Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft
File:                     8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json)
Hash identifier:          l9w6iITX/OSw3Z+awUXEVn1TKgrgOUn5B/dYQUSVC6s=
Subject key identifier:   B5:47:42:66:55:D7:67:09:CF:5C:CB:27:9B:57:40:6B:E7:0F:91:06
Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57
Certificate issuer:       /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
Certificate serial:       76C3367D5EB4EF84D88835E16ED5EABE807586F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft
Manifest number:          03D7
Signing time:             Wed 08 May 2024 12:21:16 +0000
Manifest this update:     Wed 08 May 2024 12:16:16 +0000
Manifest next update:     Sat 11 May 2024 15:17:16 +0000
Files and hashes:         1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: prDUxQ3+Z+a0+/+iNJ7oZVv3ljJRDEy07Lny8c5rcis=)
                          2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: u9EbgYox9oilAraFTf4VCs65CHp3P6pBaMoIvEWCrDk=)
                          3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: Ir0P4yJrm/PCKvQUSBYu3lhDSEfnRL8nLBdPvVCLefo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl
                          rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 15:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c3:36:7d:5e:b4:ef:84:d8:88:35:e1:6e:d5:ea:be:80:75:86:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
        Validity
            Not Before: May  8 12:16:16 2024 GMT
            Not After : May 11 15:17:16 2024 GMT
        Subject: CN=B547426655D76709CF5CCB279B57406BE70F9106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:52:1e:fe:26:14:d2:25:2b:88:1b:2b:a9:
                    d9:52:4c:d5:da:5b:fb:d9:e3:87:41:c0:94:a4:74:
                    48:60:6e:f0:5c:5a:74:61:42:5d:57:1f:10:d0:37:
                    76:24:99:06:3f:17:39:ec:54:2a:13:c0:df:09:f7:
                    14:ce:ae:79:9b:43:1e:58:4e:52:e7:32:90:ea:12:
                    66:07:49:b8:a8:0b:75:1d:f6:8d:79:b1:d7:01:9c:
                    97:6b:4f:4d:9e:b0:6e:79:52:31:8a:37:d3:5c:44:
                    f8:6e:41:56:ea:d3:c6:0a:89:a7:81:7a:22:46:32:
                    8e:ed:04:e0:48:a0:a2:46:70:62:f8:00:86:16:4f:
                    4f:eb:ae:30:75:24:b6:5d:f6:44:f5:04:28:bf:b3:
                    3f:73:b7:2b:e4:20:3d:b7:60:bc:b1:aa:a3:51:90:
                    13:c9:c0:02:f4:6c:b2:28:03:94:71:52:d0:d5:a3:
                    1e:98:ad:e3:0f:6a:aa:fc:f6:21:d4:52:5a:b3:aa:
                    80:1f:24:c2:68:76:ae:27:b9:6c:b7:3e:e6:f1:6f:
                    02:0b:62:4e:b2:5e:24:27:34:f6:49:d1:cc:33:ae:
                    05:67:4e:2f:dd:30:1c:8f:71:b8:ff:ad:0d:66:09:
                    27:95:67:d2:f9:ee:9e:19:60:66:aa:1a:78:66:0a:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:42:66:55:D7:67:09:CF:5C:CB:27:9B:57:40:6B:E7:0F:91:06
            X509v3 Authority Key Identifier:
                keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9c:ec:a0:6b:d1:c8:aa:69:3d:56:d8:a9:ed:c1:1c:5f:2e:
         e2:3b:63:e3:9b:3e:6e:c7:25:79:a7:14:ce:80:4c:5f:f7:50:
         46:d4:82:7c:07:cb:b6:f0:9d:fb:34:99:8f:3f:9d:51:27:9f:
         f8:1c:ae:aa:f4:1a:16:52:3a:47:72:2c:28:e3:a9:e1:35:9e:
         d4:84:88:59:a6:64:91:3e:42:de:ef:70:ee:4d:3b:1a:41:20:
         8c:71:d8:f5:c7:57:87:24:30:41:9c:9b:98:26:b3:e8:80:57:
         31:04:0b:f1:45:9d:ba:8f:ff:bc:6b:d1:7c:54:c1:a9:2f:e8:
         8b:b1:6c:40:23:37:e2:c8:3d:d1:61:94:5c:47:dc:b6:f7:2a:
         47:0d:20:85:7c:83:12:06:3f:4b:f9:1e:93:b2:99:1b:d6:20:
         8a:dc:b5:df:e0:57:8f:a3:bb:2e:ce:bd:92:61:fb:3f:7a:4f:
         b1:58:05:cb:cf:7b:80:b0:f4:21:cb:d0:4c:23:a1:4a:5a:f8:
         30:59:ed:4a:6c:b0:f3:fb:d3:05:a4:93:de:03:2b:05:33:66:
         f4:b1:08:e8:68:49:18:cc:cc:7f:ab:d1:26:ce:dd:5b:91:00:
         8c:d0:7f:ce:e0:b0:6e:c9:54:36:53:a6:cc:91:c7:08:a6:34:
         97:ff:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:17:30 2024 by rpki-client on console-fra.rpki-client.org