Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
File:                     A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json)
Hash identifier:          t2jvaz1fOeK35lgpM/dOqH5cs33lxZ2/rlpi2gCz2ZY=
Subject key identifier:   39:4F:9A:6F:F3:5B:91:22:40:D4:7F:DF:EC:7E:C5:26:CD:9D:43:1E
Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34
Certificate issuer:       /CN=A708865394D992A01D1736F0AB500E24889B7F34
Certificate serial:       0BD8EBC808979CCD8357B1067856FEBCC72BF2A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
Manifest number:          86
Signing time:             Thu 16 May 2024 20:30:43 +0000
Manifest this update:     Thu 16 May 2024 20:25:43 +0000
Manifest next update:     Mon 20 May 2024 07:48:43 +0000
Files and hashes:         1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: X0dSvVUFpvoTEJLkiJMtZxx/fnKzmsLIEVo2Re986lw=)
                          2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: dWVhu3+vPZ2NW6v0Vt/BSCH55EDFqdIeYF6myGQwAls=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl
                          rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d8:eb:c8:08:97:9c:cd:83:57:b1:06:78:56:fe:bc:c7:2b:f2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34
        Validity
            Not Before: May 16 20:25:43 2024 GMT
            Not After : May 20 07:48:43 2024 GMT
        Subject: CN=394F9A6FF35B912240D47FDFEC7EC526CD9D431E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:aa:f8:e6:10:1b:d7:18:eb:8b:cd:46:7d:
                    3e:59:5d:ce:4d:0f:d0:04:2e:97:ea:46:12:22:81:
                    db:6e:dc:b9:59:83:70:2b:89:6e:32:26:5d:34:34:
                    49:88:e3:1d:cc:b7:88:05:98:a0:ce:bd:1f:08:34:
                    72:0b:80:27:48:59:55:df:11:87:18:80:96:f5:cc:
                    5f:e4:86:e1:be:66:db:8d:94:fd:2d:8f:f3:d0:dc:
                    e4:71:db:8b:68:16:89:9e:83:99:94:80:68:68:b1:
                    e4:b9:85:97:c3:3b:14:d8:c2:fe:d7:10:d3:59:99:
                    26:90:56:25:f8:fa:2f:bc:66:c2:11:f1:73:0b:ad:
                    de:80:d2:6a:d2:e1:4e:61:f9:c6:89:3d:b5:e8:de:
                    1a:53:2f:4b:26:b7:ab:46:44:74:e3:50:d7:25:a9:
                    cd:84:f3:dd:55:8d:6c:66:50:3b:f9:f1:6b:95:f1:
                    0d:c4:09:a3:ce:fa:37:aa:af:e0:c9:5e:0f:c3:d5:
                    ce:6b:af:5d:fe:38:fe:a4:58:eb:41:c0:9d:6c:52:
                    cb:6b:68:a7:15:d3:bc:16:f2:76:f3:5d:6e:74:76:
                    08:c6:61:94:d1:da:1e:dd:7f:7e:12:fa:07:0c:fb:
                    3a:a6:a4:7b:23:94:a1:07:dc:2b:b3:0e:a7:3e:05:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4F:9A:6F:F3:5B:91:22:40:D4:7F:DF:EC:7E:C5:26:CD:9D:43:1E
            X509v3 Authority Key Identifier:
                keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:af:b1:44:c8:36:8b:8d:f7:05:ef:0f:48:3b:57:14:f5:57:
         5d:4f:f8:44:ea:2a:43:d8:f8:27:c2:b6:43:85:59:79:9a:5c:
         fa:44:28:55:02:6a:41:9e:be:b7:68:65:7b:fe:4f:eb:90:86:
         18:53:20:d2:13:c4:ba:f6:7a:80:5f:04:b3:2a:19:30:1a:cc:
         4e:a2:cf:2f:fb:dc:4e:af:44:1f:34:32:2b:3c:bf:b1:4c:74:
         bc:76:77:7d:1d:ac:04:ed:eb:8e:6d:8e:5f:49:c4:ca:8f:c6:
         71:92:ac:85:ba:a9:b8:0f:68:34:37:f3:00:50:a1:7d:c2:e2:
         89:20:d9:ad:c8:4d:ec:6b:14:7e:a4:16:32:0a:e3:55:46:58:
         1b:65:c9:32:1e:79:ee:3d:45:8f:25:86:95:63:d8:05:8e:72:
         31:fa:87:0c:41:63:05:dc:e1:92:bb:57:ad:da:db:f8:4a:fb:
         e9:c3:3f:b7:e5:ff:d7:a2:b9:c6:46:2a:4a:1a:84:aa:d8:bb:
         51:e0:69:cb:a8:0d:88:eb:27:1d:b1:71:40:b3:cb:84:69:46:
         e2:0e:5b:51:05:1e:f5:cd:0d:7b:98:7b:4c:3b:2f:87:4b:ab:
         30:06:dd:ca:9e:4c:8d:bf:9f:b6:44:43:f7:af:48:3b:a3:aa:
         7d:54:bc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:37 2024 by rpki-client on console-fra.rpki-client.org