Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
File:                     31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json)
Hash identifier:          yoF//un/qEp5l23vLU1pQF2xCu1YGn20mS6sNehd/zU=
Subject key identifier:   BB:FB:51:A3:E7:95:75:3E:04:6D:B4:3D:57:1C:E5:72:31:8E:6D:A2
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Certificate issuer:       /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial:       26243A1598D273DAC0FC4E88C0C6EDB8794F00A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
Manifest number:          01BB
Signing time:             Tue 28 May 2024 20:22:02 +0000
Manifest this update:     Tue 28 May 2024 20:17:02 +0000
Manifest next update:     Sat 01 Jun 2024 06:36:02 +0000
Files and hashes:         1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: YqUdAXdZc+PcvXAeFs39wQF/wal5U+5+q1IVbDFjOHg=)
                          2: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: owKI4vwZUd82PXE3AFvR8F52pYe81o88yVaDZ+fWw+g=)
                          3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: 2vMjvSW/G61d4NurhCLCys7Oq7mbjpupUkoTG9xO5fc=)
                          4: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: ZweOXZ8JNo/D5srFvJnbqPKOcG71H44HQrMc2NLRdxE=)
                          5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: Iadszw72iQTXzXRb+BGMEXZI1wJXr8CPm014ECbmlyE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
                          rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:24:3a:15:98:d2:73:da:c0:fc:4e:88:c0:c6:ed:b8:79:4f:00:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
        Validity
            Not Before: May 28 20:17:02 2024 GMT
            Not After : Jun  1 06:36:02 2024 GMT
        Subject: CN=BBFB51A3E795753E046DB43D571CE572318E6DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:27:ca:99:3d:85:5a:1e:86:f7:10:e5:7e:
                    70:5e:e1:f7:22:44:72:36:61:ee:aa:a9:15:4c:9b:
                    67:ae:74:f7:fa:c8:ce:b4:8c:b9:d8:3d:aa:54:9f:
                    03:9b:43:63:4e:e2:cc:9f:0b:58:19:75:a8:e6:40:
                    42:b2:db:10:b1:2d:27:0b:56:7a:1a:d5:72:03:66:
                    e0:59:4c:74:b7:a1:0c:fb:97:0f:ae:92:42:65:44:
                    af:9d:14:55:73:4b:99:66:11:54:ea:58:cb:04:b0:
                    06:2e:98:f3:06:8c:cd:09:82:71:32:9b:cb:50:bc:
                    72:ae:3d:41:f4:c2:01:d2:65:60:ee:73:a7:cc:b0:
                    24:5a:38:73:54:b5:90:4e:2a:87:28:1c:74:99:ed:
                    a1:fb:c1:1f:37:f0:5f:6c:36:d3:e8:aa:72:60:e5:
                    19:85:c0:f7:c4:cb:d7:f2:5b:c3:27:f8:fc:d8:80:
                    e4:8b:d9:49:6f:42:d3:95:e1:0d:e5:86:fd:ef:74:
                    0b:0f:df:1b:a0:4e:f4:5b:d4:86:db:a4:cc:91:b7:
                    f6:7e:ce:55:85:41:90:49:6b:f5:cc:a2:8f:21:f0:
                    13:0d:d1:89:dd:bd:12:46:dd:7b:37:56:60:0d:15:
                    a0:d0:7f:9f:e6:40:80:25:19:8f:74:62:e4:5f:89:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:51:A3:E7:95:75:3E:04:6D:B4:3D:57:1C:E5:72:31:8E:6D:A2
            X509v3 Authority Key Identifier:
                keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:5a:66:f1:f3:75:c3:d2:fe:90:26:9b:4b:e5:aa:92:13:
         8c:24:fa:15:72:5b:bc:d8:a6:20:bd:e1:24:4b:d7:22:b7:4a:
         fe:1d:ab:02:67:88:fe:0a:55:c9:e6:76:c4:b4:4a:c3:28:9a:
         e5:91:ce:3f:d4:ae:31:30:d8:35:19:ec:08:8f:dd:3f:06:71:
         ef:cb:53:9f:4c:13:21:19:36:03:80:d8:4a:e6:0a:3d:70:76:
         1d:bc:3b:ed:28:29:bb:7d:45:99:f4:32:ce:b9:3c:c1:06:7f:
         8d:c9:8f:13:f0:4a:6d:4a:18:ab:86:6f:55:29:76:6d:fe:8f:
         d2:ab:35:2b:e3:87:79:d2:c8:83:0f:77:a7:4e:87:57:26:92:
         09:3e:66:92:c6:8e:05:a5:29:c5:01:bd:54:bf:d8:a3:30:85:
         d5:74:07:4f:92:5b:b0:e2:c8:c8:63:9e:98:37:e6:ff:46:64:
         37:7f:1f:70:2d:77:27:29:b5:20:29:65:7f:bf:3e:12:03:28:
         c9:92:5c:c3:05:18:85:2d:3b:d3:aa:d7:a4:1b:94:37:b8:4d:
         09:74:b7:c2:2c:fe:95:fa:43:27:62:4a:b7:8e:28:74:f2:62:
         56:22:79:29:e0:26:93:7d:72:7a:56:13:a1:4c:21:ad:ea:61:
         90:7f:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:48:37 2024 by rpki-client on console-fra.rpki-client.org