Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft
File:                     E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json)
Hash identifier:          Qkhjs8U0Tv6sbMH2WzHJEhtyYnjiq5TOeZDAgf4qeiI=
Subject key identifier:   88:9C:83:EB:A0:F7:63:41:0F:F9:1A:03:DF:1F:4E:7F:CE:03:9E:91
Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1
Certificate issuer:       /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
Certificate serial:       61E4A2E11360086AF3E1845D4D807307E269D5BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft
Manifest number:          01B2
Signing time:             Sun 19 May 2024 06:11:57 +0000
Manifest this update:     Sun 19 May 2024 06:06:57 +0000
Manifest next update:     Wed 22 May 2024 17:39:57 +0000
Files and hashes:         1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: 72Kbi2R2KXqSRi1jvS5wg01cycQS8BP9fDUxqShVGbU=)
                          2: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: aZG3Epr2f2g9piQeo35k3H0f3eTyfNf54QBdxMNgW5M=)
                          3: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: 8yrtFvs9oK+gBqRXDk1NT9a7nKhAWW6EZx19es1wIhQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl
                          rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e4:a2:e1:13:60:08:6a:f3:e1:84:5d:4d:80:73:07:e2:69:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
        Validity
            Not Before: May 19 06:06:57 2024 GMT
            Not After : May 22 17:39:57 2024 GMT
        Subject: CN=889C83EBA0F763410FF91A03DF1F4E7FCE039E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:32:9b:9e:8b:c7:29:57:41:e1:16:09:c1:
                    07:99:b0:4a:e0:0b:37:1b:78:9e:26:d6:c1:2a:a7:
                    72:56:f0:66:e7:7f:f0:94:31:39:64:5b:5d:1b:44:
                    39:ea:5c:56:5c:f6:07:cd:72:7c:23:95:34:10:81:
                    74:85:bd:19:db:7a:07:1b:ca:72:51:17:cf:3f:69:
                    a8:4a:5f:9a:e6:b6:e9:80:4b:19:21:92:f8:04:e2:
                    82:db:65:75:57:ea:b0:61:61:64:6b:f0:b1:b2:ce:
                    50:e8:72:e8:91:32:9f:2f:3f:fb:26:06:35:d8:c4:
                    de:0a:67:0f:95:7b:6d:29:ce:06:5d:87:19:82:f9:
                    cc:b8:50:1a:05:0b:70:05:7b:ba:80:55:f5:82:02:
                    6d:bc:1b:fe:d3:9a:7c:5c:3d:db:d1:4c:70:7e:e5:
                    81:12:4d:db:4f:75:8f:82:ce:43:fa:46:47:5b:1e:
                    3a:f2:c9:06:97:00:12:a1:83:32:7c:38:91:60:1a:
                    3e:97:d9:40:ce:ca:11:4e:3b:09:d7:87:d1:05:1f:
                    1d:56:4a:44:cf:78:a5:ad:2f:53:e4:b1:9f:ed:7d:
                    d8:d5:b3:b3:82:72:09:d3:22:39:d1:2a:82:b0:39:
                    8a:cf:90:b5:83:7c:f1:c2:51:8d:0b:46:62:97:6b:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:83:EB:A0:F7:63:41:0F:F9:1A:03:DF:1F:4E:7F:CE:03:9E:91
            X509v3 Authority Key Identifier:
                keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:3c:18:ad:50:9c:e0:97:fe:42:e4:8a:b7:03:fb:a8:0f:
         12:10:9b:38:70:0f:d9:1f:46:04:e5:53:79:29:51:bf:77:2a:
         1d:d9:86:3a:ca:58:91:38:b7:37:88:86:96:d9:65:9a:53:9e:
         04:94:ee:e0:13:0f:68:fe:f0:0e:a6:56:ca:25:40:d1:92:5b:
         34:42:99:e5:0e:d3:89:87:dd:1b:9c:96:6f:0d:73:c5:7a:3e:
         68:2e:60:df:a8:ca:dc:01:9c:5d:73:ae:dc:06:98:2a:a6:11:
         a5:1b:67:0c:5e:45:51:a0:2d:05:1a:1f:47:63:6d:dd:3f:3a:
         d7:3e:ef:cf:74:91:42:b0:85:5a:63:bd:96:89:85:c5:88:55:
         8b:ea:44:00:d1:5e:58:80:2f:d5:66:06:f1:23:ed:cd:57:80:
         72:46:b9:9d:b3:d6:b1:6c:55:37:3f:07:b5:48:56:ff:93:45:
         04:d3:5b:50:a8:84:25:4f:d7:2f:27:61:32:bb:d9:6b:65:9b:
         05:03:39:e8:c8:90:73:d9:1d:a6:b2:f1:d3:6d:04:7a:07:5b:
         ef:f9:e3:ae:f0:2f:86:19:69:e5:2e:f8:61:81:f1:36:a6:63:
         4d:78:d6:6b:50:ab:da:1c:4e:76:8f:c4:35:e7:f7:b6:27:0a:
         13:3a:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org