Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
File:                     3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json)
Hash identifier:          K+foEX0At9GU5Ub7YmD9ogrB2CHzbbTOxgSNAWFcgtg=
Subject key identifier:   51:5E:8F:F3:1D:B7:E0:18:FF:4A:0B:AD:17:8E:B3:E6:12:A8:9D:7D
Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36
Certificate issuer:       /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
Certificate serial:       21C2A55D9B57B7D7382F4B9CB7A090CAC00E3858
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
Manifest number:          02DD
Signing time:             Thu 16 May 2024 20:31:57 +0000
Manifest this update:     Thu 16 May 2024 20:26:57 +0000
Manifest next update:     Mon 20 May 2024 00:06:57 +0000
Files and hashes:         1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: 30S0JtpEKgdt/uAgAM495KNII+/wIqtPwmU7oqsku6M=)
                          2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: 80laUKbHRP3IfKVKAgrf2tfpKFyvkuqqHX9DTuwzwhQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl
                          rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 00:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:a5:5d:9b:57:b7:d7:38:2f:4b:9c:b7:a0:90:ca:c0:0e:38:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
        Validity
            Not Before: May 16 20:26:57 2024 GMT
            Not After : May 20 00:06:57 2024 GMT
        Subject: CN=515E8FF31DB7E018FF4A0BAD178EB3E612A89D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:1d:36:cc:cb:ad:68:8a:14:de:3c:d7:fc:
                    ab:ba:98:16:b5:8c:7e:e7:bc:b3:99:e9:b6:d8:80:
                    66:f3:ee:ec:c3:5f:5e:fd:b4:0c:91:a4:77:db:15:
                    96:0c:5f:8e:62:25:0c:b2:e2:c6:64:02:c0:45:4e:
                    cf:ab:2a:1d:61:3e:b7:fd:99:8e:30:30:0c:cc:90:
                    1e:16:5d:9b:74:a8:d6:0f:1a:c6:2b:ef:bf:17:72:
                    19:f7:1a:90:0c:7d:2c:cd:10:f7:bc:81:e7:40:ab:
                    29:a7:2c:8b:4a:79:80:d6:82:21:ed:89:15:90:22:
                    8b:c1:1b:22:9c:94:69:e1:17:a6:ab:36:3d:60:5d:
                    d6:4a:47:47:ee:34:27:96:9d:56:f6:61:5b:b6:d9:
                    1b:22:95:76:39:82:c3:4b:de:e3:58:23:fe:a5:20:
                    9b:ef:b9:97:58:43:9f:a8:b4:af:08:33:2e:c8:98:
                    b6:8e:1f:b7:9e:65:a6:a9:d1:d2:76:83:7f:6a:a3:
                    32:1a:f4:16:ea:54:ff:77:d6:de:f6:29:76:aa:92:
                    f6:a3:81:1e:76:2a:bf:2c:ee:b7:41:52:6d:68:92:
                    01:c9:e3:e3:0f:52:30:6a:17:a6:bc:c5:34:20:9d:
                    9e:c9:53:52:5d:65:b0:5c:74:7d:c7:26:d2:e5:e1:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:8F:F3:1D:B7:E0:18:FF:4A:0B:AD:17:8E:B3:E6:12:A8:9D:7D
            X509v3 Authority Key Identifier:
                keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:d6:a8:3d:2b:6c:ea:98:98:6c:32:29:3a:de:74:0a:06:
         b7:81:c6:e0:17:5e:72:42:b6:36:03:00:7e:70:e3:68:f6:4e:
         97:d9:89:1b:a3:3f:cd:92:ac:29:1e:00:92:39:1f:d3:31:bf:
         8d:07:e2:b0:3d:6f:30:fb:66:c5:4d:bc:e5:ef:01:7d:f2:18:
         b6:0f:13:b4:60:a1:18:d0:bf:8e:f6:47:bc:08:cc:c7:9a:f2:
         68:f4:ed:70:6c:bc:86:a1:ed:ed:77:c7:51:5d:f2:d5:5c:4f:
         f3:6e:60:61:39:7c:52:23:fd:b5:f9:67:04:4f:44:8a:fa:bd:
         3b:78:8f:b0:16:a5:cd:80:e2:fc:38:40:12:a4:92:ed:14:76:
         14:b1:b2:73:6e:a1:ba:a8:49:3d:1c:a2:99:cd:35:38:13:04:
         73:81:17:fd:f6:80:21:d0:70:e0:8f:20:2c:b9:c8:1d:ef:c2:
         77:5b:d9:5b:32:b6:db:d3:8e:2f:2e:d1:31:1c:c9:c3:d1:07:
         62:1e:ec:93:ca:8f:cc:02:ba:92:20:38:76:ae:8c:84:23:d1:
         27:27:0e:63:67:80:ee:eb:8b:85:75:a9:b3:9d:8f:e1:01:64:
         39:6e:3e:14:fb:87:19:80:88:f7:22:b7:20:9a:5c:40:ba:ed:
         bf:f9:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:38 2024 by rpki-client on console-fra.rpki-client.org