Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
File:                     21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json)
Hash identifier:          ZDmdE+d0XzL0KFUaoi1W7imspmftX+oPMhRQLCWaVes=
Subject key identifier:   A2:A8:CE:63:2C:E3:53:41:85:FA:B9:88:5C:03:15:2F:1D:E7:92:B1
Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
Certificate issuer:       /CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Certificate serial:       6F34CBBEDF2DBC04D7E34F4283C147DD5D57EF7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
Manifest number:          013F
Signing time:             Wed 29 May 2024 20:11:34 +0000
Manifest this update:     Wed 29 May 2024 20:06:34 +0000
Manifest next update:     Sun 02 Jun 2024 07:31:34 +0000
Files and hashes:         1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: MhNrByJgpqRb8xvQn3yEjacQepsqyM1P2amE1yoeylY=)
                          2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: t5DejjB0RIUWbv5rBvHI2IZcGXatMqyeVcj20ftLyZs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl
                          rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 23:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:cb:be:df:2d:bc:04:d7:e3:4f:42:83:c1:47:dd:5d:57:ef:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E
        Validity
            Not Before: May 29 20:06:34 2024 GMT
            Not After : Jun  2 07:31:34 2024 GMT
        Subject: CN=A2A8CE632CE3534185FAB9885C03152F1DE792B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:bd:f2:ed:10:6b:7f:db:ba:aa:02:cc:da:
                    16:76:c9:d7:bc:dd:c0:1e:c8:f2:24:a3:c4:a5:11:
                    f6:3f:51:52:59:1e:74:ee:fd:c1:39:f4:0f:33:39:
                    a8:e6:81:b0:31:34:2a:ae:c2:b5:0c:ee:02:71:13:
                    c4:85:d0:d1:b0:bf:79:0e:e3:a8:2c:b4:85:ce:47:
                    de:18:ca:eb:bc:f6:05:9d:8e:e4:81:b1:43:f9:b7:
                    7f:0f:03:c4:81:de:41:2c:37:af:60:88:ae:0a:9d:
                    d3:de:0e:96:02:a5:f6:ba:72:45:fa:de:34:b9:8c:
                    27:e1:69:4c:73:cb:15:93:f3:97:70:f1:be:85:82:
                    6b:94:e1:65:0a:5b:13:a9:7e:1f:25:c0:30:ea:54:
                    18:51:8b:02:09:22:8d:82:80:e6:69:f9:88:05:93:
                    26:4b:84:37:b3:43:70:d7:8c:c2:a3:ff:23:fb:9c:
                    e3:c2:7a:9e:90:0b:62:52:24:da:09:0a:d7:aa:f1:
                    da:8c:dd:15:37:f1:b7:81:1c:cb:72:ce:cd:a5:26:
                    fb:b6:f7:04:d1:58:be:38:f5:5e:e0:43:35:9e:51:
                    fe:17:0a:b9:d6:17:ef:f3:62:77:a1:e5:c2:7c:04:
                    e1:b0:92:e2:2e:13:28:72:53:f1:07:8c:71:ef:e3:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:CE:63:2C:E3:53:41:85:FA:B9:88:5C:03:15:2F:1D:E7:92:B1
            X509v3 Authority Key Identifier:
                keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:85:b5:6a:94:5f:fe:89:83:fb:41:4c:f1:a3:9d:1b:55:cf:
         cb:ae:94:35:c1:07:a6:81:8e:77:29:01:c2:3d:27:e0:1f:7b:
         01:d5:c3:a7:1b:3c:86:5d:24:46:8d:4f:36:d3:20:bc:90:34:
         de:ae:0f:5c:0a:ad:5d:9e:c8:fc:60:8a:62:3e:fd:bf:d3:d3:
         f1:8f:54:bb:5d:44:21:bc:cb:ab:fe:64:7f:29:55:a3:58:4f:
         8e:3b:48:08:27:49:73:e2:a9:42:cd:8b:d2:4f:e4:c9:4a:fb:
         b2:42:ed:da:d5:b9:0f:43:7c:90:20:b1:2c:7b:f4:18:f7:0a:
         0e:11:72:27:fc:56:b4:88:19:ff:d6:56:3e:c8:84:ba:ea:0e:
         67:05:ee:3e:74:d4:67:96:6c:89:9c:b1:a0:2e:e9:bf:49:ab:
         68:7a:90:80:d6:ef:6f:d8:99:ae:a7:c1:1b:95:cb:8e:f9:01:
         8b:ac:65:48:6e:a1:ee:a9:63:91:9f:bc:30:bd:74:31:50:70:
         97:75:a5:d9:61:08:80:bc:7a:9d:a4:da:8f:80:8d:a1:6e:a5:
         4d:e6:12:b0:1f:07:9c:cd:48:f7:a8:be:24:c8:1e:87:ee:f6:
         35:d7:f7:aa:96:7c:fc:b4:2f:36:85:21:6e:54:2a:c4:c6:04:
         82:31:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 21:54:54 2024 by rpki-client on console-ams.rpki-client.org