Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
File:                     08435803278DC5796EE67697996454D656195D4C.mft (raw, json)
Hash identifier:          e1f3SVZpkPCvv6sSNFdaq7ZATJ6x7dpdn0kiNuedoO0=
Subject key identifier:   BF:C6:7A:EA:EB:FD:CB:03:95:F9:7E:C9:EF:7B:AB:34:9B:DA:B1:0B
Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C
Certificate issuer:       /CN=08435803278DC5796EE67697996454D656195D4C
Certificate serial:       658F3CC45023B1046ED864E1AF126C68454FD392
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
Manifest number:          1D
Signing time:             Thu 16 May 2024 14:30:39 +0000
Manifest this update:     Thu 16 May 2024 14:25:39 +0000
Manifest next update:     Sun 19 May 2024 15:40:39 +0000
Files and hashes:         1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: wiRxcPe4GfEbjgK/5kbeuDZCueaBIhkX2z+dtn05PUg=)
                          2: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: EsdKY6DIJD/GOkvFDL0LPLouzJj6b3iPsPXhNlP6S4M=)
                          3: 08435803278DC5796EE67697996454D656195D4C.crl (hash: BPun2jQJXgYMyzXh08J66kF4iLyAdcDVX1IBWX8NBFk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl
                          rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 15:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8f:3c:c4:50:23:b1:04:6e:d8:64:e1:af:12:6c:68:45:4f:d3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08435803278DC5796EE67697996454D656195D4C
        Validity
            Not Before: May 16 14:25:39 2024 GMT
            Not After : May 19 15:40:39 2024 GMT
        Subject: CN=BFC67AEAEBFDCB0395F97EC9EF7BAB349BDAB10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:74:52:78:dc:d2:4b:2b:8c:c1:4d:4e:d1:
                    5e:4d:f2:44:b4:56:56:90:72:a0:cc:b7:2d:2b:72:
                    51:96:c9:5e:d5:9c:62:51:ca:4f:1b:5f:a7:d7:29:
                    e7:2a:52:1a:ab:4e:60:f4:9c:aa:5a:92:2d:4a:f8:
                    b3:72:fc:1e:95:07:c1:ff:ea:a1:61:ec:f5:b6:5e:
                    7c:3d:e5:4a:53:48:3b:9f:68:3d:35:75:9f:b7:5b:
                    82:59:ea:a9:b9:60:08:7e:b0:5b:ca:a3:49:6a:99:
                    39:ad:d2:8d:eb:c2:83:a1:c7:23:73:68:a0:0d:7b:
                    ed:36:04:b0:d0:0e:f5:ea:91:3e:a0:f3:1f:b0:86:
                    d1:a7:fd:fb:25:32:66:3c:7d:2a:71:cc:47:02:0f:
                    ff:b2:72:39:1f:49:e0:a0:6a:70:0b:42:59:0e:68:
                    63:02:dd:78:dd:83:84:40:18:be:e1:dd:9d:e5:cf:
                    05:27:8f:73:d1:20:06:41:a1:6f:9f:95:18:d6:ea:
                    85:6f:86:d2:3d:d7:8d:ef:56:0a:06:77:aa:63:4f:
                    14:e6:f0:33:2c:b6:24:c5:44:ee:24:ef:2c:40:26:
                    a2:ed:e8:9e:ef:15:22:5d:25:3a:81:3d:4e:99:cc:
                    1d:47:05:bd:ad:e6:72:b3:d9:ed:2a:67:ee:b7:65:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:7A:EA:EB:FD:CB:03:95:F9:7E:C9:EF:7B:AB:34:9B:DA:B1:0B
            X509v3 Authority Key Identifier:
                keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:e1:36:c0:c5:b3:e2:e4:8c:d7:0d:b5:c8:98:2e:ed:fb:
         8b:73:af:1a:5f:46:1a:dc:58:13:a8:ff:26:c3:07:af:d0:ce:
         be:c8:fc:af:26:7c:ad:9a:4b:a2:2b:e8:1d:9a:d0:97:8e:52:
         e3:56:45:10:6f:ba:a5:02:57:f6:c0:1c:8e:46:df:3f:4a:1a:
         6d:a5:b1:3e:89:84:9f:84:90:ad:f0:82:98:d3:2c:ae:9a:f6:
         0d:10:fd:b7:db:b7:fa:59:fd:3b:a6:08:9a:96:49:65:24:19:
         90:02:a0:9f:d4:d8:c3:fd:c2:a1:ac:bc:24:d1:8a:da:b2:8b:
         60:53:6f:9e:55:bc:d0:b7:77:97:f1:12:60:a5:30:e6:a9:83:
         09:5c:79:32:8c:ba:20:1b:d0:a4:f5:8e:2b:aa:fc:c8:04:f2:
         86:bf:d8:f8:1d:54:34:ed:1e:8c:52:d1:fb:10:a3:4c:30:8f:
         7d:e0:ff:70:c4:5c:af:62:12:0d:70:d7:8e:6b:7f:dc:64:20:
         df:b5:b4:dd:05:8e:8c:ea:42:df:cb:d5:ed:1d:4d:9e:bd:e5:
         9d:23:3b:7c:7e:91:bd:8a:7e:c2:21:22:12:f2:c7:c7:ae:e3:
         6c:24:c1:e8:fb:2c:e4:72:eb:9c:0c:e1:96:69:dc:5b:1c:17:
         0c:a4:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:20:31 2024 by rpki-client on console-ams.rpki-client.org