Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
File:                     E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json)
Hash identifier:          PCYXruB4Xj43dLixENBX9P88uByoovBRTeKXgHdPeLo=
Subject key identifier:   03:B7:0D:9F:F9:51:ED:70:75:B5:7D:D7:B9:82:87:2D:C1:A8:AB:56
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       4B0B2706C6E797544E29AF5EB17390E6CBDE99F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
Manifest number:          01F4
Signing time:             Sat 18 May 2024 08:02:02 +0000
Manifest this update:     Sat 18 May 2024 07:57:02 +0000
Manifest next update:     Tue 21 May 2024 11:41:02 +0000
Files and hashes:         1: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: QAsOB8cWTmsKK7uYS0UDPhclfWIxh6TtnFLoPMaKgyQ=)
                          2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: pP4yZjmOpNXizyT/Y80dGxj1moGP/LM6FFg0R2XLfcw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 11:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0b:27:06:c6:e7:97:54:4e:29:af:5e:b1:73:90:e6:cb:de:99:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: May 18 07:57:02 2024 GMT
            Not After : May 21 11:41:02 2024 GMT
        Subject: CN=03B70D9FF951ED7075B57DD7B982872DC1A8AB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:0b:4d:08:31:ee:e0:47:c4:48:a4:a5:22:
                    cd:0c:61:5a:0e:92:9d:47:9a:99:ae:60:ba:cf:d7:
                    af:59:51:ba:3e:36:83:0f:5b:b5:6a:13:e7:9a:e4:
                    d5:81:b7:59:cf:69:53:53:48:02:99:88:96:bd:dc:
                    a3:66:0a:c3:e7:b9:4c:e3:70:cd:52:8e:98:37:1e:
                    b7:f0:c1:58:57:ea:24:0f:37:c3:d8:8c:eb:98:02:
                    0a:af:1b:30:b9:46:aa:c7:bd:5c:49:80:91:fb:91:
                    17:e9:b4:05:bd:44:11:ca:b4:74:95:ce:a1:8b:a1:
                    bd:00:89:86:15:00:89:44:ae:82:36:c4:51:bc:a1:
                    58:3f:16:ac:ce:81:e0:78:65:76:bd:d6:db:cd:d5:
                    64:de:d1:c1:bb:b5:19:ca:26:9d:db:d1:a3:df:35:
                    46:7c:17:00:5b:bc:34:d0:78:8c:f5:1d:b3:e3:1f:
                    65:4e:c8:0c:49:52:ea:02:ef:89:5e:30:ef:6a:c0:
                    b4:df:52:09:41:9c:16:49:1b:f0:07:50:61:78:24:
                    c1:85:21:11:20:ea:6c:72:22:19:1a:c5:b9:5a:ea:
                    69:fc:cf:93:7f:9f:95:61:e8:0c:d7:8b:4b:cc:c9:
                    da:a1:c0:00:76:54:eb:39:2c:16:71:18:65:df:29:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:0D:9F:F9:51:ED:70:75:B5:7D:D7:B9:82:87:2D:C1:A8:AB:56
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:7e:f5:f5:62:59:55:62:b6:00:a4:72:b0:ec:a2:41:6a:
         5e:34:29:76:b7:3f:ca:4d:1e:b0:2a:04:7d:24:6f:89:81:a5:
         e2:0a:41:f5:b3:58:21:e3:d6:4e:04:d5:1d:08:01:93:65:40:
         4d:12:87:80:f9:df:68:06:9e:96:32:c6:af:b0:f1:d5:23:1d:
         04:e7:49:34:77:fa:62:9c:4d:fa:22:8c:6c:69:c3:00:5f:cb:
         fd:98:ac:eb:01:4a:01:25:10:18:e5:8d:5c:ed:50:5a:ab:f2:
         e6:bc:ed:3c:b2:00:aa:73:77:ca:1b:2d:0f:02:7c:5b:c1:45:
         56:6b:01:4b:b6:42:c3:39:e1:66:8f:2c:56:2f:aa:87:9f:e0:
         a4:08:99:9f:d0:0e:05:35:cc:66:d7:76:0d:4b:fe:34:26:75:
         e6:d4:da:8b:e2:00:c1:09:36:e1:4b:4b:b9:ff:aa:11:62:3b:
         9f:4d:5a:dd:f8:ac:2f:c9:a1:ce:c2:17:3b:4e:12:fa:2b:95:
         c7:8c:1a:05:2c:21:77:8a:e4:69:9f:b4:bd:4a:c9:f4:4a:6c:
         cf:6a:12:f1:71:a7:f2:0b:38:58:72:45:35:09:2b:14:d0:3e:
         ee:f5:8f:1b:6d:c0:d2:4d:c4:aa:32:f7:e6:2d:83:f8:73:ab:
         15:d8:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:46:49 2024 by rpki-client on console-fra.rpki-client.org