Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
File:                     5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json)
Hash identifier:          uKB2LnuJj1Lq8z0jfgbEXa0+4jPmPaRz6fCqmKnwvg4=
Subject key identifier:   9F:31:57:C9:A8:85:ED:46:30:FD:D2:6B:D1:54:E3:7C:4F:EB:E4:48
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       67CDC07D5D610C7C5B8BEC3BC618A08B788BC274
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
Manifest number:          D4
Signing time:             Sun 19 May 2024 15:31:07 +0000
Manifest this update:     Sun 19 May 2024 15:26:07 +0000
Manifest next update:     Thu 23 May 2024 02:00:07 +0000
Files and hashes:         1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: 3A078AA014GsGF4GIsembbWsz4KNNOqKrGR40shJYsA=)
                          2: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: K8jBrvyjWpF1xSVsdl9Yw+89kHnZkUA/J4YX73gvZZU=)
                          3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: j3c7OitxuKvIpFGS9jKK2X/pOGi+fYKXTMgr7Tiyp6A=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cd:c0:7d:5d:61:0c:7c:5b:8b:ec:3b:c6:18:a0:8b:78:8b:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: May 19 15:26:07 2024 GMT
            Not After : May 23 02:00:07 2024 GMT
        Subject: CN=9F3157C9A885ED4630FDD26BD154E37C4FEBE448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:42:d3:b8:d9:6b:21:b7:3e:9b:d0:4f:d5:
                    67:52:23:40:df:4c:b1:8b:e5:0a:b2:83:b3:a7:50:
                    0c:03:9d:cf:ba:e6:dc:5c:48:5d:c1:56:46:91:5d:
                    86:f2:98:e9:2c:8e:10:81:fb:4c:98:46:1d:17:9a:
                    2d:a4:4f:a1:35:b5:50:49:2d:12:3d:60:c3:0a:28:
                    b6:1a:44:af:8f:c5:a4:4f:46:f8:f8:ae:f0:63:59:
                    12:c6:a1:3d:d7:c8:72:1a:d7:d0:90:94:61:39:b1:
                    6a:b6:73:9c:e5:22:4c:8f:01:62:d3:d4:d0:d9:81:
                    d1:a5:90:a0:d7:b3:70:01:7a:4e:b4:f8:4c:ef:51:
                    4b:db:78:61:74:c8:eb:1e:4d:ad:78:22:8d:3f:be:
                    7e:f6:fa:86:b9:19:f3:e3:8c:43:3f:0c:03:88:19:
                    b1:5d:91:94:b4:5a:dd:c7:d6:96:97:0b:b1:c1:da:
                    5f:a1:ca:f4:22:e1:75:74:0e:d3:9b:25:f1:fa:ef:
                    1f:51:26:c1:8f:18:5a:97:a8:4e:20:5a:05:4f:7c:
                    be:64:b9:90:fd:a5:50:d5:80:f6:60:97:72:ea:a4:
                    30:3c:b6:1f:b0:9e:33:c5:10:12:95:7a:ff:ea:f4:
                    f8:a0:a0:56:49:0b:a8:17:aa:eb:a2:83:1e:da:90:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:57:C9:A8:85:ED:46:30:FD:D2:6B:D1:54:E3:7C:4F:EB:E4:48
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:46:d2:ae:5d:73:1b:5d:89:6d:e1:24:d3:b4:00:91:61:a2:
         57:a5:ed:60:21:ce:90:af:4e:9d:b0:2d:f5:28:bd:ab:63:43:
         01:aa:3b:18:52:97:27:99:e1:d6:1a:00:21:f3:13:01:7e:05:
         02:bc:8a:72:f5:cf:b3:a2:0b:77:8c:66:55:e1:28:d5:67:82:
         c1:a5:40:80:6a:c0:74:ed:1f:d9:79:9e:01:4c:03:99:8b:b4:
         55:a1:90:f4:91:5a:6c:d3:23:2b:73:54:6e:33:66:0c:89:ef:
         1c:0f:14:bf:a8:f6:4c:c0:25:8d:c4:63:48:bf:60:6f:a0:f7:
         77:cd:df:b7:81:2a:16:54:3b:c1:85:2f:39:fb:6b:9f:eb:96:
         8e:99:34:8a:41:25:be:90:70:2a:46:35:cb:fd:1c:bb:a8:ea:
         22:90:b3:e6:36:f5:88:6e:62:d7:80:7d:af:f3:15:b6:52:15:
         69:5a:6c:e3:b4:a7:fc:66:e0:96:13:88:3e:fb:7d:7f:f0:8f:
         8a:55:3d:c6:ec:b2:cb:1f:75:c5:d6:34:20:54:6e:30:73:50:
         92:8e:c4:2a:d3:8f:d4:10:b0:da:4d:2c:60:2c:56:5c:6a:3b:
         45:88:65:b1:90:ab:96:46:81:41:e7:15:f4:c6:e2:a6:59:c3:
         f5:b1:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org