Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
File:                     CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json)
Hash identifier:          Pp3Yzq6vTeTCnoL7+4DwqeYRnXMTHBPc3qvBYjzlk9k=
Subject key identifier:   93:F4:78:AB:FC:0D:FE:B3:76:BE:E7:D2:F1:37:1B:D0:C3:F4:2D:D1
Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
Certificate issuer:       /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Certificate serial:       6975243420362514EC123E1114D08358D2C45046
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
Manifest number:          A0
Signing time:             Wed 29 May 2024 04:41:47 +0000
Manifest this update:     Wed 29 May 2024 04:36:47 +0000
Manifest next update:     Sat 01 Jun 2024 07:28:47 +0000
Files and hashes:         1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: OWaYDg1cDH9a+akHuxTt6wYPqaxaynY90OG7HIU4OWI=)
                          2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: aeP104SArqWvp6OFaXwMXL20cPNYVBsfFUTUS2dFV3w=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl
                          rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:75:24:34:20:36:25:14:ec:12:3e:11:14:d0:83:58:d2:c4:50:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
        Validity
            Not Before: May 29 04:36:47 2024 GMT
            Not After : Jun  1 07:28:47 2024 GMT
        Subject: CN=93F478ABFC0DFEB376BEE7D2F1371BD0C3F42DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:37:d3:78:b9:ac:27:2f:7f:6d:62:6f:fc:
                    96:92:2c:53:44:d4:3d:8d:bb:d8:49:41:0c:5f:3f:
                    fa:ea:3d:36:1d:ed:08:79:79:75:87:1c:af:ae:27:
                    8e:f9:7c:34:fa:91:98:83:38:b6:69:1f:ae:93:3c:
                    ca:f0:11:96:05:a4:2e:95:20:bc:5d:7c:3a:d1:50:
                    a3:97:bd:d9:1f:22:b1:58:40:a0:97:36:b4:53:91:
                    62:42:4c:18:4f:fa:14:d9:94:7a:79:5b:2c:72:49:
                    9c:a8:22:07:5b:67:22:70:8c:58:45:90:1e:ec:1c:
                    cb:9e:3e:b2:90:61:8a:38:5c:c7:68:52:43:2f:72:
                    e1:18:67:69:fe:a5:23:80:f3:cc:a8:56:f6:65:0b:
                    f4:88:4b:d1:fd:1a:42:de:f8:f0:38:f9:6e:1b:cf:
                    9a:1a:51:fe:a9:55:ec:61:23:cc:b6:b1:d4:55:b9:
                    2e:63:1e:e6:ae:f0:74:46:f7:02:32:21:6f:8b:91:
                    eb:2f:3c:c6:4a:ad:22:b0:63:42:0f:a2:00:43:66:
                    32:64:67:34:bc:99:cd:91:81:95:04:d7:10:50:3a:
                    e0:35:58:5a:8c:35:f0:4c:e3:de:ec:b6:b9:db:74:
                    3d:d0:c1:40:7c:b0:b4:0f:52:ae:a4:e9:6f:cd:07:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F4:78:AB:FC:0D:FE:B3:76:BE:E7:D2:F1:37:1B:D0:C3:F4:2D:D1
            X509v3 Authority Key Identifier:
                keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:69:1b:4c:43:8d:fc:a0:54:59:b8:35:61:b2:9a:f8:56:da:
         cf:7a:6d:bc:1d:a4:70:8c:1e:9c:82:d8:60:20:21:bb:88:74:
         72:0b:47:01:b8:89:08:b7:cf:b6:6b:ff:6c:7e:4e:c0:30:74:
         e7:0e:a9:01:83:f2:f8:3c:7c:31:48:24:70:90:ba:fd:24:f6:
         bc:ef:2a:22:6b:5e:0d:1f:0b:13:24:e3:fd:62:a4:de:8d:1b:
         f8:34:75:63:b2:3a:f4:fe:57:c1:d0:64:bd:37:15:ab:5c:85:
         0d:8f:b4:00:71:b5:26:56:ac:38:8e:85:93:44:1c:be:c1:9d:
         19:99:08:eb:b8:d3:a6:bb:bb:06:41:1f:3b:9e:c0:1a:2a:b2:
         de:ee:e7:62:7c:07:35:b8:c0:d5:71:9b:1f:19:cf:3c:b6:67:
         ac:fd:b5:90:0d:65:bf:bc:1c:40:36:fb:dd:29:e2:fa:83:58:
         8a:e2:6e:a9:65:1d:35:15:e7:77:d8:26:92:34:51:69:a6:0c:
         92:33:4a:09:b3:04:75:38:59:cb:33:ce:5c:20:3e:d2:b8:19:
         e8:b9:50:14:05:7e:fb:9f:2e:cc:e8:71:b4:91:f6:01:d9:b8:
         69:73:a6:bb:bd:67:f7:a8:e2:02:4a:6b:3e:7f:d2:74:24:2b:
         5c:3a:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 05:26:16 2024 by rpki-client on console-fra.rpki-client.org