Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
File:                     10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json)
Hash identifier:          bNUIPO35UsNZhfs0pU/sgT2savm9Ia1n+HGWS2P88qQ=
Subject key identifier:   91:C4:C1:FA:67:48:91:A1:E4:44:6B:D6:3D:93:BE:1C:F6:27:7F:BE
Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51
Certificate issuer:       /CN=10FC4D9D2403FC433C19BB76131325B776505E51
Certificate serial:       07F0AB70D066F7B01F3B9618CC7030819EC5F9D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
Manifest number:          03C8
Signing time:             Mon 20 May 2024 18:30:39 +0000
Manifest this update:     Mon 20 May 2024 18:25:39 +0000
Manifest next update:     Thu 23 May 2024 23:09:39 +0000
Files and hashes:         1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gnGVBhXBemZaYecV1G3ncNkgbDaRBuG8kTb0s/MyYz8=)
                          2: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: rD1UYT8sUAisv6XNVZwxq7R3ZPdZfe0qlb6lK7lNUPw=)
                          3: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: i1X1D+/IGU8kCY/pv4D0H6hb9F63gn8L3b8J9i+PgBw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl
                          rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:ab:70:d0:66:f7:b0:1f:3b:96:18:cc:70:30:81:9e:c5:f9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51
        Validity
            Not Before: May 20 18:25:39 2024 GMT
            Not After : May 23 23:09:39 2024 GMT
        Subject: CN=91C4C1FA674891A1E4446BD63D93BE1CF6277FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:9a:f4:11:96:77:6f:f9:1e:79:05:27:96:
                    8f:4c:6d:c7:25:81:10:a7:f2:fe:e7:a2:0b:d1:dd:
                    2a:6e:bc:84:89:45:aa:61:d2:2a:48:fc:30:a1:64:
                    df:0d:93:e3:43:0b:ac:2e:e1:e0:92:c1:e4:17:f7:
                    78:25:72:10:15:ee:fa:fa:d7:69:b3:75:72:c6:54:
                    c7:09:52:de:b5:0d:8f:1b:13:8f:28:a9:76:82:39:
                    85:94:37:6b:38:3e:7a:e7:16:7d:a8:f4:0a:cc:8c:
                    cd:cd:db:cf:e5:15:09:fa:b0:1f:ed:fa:b4:57:32:
                    9b:61:2f:43:c5:0d:4c:b3:da:cd:b7:50:af:ac:b6:
                    3a:1d:37:c4:87:9d:33:92:32:4a:01:43:92:4b:e4:
                    b4:94:07:ef:ef:a0:c4:25:9c:fe:b9:e6:43:ba:ca:
                    07:3c:00:4e:7f:94:3e:2e:af:06:d6:a8:4a:4b:35:
                    f3:ae:84:fc:6d:78:68:d5:2f:e1:a6:c7:06:ac:3e:
                    2e:5c:d7:b6:29:e4:d6:93:61:0f:03:4e:3f:05:f5:
                    74:85:0a:d0:76:be:5a:ec:bd:a9:ea:5e:07:8b:79:
                    d7:de:7f:1c:cd:1d:58:28:bb:8e:c3:2a:c5:cd:cb:
                    18:a2:e0:e3:10:ec:c1:82:0d:15:9d:89:ab:11:46:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:C1:FA:67:48:91:A1:E4:44:6B:D6:3D:93:BE:1C:F6:27:7F:BE
            X509v3 Authority Key Identifier:
                keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:3a:b8:98:a2:a3:cf:81:6e:6d:bb:cc:57:b8:ee:96:e4:
         d9:cf:0e:b5:e2:b8:a1:5c:30:3f:ed:ba:12:fa:c3:ac:6e:cb:
         3a:ed:b4:e4:0e:84:76:64:67:72:85:70:3b:fe:6b:6f:00:1c:
         30:4c:fc:96:36:b0:05:85:7a:15:69:d9:0a:53:eb:58:34:97:
         92:36:52:5d:f1:e9:27:a3:cc:84:57:80:6b:32:3d:bf:53:fd:
         4f:55:2b:b8:99:89:f2:a7:7a:af:94:9c:8e:f8:4f:6b:aa:47:
         4a:4d:9a:89:94:1d:6b:f9:da:70:2c:dd:f7:3d:e1:14:e1:63:
         8b:6b:96:45:77:00:89:5d:be:2a:3a:95:48:38:ed:6b:af:b9:
         83:61:12:7a:5c:ea:14:1c:1d:08:9d:9b:15:e7:16:2c:9e:4a:
         71:15:55:9b:0c:e9:71:2c:b5:5c:c9:6a:34:49:ae:ac:3f:d7:
         d5:b3:c4:04:f1:e8:3b:b3:a3:11:63:ec:9e:53:13:74:3a:e2:
         de:bc:c4:fe:2f:66:8d:24:0d:d1:7c:0d:63:c6:43:70:9e:36:
         20:74:c7:b2:df:45:34:61:32:29:08:0f:e9:4d:49:ff:33:cd:
         a8:6f:e0:7d:c2:35:a1:0e:c8:5e:21:71:8f:2d:80:76:91:16:
         b9:e7:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:18:11 2024 by rpki-client on console-fra.rpki-client.org