Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
File:                     0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json)
Hash identifier:          qXrikKd1hFDr/ErzTC9gX9CTnHo9QGkqbdo6ctbJgy4=
Subject key identifier:   3A:40:A3:B2:34:CF:7D:E5:9B:D4:88:F6:1A:7D:07:FE:19:56:E5:EC
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Certificate issuer:       /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial:       7CC88F2FC13F4691B0E46F045AAC5C895D3866FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
Manifest number:          0430
Signing time:             Sat 18 May 2024 09:00:39 +0000
Manifest this update:     Sat 18 May 2024 08:55:39 +0000
Manifest next update:     Tue 21 May 2024 18:00:39 +0000
Files and hashes:         1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: Kvls3LZDq6ew59sjRAkuhKZ0rt/sP0DdTvBdoCI6jj4=)
                          2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: +VIuPXPbboQgEVKrSmy1AQ+vukpOsBYrD/zgFtwgumc=)
                          3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: Um8MVMIC/Xd819pytCwKvC1NLbFbZ4YiFBQbcV89aK4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
                          rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 14:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c8:8f:2f:c1:3f:46:91:b0:e4:6f:04:5a:ac:5c:89:5d:38:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
        Validity
            Not Before: May 18 08:55:39 2024 GMT
            Not After : May 21 18:00:39 2024 GMT
        Subject: CN=3A40A3B234CF7DE59BD488F61A7D07FE1956E5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:0d:1e:3f:f3:8e:a4:a1:1d:51:bc:44:79:
                    22:76:03:7e:f1:de:ff:97:59:44:91:1c:b4:88:a7:
                    a7:79:e8:34:b6:a5:f7:32:fc:9f:b1:6f:10:50:bb:
                    79:47:f9:dd:bb:bb:67:9d:3a:53:60:99:1f:be:c0:
                    75:17:30:ef:b4:6b:a2:db:b6:ba:31:c6:8a:07:0c:
                    b9:51:f7:d0:b3:85:22:81:56:13:1f:21:40:b7:81:
                    77:8a:b4:88:57:d5:57:0f:fc:0b:f3:fa:9f:ce:76:
                    d9:94:25:88:88:07:34:8c:29:81:25:91:7a:a6:cc:
                    ca:45:e1:b7:39:5d:e1:00:50:00:a7:ad:8a:45:1c:
                    7b:5c:29:52:87:db:d1:d9:3c:70:7b:da:3a:d9:86:
                    ea:2a:27:1c:b6:5c:a5:d5:3e:48:3e:01:11:e1:34:
                    fe:0b:6d:1d:07:08:a4:7d:a8:2e:dd:3e:66:48:ef:
                    ec:5f:e4:4c:23:be:40:43:4c:e0:23:13:e1:23:45:
                    56:2e:26:f0:df:19:e5:7a:b9:da:de:dc:ee:90:ff:
                    f4:f4:87:0c:93:8b:0c:55:3f:03:54:b8:64:47:6a:
                    64:c8:28:ac:9e:71:24:8b:d3:44:e0:2d:70:d3:14:
                    45:02:37:89:f1:4a:e6:6c:56:74:31:6e:c0:bc:0b:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:A3:B2:34:CF:7D:E5:9B:D4:88:F6:1A:7D:07:FE:19:56:E5:EC
            X509v3 Authority Key Identifier:
                keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:81:53:01:0f:b2:50:02:9b:69:8f:45:e7:80:ee:d3:b8:
         2b:b2:36:ad:cd:bf:12:c4:61:f8:e7:9a:97:06:82:81:73:6c:
         47:63:57:7e:6e:98:32:e9:f5:66:56:03:82:41:37:e6:d4:ab:
         c8:fb:7f:39:90:ec:2c:39:c3:b3:58:af:10:39:92:87:6a:d2:
         ad:57:8c:a6:84:51:b0:4d:3c:dc:b9:12:b1:46:2a:02:c4:80:
         a3:88:d4:7a:14:e0:ce:85:58:5a:e2:82:8e:09:3d:67:53:8d:
         de:33:05:2a:87:64:2f:26:5d:e4:8e:73:7d:35:60:d2:0e:16:
         e0:0e:18:02:8f:59:9f:0a:ed:bd:64:79:c7:69:c3:4e:6d:60:
         c8:9e:98:01:f9:c1:12:d3:ae:23:ec:1a:69:8d:4e:e9:30:30:
         73:35:7a:2d:ec:8e:2d:23:af:b6:15:cc:08:83:a5:56:2d:18:
         a7:b8:c5:43:88:98:98:1c:93:c3:64:b3:fc:5e:83:d1:a8:e5:
         85:38:d8:f3:a0:5c:84:2d:1c:87:07:02:b0:88:1a:a2:2d:d0:
         cb:7e:cc:07:af:19:45:e3:68:e2:76:96:5c:b7:c5:d6:02:fd:
         79:40:71:2f:b3:2f:51:cf:ae:93:e2:04:db:a6:2a:82:0d:c6:
         fd:f4:f4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:23:11 2024 by rpki-client on console-fra.rpki-client.org