Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
File:                     D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json)
Hash identifier:          R9sCIhU4Lwoh4UqdOs01L6Nt3EFQo0d7eOmBMd6vyg0=
Subject key identifier:   FC:F1:84:0C:59:04:D3:88:C2:4D:B6:8B:F2:DE:03:0E:D2:EC:E2:85
Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
Certificate issuer:       /CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Certificate serial:       4564F84C2ED560CB7A86BC0D59775E478F79711F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
Manifest number:          FA
Signing time:             Sat 18 May 2024 07:51:28 +0000
Manifest this update:     Sat 18 May 2024 07:46:28 +0000
Manifest next update:     Tue 21 May 2024 10:04:28 +0000
Files and hashes:         1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 7IAJ0UUfzB9iJU+hgupCBNVeZ1fOHZWXtMD11Cq995I=)
                          2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: UXO1pV2HhhGxz6QQRohymcRThUm2SvdDSp5wZf4SUOU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl
                          rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 10:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:f8:4c:2e:d5:60:cb:7a:86:bc:0d:59:77:5e:47:8f:79:71:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929
        Validity
            Not Before: May 18 07:46:28 2024 GMT
            Not After : May 21 10:04:28 2024 GMT
        Subject: CN=FCF1840C5904D388C24DB68BF2DE030ED2ECE285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:00:df:01:b5:1d:08:30:d7:d3:ce:d7:46:9d:
                    58:64:c5:f9:c6:20:bd:29:93:9b:df:f9:5d:9c:c1:
                    53:f2:5d:da:f1:d5:bd:04:74:5b:d6:bc:ed:6d:ff:
                    58:20:13:33:0a:ce:19:41:c6:91:02:c1:be:50:cb:
                    11:ee:dd:7a:30:b9:41:af:25:7f:ee:10:56:46:63:
                    c8:50:09:2a:b8:b5:83:f6:47:42:21:2e:7f:82:82:
                    f0:f1:2c:07:ef:8a:cc:52:b9:10:e2:4f:80:24:0d:
                    1d:a7:6e:ad:4d:8e:d4:67:10:c0:f1:de:51:3f:6e:
                    3e:32:a6:b2:e1:bc:0b:52:75:ab:3c:c6:0e:91:7a:
                    10:54:45:5f:8f:4d:d6:b1:f2:f2:59:da:b6:61:6c:
                    c2:fd:69:1e:e8:88:17:be:64:8c:f4:25:cc:75:55:
                    e3:a6:a5:4d:c6:3a:c1:d9:66:88:5e:ef:45:25:28:
                    75:8d:be:a9:1d:c9:b2:34:17:13:4b:9b:24:d3:08:
                    00:ab:49:20:75:0e:68:55:f6:51:81:f3:af:f8:74:
                    c7:97:09:e0:f6:a9:5c:0a:28:0c:b2:50:ef:21:22:
                    72:ae:77:bf:80:45:0f:d2:1b:1b:d0:59:94:3e:69:
                    5b:16:83:f9:99:89:6a:8b:4d:63:05:29:ee:0d:3a:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:84:0C:59:04:D3:88:C2:4D:B6:8B:F2:DE:03:0E:D2:EC:E2:85
            X509v3 Authority Key Identifier:
                keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:ad:cc:c1:d0:2d:55:f7:70:e8:b5:99:e7:60:76:91:5d:
         97:68:17:bc:67:7f:d5:5f:d3:7d:07:a7:62:50:e2:6e:5e:09:
         45:7b:b7:8a:a6:49:f1:6c:90:44:84:ef:58:37:3a:ff:26:98:
         23:b2:6f:c4:e8:18:f1:93:c5:76:7f:93:1a:d1:7d:5e:8b:91:
         0c:7d:75:17:bf:ee:4e:82:01:10:b9:e8:ff:53:3c:4c:c8:d1:
         73:d9:6d:8f:4d:69:ed:1c:b8:83:ad:e1:dd:a7:19:fb:7c:c0:
         f1:f6:f6:6e:a6:27:61:9c:eb:ba:8e:92:66:67:68:96:bd:a5:
         0f:86:1f:b0:98:37:15:68:d6:52:49:79:ae:c8:8b:59:68:9e:
         7d:30:6b:f8:27:34:01:a0:c6:5d:27:19:12:ed:db:43:5b:6b:
         25:1a:d1:d4:d0:be:39:69:88:5f:ce:4d:38:af:0b:9c:36:0d:
         6d:02:68:21:ef:7f:76:e3:36:2f:c7:f0:92:ae:6b:7d:7b:0f:
         76:9c:c7:b3:f0:30:8a:f1:b0:fc:9c:c8:1f:d2:6d:19:a7:9f:
         44:44:05:ad:ce:c0:b6:bf:05:d8:62:cd:41:bf:7c:aa:c6:e6:
         3b:0d:35:de:0b:78:c8:8f:60:f8:4f:bf:d6:a2:7c:58:d4:5a:
         1f:6b:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:29:49 2024 by rpki-client on console-ams.rpki-client.org