Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
File:                     6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json)
Hash identifier:          TYz2s/oavs/3BNYi7JDFsG8YAuJt/ycc4S6+GABL7vg=
Subject key identifier:   7C:23:46:B3:B2:35:43:09:B3:7F:0D:97:EB:2B:10:43:C2:FE:BA:CD
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Certificate issuer:       /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial:       4727E6D5DACA6902584BAAF79C5B51CC40F81B28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
Manifest number:          0132
Signing time:             Sun 19 May 2024 18:30:02 +0000
Manifest this update:     Sun 19 May 2024 18:25:02 +0000
Manifest next update:     Thu 23 May 2024 02:07:02 +0000
Files and hashes:         1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: 1RMT6G7QnsJcXCeoX41dd9HXbMd1FoTOfa/tEvmM6xo=)
                          2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: jKU5gtVU219lnceaTucZefwhfrwPqEuRsJNHBd5zgSY=)
                          3: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: xVOwIPvBQ0n872k/gfDVvNmh+7kWsfCWp3uf32P6Pv0=)
                          4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: /3wCFapnVpH0Y4MIHmUUYprA5/JAj8UHGYndn+P2Mac=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
                          rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:27:e6:d5:da:ca:69:02:58:4b:aa:f7:9c:5b:51:cc:40:f8:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
        Validity
            Not Before: May 19 18:25:02 2024 GMT
            Not After : May 23 02:07:02 2024 GMT
        Subject: CN=7C2346B3B2354309B37F0D97EB2B1043C2FEBACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:89:c6:e6:19:f7:2f:09:34:cd:b2:68:23:
                    11:b9:84:a3:43:5a:b1:af:a6:fb:0a:73:80:77:5e:
                    a9:ad:3e:b3:bc:f8:18:34:0e:6a:d5:00:21:9f:36:
                    ac:62:cd:38:2e:7f:8c:b8:0b:a4:fd:32:5e:e2:b2:
                    6d:57:e2:09:70:5e:11:73:c3:01:51:1b:27:6b:12:
                    56:5e:d8:72:06:e1:99:99:bb:8a:08:d9:e6:52:ba:
                    60:f5:1e:1a:32:6a:d7:be:4a:66:61:1b:5a:26:dd:
                    7d:e4:e0:7b:12:91:05:67:2f:ab:3b:3c:36:41:b4:
                    a4:5b:24:64:0a:17:33:38:42:68:4b:7b:92:0f:4f:
                    55:ab:dc:d2:ac:f8:64:b8:88:9c:c0:c0:c1:e0:1b:
                    e1:ab:3a:15:da:47:01:93:fa:ec:9c:69:41:5c:5d:
                    7a:b1:de:a0:71:e1:df:f7:11:16:52:7c:54:8b:36:
                    67:cb:28:60:61:df:bb:2f:35:96:29:70:8a:78:0e:
                    72:a7:c4:28:eb:74:7c:92:7a:fe:07:d9:14:b2:82:
                    5d:72:bb:09:9c:fd:52:88:cc:b7:3c:ea:ee:fd:0c:
                    fa:72:c6:a8:2a:c0:cb:6e:77:95:36:0d:fd:79:56:
                    48:32:95:2d:8b:6e:a1:77:83:6e:a2:a9:1c:4e:8b:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:46:B3:B2:35:43:09:B3:7F:0D:97:EB:2B:10:43:C2:FE:BA:CD
            X509v3 Authority Key Identifier:
                keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:42:6c:28:fc:8d:9a:3d:da:60:91:dc:9f:b8:2f:18:2b:10:
         10:67:cf:83:38:00:b7:30:3e:4a:ba:2e:b9:93:19:f3:03:4d:
         8d:0a:5a:ae:48:02:1c:96:c4:e0:d5:fa:93:6f:e1:08:f7:d4:
         f5:88:45:4d:96:5c:60:0d:bc:a3:d8:6b:4a:af:2b:0c:14:bb:
         d4:87:49:1d:83:7e:d9:db:67:22:5e:93:4e:9a:21:d7:c6:16:
         9f:20:84:ea:ca:7a:37:fe:32:d1:5a:93:75:8d:bb:a0:d2:ff:
         02:f7:0a:b5:99:fc:1b:e4:2c:d5:c3:23:0a:68:3b:30:9f:42:
         81:5c:3c:c4:f1:07:88:dc:99:85:27:79:7f:19:72:db:13:62:
         15:a0:e7:15:5e:46:bb:92:66:4c:5a:01:62:c6:01:19:00:fd:
         6f:9e:b9:ba:fb:a7:23:90:01:b1:39:4a:ec:a3:a6:b9:d4:47:
         3f:ce:e9:71:1f:aa:8a:e9:39:a5:37:ae:72:7c:17:51:de:85:
         ec:57:28:12:bb:80:00:b8:a5:4e:e1:6b:37:27:f3:3a:b3:07:
         6d:1e:76:ea:10:d4:66:40:93:14:64:56:81:06:f3:70:41:dc:
         99:36:55:b1:84:18:85:e3:f1:80:b0:10:68:4f:61:18:91:49:
         b6:f4:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:07:51 2024 by rpki-client on console-fra.rpki-client.org