:8e:74:81:ad:01:66:48:41:54:18:04:67:17:d6:
                    4e:8d:93:5c:cf:29:05:b9:2d:2a:48:50:89:1c:40:
                    45:49:1c:14:7c:ad:98:9e:65:70:c6:f9:6b:a5:e3:
                    f4:82:e4:36:f4:10:11:74:73:8b:a3:f0:c3:95:a0:
                    f3:3f:fd:65:34:33:05:e8:d3:bb:44:38:53:7a:27:
                    4a:53:64:75:9f:d2:55:6a:65:f7:7a:08:6e:16:12:
                    ea:65:0f:d1:9a:49:2e:a1:1a:0d:ce:72:d1:01:db:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:32:3F:38:F6:97:AB:73:53:9A:21:D8:0D:30:62:8E:1C:47:16
            X509v3 Authority Key Identifier:
                keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:7b:93:ee:c5:6b:7f:12:f8:d5:e3:61:5c:fa:7c:33:1a:
         70:43:bb:76:55:06:0c:4d:28:34:e8:5d:30:15:8d:03:19:4a:
         63:90:42:8a:e9:9f:33:8d:b1:2f:25:d0:32:73:10:85:d1:38:
         4d:e4:42:f0:dd:2f:15:4a:14:fa:f9:21:c7:91:87:08:71:9a:
         46:ed:41:73:a4:35:e7:94:c6:59:55:9b:1d:a0:43:1d:79:f2:
         f5:c4:ba:af:8f:1f:f7:4a:ce:23:9f:9d:e1:8b:3d:ce:59:63:
         8a:fa:ff:63:e9:a6:ae:24:37:03:86:fe:7c:98:ca:17:1b:70:
         48:34:2b:b1:da:a7:dd:50:25:6e:0d:cd:a5:7f:73:e1:b5:e0:
         23:10:24:d7:d6:12:0b:b4:e1:00:50:7b:6f:57:07:74:d2:36:
         b7:4e:d8:25:a2:08:90:98:96:8c:d8:bd:e2:9d:92:54:ca:d0:
         bd:6e:29:87:9c:fe:a3:a7:69:8d:66:8c:48:d2:01:37:91:65:
         ed:a9:20:ff:01:68:d0:34:15:93:84:53:4f:99:69:1b:d9:66:
         6b:76:45:d7:83:62:7a:be:8d:32:11:88:a3:de:10:e1:43:08:
         e7:a5:56:7a:38:81:64:72:a9:9f:d8:08:70:e5:6b:0f:35:cf:
         cc:c2:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:18 2024 by rpki-client on console-ams.rpki-client.org