Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
File:                     02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json)
Hash identifier:          Hexl9qq3Xph+Ap3CFVWVaauBoj2T1XAQPTO6dniKAKc=
Subject key identifier:   BE:66:D2:5E:F3:26:81:49:11:4C:CC:44:55:1A:16:4A:99:C6:74:35
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       3E773607D5BF336619E7E5935BF6FCCA21A00AA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
Manifest number:          0436
Signing time:             Mon 27 May 2024 18:00:39 +0000
Manifest this update:     Mon 27 May 2024 17:55:39 +0000
Manifest next update:     Thu 30 May 2024 19:45:39 +0000
Files and hashes:         1: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: kPetak0oa7CoPtOUMOQ1lR+1Xty+xt04wCPOf9zMDGw=)
                          2: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: zCDYtx4nO+vnSQJs7Aa7NWUL82lgaLrX4+41XT+5KM0=)
                          3: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: INgJ7mkrFQKiOoETYiK28g92CvbuSbKooqmQKrfwk/U=)
                          4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: HNdjq/16Cg7RnF2QvlrZEOzSfemi6JKWooVM4wdQ/uY=)
                          5: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: i0triinOFo57r21W0KMGJe02D4RojFS13zmyllLuDS4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 19:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:77:36:07:d5:bf:33:66:19:e7:e5:93:5b:f6:fc:ca:21:a0:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: May 27 17:55:39 2024 GMT
            Not After : May 30 19:45:39 2024 GMT
        Subject: CN=BE66D25EF3268149114CCC44551A164A99C67435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dc:bd:50:5d:cd:38:88:4d:4c:15:7a:3e:7f:
                    10:2e:5b:93:65:20:5d:59:f1:73:05:9f:a3:a1:d2:
                    28:29:e5:49:84:4a:51:15:86:d5:b0:7a:60:dc:02:
                    d8:51:7c:dd:02:e7:23:82:cb:27:4c:a4:d8:bb:a2:
                    23:82:a9:cd:cd:9c:89:be:e1:8d:80:f8:01:61:99:
                    ee:99:50:7d:b3:9a:85:c3:ef:63:3f:d7:24:18:67:
                    53:65:7b:fb:28:a1:cd:d0:b4:2b:22:fc:59:f7:d4:
                    21:2f:ca:ab:06:e5:25:ae:24:33:36:d4:cb:ed:3f:
                    00:41:2c:ba:18:e9:88:0b:6a:9c:e6:7a:db:1f:fd:
                    52:f9:d3:73:46:38:f2:6f:d8:28:18:78:2e:8c:97:
                    c5:94:22:9c:95:70:5e:65:d7:56:1e:4b:1d:8f:02:
                    88:42:c2:eb:38:33:40:31:13:15:ce:0f:34:66:0d:
                    85:ef:96:59:67:68:b2:db:99:f9:c1:08:79:e9:d2:
                    1f:12:d7:e5:e9:c8:39:73:0e:6b:11:48:6a:e7:ef:
                    78:3f:d8:07:6e:79:ff:75:99:06:8f:8e:3a:e6:33:
                    92:de:5e:c3:8f:eb:6b:6c:9b:fb:c3:5e:10:aa:c2:
                    84:b1:4f:fb:fd:7f:7f:ea:48:10:54:b4:4c:b2:aa:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:D2:5E:F3:26:81:49:11:4C:CC:44:55:1A:16:4A:99:C6:74:35
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:2e:e8:64:9e:4c:8b:d9:99:a4:b8:96:e4:18:f7:79:a2:
         3e:ce:e3:3c:70:36:1b:76:5a:27:13:e3:d5:3e:d4:71:e6:66:
         d0:ef:74:c9:ca:ad:d8:7b:5b:b7:06:6b:cf:6c:55:e8:5e:99:
         75:cf:37:7d:c7:e7:62:a2:70:dc:1c:15:63:60:c2:fe:d9:bb:
         0e:fa:31:11:a9:f9:ea:0d:f4:d9:10:ca:bd:c8:03:84:de:6e:
         1d:52:23:93:f3:63:5f:88:e2:bb:35:34:57:43:63:68:57:7d:
         36:cb:96:f6:bd:25:7b:b0:4d:d1:71:e9:93:84:ce:f7:fc:0d:
         a7:8b:38:aa:11:d8:6a:1c:d6:55:b7:81:13:a7:92:10:34:66:
         40:6d:46:85:25:17:a0:fc:71:f2:5a:36:07:ab:8f:7e:ea:07:
         6e:1c:ee:f7:60:85:b0:83:4a:9a:6d:b8:b7:92:91:a5:35:70:
         e0:4e:55:55:76:bf:36:b7:dd:99:23:d3:5a:c5:fc:b3:df:fb:
         ef:9f:19:80:36:d2:a3:df:07:45:26:78:35:4a:87:52:08:f5:
         5b:1b:5d:eb:61:9a:58:a3:2a:d5:22:37:e5:72:70:8d:3a:aa:
         ec:25:5c:23:29:68:d8:26:1e:b1:37:35:ba:5b:77:e7:68:f8:
         a7:5f:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:32:52 2024 by rpki-client on console-fra.rpki-client.org