Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          b0PM5Ux0ByxIMg0qOVTLjulBmFlzSO+7VTVVEV8yr9Q=
Subject key identifier:   7E:89:C1:06:1C:2E:2D:AD:D9:46:A8:38:FD:54:9C:2B:87:60:F6:DB
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       6290BF598127FADB3F7633F5BD320EB7DFD7E18A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          01D7
Signing time:             Sat 18 May 2024 11:11:13 +0000
Manifest this update:     Sat 18 May 2024 11:06:13 +0000
Manifest next update:     Tue 21 May 2024 12:15:13 +0000
Files and hashes:         1: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: bS2CT24hCpLr9qjC4dzZS3ZKwd2VO4fnEZ0KuxJYAlg=)
                          2: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: G0309FfKt2Ghcy4bjBg0yqC3qddd8IjYRroh69/8S8c=)
                          3: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: IW+Mj+PhBjOmUrw4IfcAi/DmQbRYmtrW+1tz7dNVS1w=)
                          4: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: iE7UWtCiEmdgeuVTwNiFbdMqtSLMk7oQxj1XiJyt8A0=)
                          5: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: wixNplraWVzLDfBoclPrgN/2KHafsHjyjudkWcQYP58=)
                          6: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: WIgtEL4dvCafjA7JMoun0OB0G1rsbhEUlZVY2/N9160=)
                          7: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: 5Elc0RoBpErSDKsXH+h9Ir6+o3kPzSraPLpzPXpa840=)
                          8: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: gQmXG9yGxEB6qZcH7MSbb1ODVd5dE9MUKPWlHu+1O3Y=)
                          9: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OoQzNxb1G9JdE7sYhRzODa/7jo5gne8UkdB4cuv69Ro=)
                          10: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: gziCr+ALM/+WWp7f+Djp4B5mGbXuhC/+/p59c7aH6sA=)
                          11: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: KNzx4P7hdhN7LNz+AGeNwmF/UzsnE1RqWcnMK1L0e9U=)
                          12: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: YyjNmT4+qZeBFgxvosewQoq9D8GIhL2GwF04mRxI1mU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 12:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:90:bf:59:81:27:fa:db:3f:76:33:f5:bd:32:0e:b7:df:d7:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: May 18 11:06:13 2024 GMT
            Not After : May 21 12:15:13 2024 GMT
        Subject: CN=7E89C1061C2E2DADD946A838FD549C2B8760F6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:c3:12:04:20:3a:83:eb:df:6d:37:b9:07:
                    90:10:f4:35:50:84:3d:9f:d9:e0:70:d7:14:2b:b4:
                    d7:ea:66:fb:9e:8c:e6:cb:81:36:96:c6:be:c3:42:
                    d0:a8:0b:48:6c:b3:05:e9:47:b5:f5:53:fc:4d:d0:
                    71:a6:22:8b:74:9d:fd:3d:d1:74:e0:1f:e6:9c:5f:
                    23:3d:a9:74:d7:f5:0c:25:07:bf:29:dc:ee:42:62:
                    5a:02:a6:31:7c:7e:11:2b:04:50:2b:c5:10:4f:0d:
                    c3:45:03:02:d9:44:5b:74:fb:46:fb:80:c7:90:d0:
                    b6:88:28:69:42:bc:63:07:f0:8a:f2:bd:5b:73:40:
                    66:a9:b0:10:90:71:45:67:52:16:3d:01:0e:db:08:
                    75:21:93:9a:0a:33:b0:b7:32:d2:3c:38:b4:0a:ce:
                    9e:fc:f2:c3:e9:a3:15:6f:af:82:63:01:68:5e:3c:
                    b3:31:c4:c2:7f:54:ff:b7:35:dc:74:6d:fa:ca:26:
                    34:e8:19:f9:b6:31:15:e1:b7:8b:a9:42:8c:d3:bf:
                    6f:58:a9:aa:1a:04:d0:7b:ec:2b:bd:b8:a8:5d:62:
                    4c:13:04:5b:16:ce:57:6d:a8:15:25:1a:70:f9:4e:
                    9f:ae:48:dd:81:3e:29:26:83:bb:b9:48:00:ab:55:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:C1:06:1C:2E:2D:AD:D9:46:A8:38:FD:54:9C:2B:87:60:F6:DB
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:5e:f1:50:57:09:d8:eb:8a:4e:75:2d:58:fc:fe:6e:a8:
         20:58:6d:64:02:c9:60:7d:a8:79:80:ad:37:28:a8:c8:de:bf:
         03:ed:23:23:65:87:d3:d3:a3:2e:b7:82:06:d5:b5:1c:bf:78:
         6f:a6:2f:b3:74:18:66:6d:3d:cf:cb:2a:0c:56:16:52:94:d7:
         01:88:42:37:4e:5b:42:e9:7a:fe:8e:4e:a0:33:c4:2f:d9:58:
         8f:9b:4e:4c:9b:f3:16:c1:dd:29:de:a1:99:02:b9:da:c3:87:
         a3:e3:9a:b6:4f:f2:c9:48:7b:f3:ab:54:bb:47:61:71:64:f5:
         8f:1e:6d:6e:69:87:93:54:9c:87:8f:18:bf:2b:91:4f:fe:f3:
         51:e7:3b:53:06:57:d3:f8:ee:e4:92:6a:1d:5c:ba:60:9e:96:
         6e:8e:86:de:f7:55:07:98:8b:f5:1d:b4:e7:cc:fb:cf:a3:59:
         cd:57:10:22:36:19:fe:c3:7a:88:ac:e1:15:65:b5:c6:78:62:
         12:5e:67:48:21:d5:9f:da:a4:ae:d3:f2:18:d7:de:31:e1:7d:
         5b:bd:c4:2e:6e:ec:0c:d1:0f:84:a4:89:91:af:c7:7f:cd:09:
         1e:06:b1:40:41:78:23:13:da:be:1d:b1:ff:35:32:fe:97:41:
         e8:af:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:39:38 2024 by rpki-client on console-ams.rpki-client.org