Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
File:                     D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json)
Hash identifier:          afF9xWWE9jjXVowu0nHqaHgAxCSQMUq4Dk4shOP3FsY=
Subject key identifier:   F3:0F:31:B9:47:F4:AB:9E:F0:C8:A6:36:A6:10:B1:FC:1E:76:BB:32
Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B
Certificate issuer:       /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
Certificate serial:       55AB8B52B918344895F20DCDA892F789BEC7FAF9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
Manifest number:          1D
Signing time:             Thu 30 May 2024 22:42:04 +0000
Manifest this update:     Thu 30 May 2024 22:37:04 +0000
Manifest next update:     Mon 03 Jun 2024 02:09:04 +0000
Files and hashes:         1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: JWCnrbnN26iSUpXDTPvbA5jZVTR8ZTFiUpK3shd3eUA=)
                          2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: EAQk+V5nLcNUlpWhn8htyLisfQThT4reULR8xOI8NGA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl
                          rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 09:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:8b:52:b9:18:34:48:95:f2:0d:cd:a8:92:f7:89:be:c7:fa:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
        Validity
            Not Before: May 30 22:37:04 2024 GMT
            Not After : Jun  3 02:09:04 2024 GMT
        Subject: CN=F30F31B947F4AB9EF0C8A636A610B1FC1E76BB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:ef:e3:6b:bf:d3:27:69:4e:ab:7e:c1:c7:
                    eb:9b:dc:63:0e:91:7e:64:fc:bf:55:f0:e2:65:df:
                    ac:56:b4:5a:4a:3c:ab:cc:90:11:ca:fd:1a:20:70:
                    e8:c0:7b:6d:fd:db:83:40:06:75:78:0d:e9:f1:43:
                    97:d4:90:4e:d0:8e:20:0d:10:73:d4:32:80:1f:88:
                    b9:0c:3f:7b:03:d5:ed:0a:0d:10:15:c6:61:05:c8:
                    9d:94:fb:21:13:b8:f8:ca:d2:d1:14:57:c3:0a:29:
                    ff:0e:cd:c4:69:b7:68:9c:b7:38:c9:b0:d6:6f:3e:
                    98:f7:40:a6:fa:7d:2d:50:b4:4e:64:db:51:bb:ac:
                    f4:45:ef:2d:c1:23:ed:47:37:45:aa:56:79:15:90:
                    31:e1:f3:0c:75:fe:f0:b0:d5:da:08:63:a7:a0:f2:
                    b4:45:e9:4a:60:31:e7:d3:52:4b:07:28:61:33:18:
                    b2:a2:0a:46:d7:42:43:9a:bf:50:be:0c:0f:89:52:
                    51:5d:00:25:b9:56:f3:7b:68:44:63:4e:43:67:87:
                    c3:6e:f5:b8:4a:d0:ec:19:ab:7a:9d:75:10:f4:b3:
                    44:c5:4e:26:98:85:f1:d8:6c:10:80:cb:aa:5b:44:
                    16:ae:ae:da:39:a0:a1:19:c0:cd:01:06:e6:83:44:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0F:31:B9:47:F4:AB:9E:F0:C8:A6:36:A6:10:B1:FC:1E:76:BB:32
            X509v3 Authority Key Identifier:
                keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:11:c3:47:7c:cc:07:fc:1c:e3:ee:74:2d:0f:12:0c:2c:
         be:fd:30:fa:df:f7:c2:13:62:06:0e:d4:9e:ac:25:ba:2b:e4:
         8c:ec:c1:79:3f:7e:ec:72:19:9c:fe:ca:76:2d:1d:49:f0:09:
         b3:65:02:23:71:97:37:4e:2e:9f:65:54:5a:2b:7a:94:2a:e3:
         e0:1e:26:c9:c3:6e:4e:cd:0d:ed:13:da:3d:e2:5a:fc:12:53:
         8b:91:69:da:25:29:74:4a:5a:19:94:ff:38:6a:13:b3:44:e6:
         d5:a5:1f:10:9d:b9:d6:dc:e6:57:a4:63:2b:34:0a:6e:67:cb:
         c0:ba:33:f8:a1:ab:23:c0:18:00:a7:ec:50:ed:a3:c6:9e:8b:
         8b:64:33:78:4a:bb:4b:83:3c:c2:03:cf:dc:bb:1d:9c:11:70:
         12:90:f9:96:0b:d5:4c:fc:22:ee:5c:49:0b:24:fe:b8:ea:3c:
         ec:fe:8d:4f:a1:91:3d:da:8c:f2:38:3c:89:83:2c:46:8e:30:
         a0:e4:ec:8d:f0:34:77:6a:d0:7a:a4:70:82:71:d5:ca:eb:96:
         03:ce:93:b5:7c:9c:ec:99:63:7a:00:37:7d:de:72:7b:66:7b:
         6f:35:0a:04:06:45:67:8a:85:51:8b:86:6f:bf:93:d8:d0:b6:
         bb:22:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 23:27:49 2024 by rpki-client on console-ams.rpki-client.org