Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
File:                     038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json)
Hash identifier:          jzundGkelJqbp5KxDJ8jvp5ENHtlng2S7c9EcjDedZ0=
Subject key identifier:   1C:B4:47:E5:FA:2C:CB:66:81:AF:52:22:34:96:B3:6E:4F:F8:94:24
Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4
Certificate issuer:       /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
Certificate serial:       01522D1F972DB3EB3F027409ADB0B7C316D804CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
Manifest number:          95
Signing time:             Sat 18 May 2024 10:10:47 +0000
Manifest this update:     Sat 18 May 2024 10:05:47 +0000
Manifest next update:     Tue 21 May 2024 17:01:47 +0000
Files and hashes:         1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: jLndXzhB/KvhFe0irhpUDWynjc9jBd1lwlgq5eO0AZs=)
                          2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: O3mI/xoW8q5sT6tmgJ3DwLk6fb0JqyuEXDv8D73Qo20=)
                          3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: 7t5o9bP1KY7sD44Cqg4G0SPsQoTT8gAT6+iW1QWJssE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl
                          rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 14:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:52:2d:1f:97:2d:b3:eb:3f:02:74:09:ad:b0:b7:c3:16:d8:04:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
        Validity
            Not Before: May 18 10:05:47 2024 GMT
            Not After : May 21 17:01:47 2024 GMT
        Subject: CN=1CB447E5FA2CCB6681AF52223496B36E4FF89424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:8b:81:a5:a6:e8:8c:f0:02:6a:4c:f0:03:
                    08:1c:e9:5d:8c:3e:e2:5a:e1:1b:30:31:0b:b1:d5:
                    f5:8d:3c:1e:d8:92:01:46:b3:13:dd:9f:eb:e9:cd:
                    0a:9a:59:c3:6d:77:34:95:1a:f7:20:6d:7d:05:77:
                    31:23:fb:09:5d:ca:29:f4:aa:c5:b8:73:1c:93:47:
                    64:0d:f0:7d:b2:01:bc:97:e4:45:0e:ba:c7:ac:fb:
                    8f:13:97:0a:3b:db:20:76:e2:86:ab:37:2a:3c:3a:
                    5a:a5:bc:66:91:1b:d1:70:3b:1f:c7:29:19:88:81:
                    62:23:4e:94:c6:19:ca:39:d2:67:15:2d:44:50:eb:
                    3c:44:a3:ee:03:79:e3:30:22:6a:73:6b:66:80:91:
                    15:37:50:82:b9:b1:50:43:ed:f9:d3:40:23:ea:2e:
                    ed:b0:37:d7:a2:97:14:68:64:a6:68:b1:f8:18:1b:
                    a4:9a:dd:9c:5a:cb:a1:e1:b3:09:9b:61:e7:72:3e:
                    96:25:e1:8e:cb:6c:aa:e6:5b:33:59:bf:ae:c7:a1:
                    a4:16:0f:07:c8:fc:10:a2:bb:ae:86:16:fb:a3:ab:
                    56:23:eb:e8:dc:37:bb:65:60:4e:12:b4:4e:bb:fa:
                    76:aa:37:c8:35:7d:f4:a0:51:07:55:e8:34:d5:4b:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:47:E5:FA:2C:CB:66:81:AF:52:22:34:96:B3:6E:4F:F8:94:24
            X509v3 Authority Key Identifier:
                keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:df:8f:4d:e5:26:fe:9f:0a:d8:e4:f3:6a:23:d8:16:6d:09:
         58:ff:c7:c0:e1:ed:e3:1c:fa:55:a6:02:e8:89:b6:f5:cb:3f:
         c6:f3:54:ed:8c:35:3c:9a:2d:e1:9f:50:90:43:78:d4:e6:66:
         4e:43:05:c5:dd:75:f7:36:01:c5:af:7f:c2:77:5c:04:84:40:
         e3:c9:3f:86:42:f2:9a:b0:20:ba:cb:2a:2f:e6:12:f9:2b:4f:
         3f:0d:cc:a8:65:8e:2f:15:bd:73:4a:54:b9:3e:65:58:88:b3:
         27:03:ec:48:6a:15:f3:f6:95:f6:6d:6f:41:d4:b3:c6:d1:d5:
         36:96:8b:e8:60:d8:a4:e9:0c:fc:7a:a5:2c:03:5b:7b:34:c6:
         06:4c:4e:93:a9:ce:80:1e:e8:42:7d:57:d3:ca:10:58:88:91:
         67:92:9a:8f:d2:52:f7:64:6e:02:52:2c:45:26:ca:e3:f4:a8:
         5f:7a:5b:d3:16:89:c7:29:a0:57:92:23:b7:ab:0b:0e:3f:eb:
         ac:c5:39:8f:1d:9c:6f:c2:93:81:57:f2:1e:b0:96:98:db:9e:
         d3:82:4a:ed:e3:32:26:75:35:95:58:86:bc:92:71:5a:21:58:
         80:ac:e6:bc:d6:b5:96:07:e7:1a:de:c3:c8:49:64:ab:dd:13:
         27:f6:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 10:34:19 2024 by rpki-client on console-fra.rpki-client.org