Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
File:                     10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json)
Hash identifier:          E20yeJ45Z/4d9JdFgJ95Vmkt2BRehLM8H7lAMcFm/vE=
Subject key identifier:   24:91:2C:D6:F0:02:BA:D8:2A:F8:90:9E:05:CC:93:12:E0:CD:80:F3
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       2C2356137A9FC5A49CF5D561B76D5C417F1FC87B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
Manifest number:          042C
Signing time:             Fri 17 May 2024 08:00:54 +0000
Manifest this update:     Fri 17 May 2024 07:55:54 +0000
Manifest next update:     Mon 20 May 2024 16:51:54 +0000
Files and hashes:         1: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: J9RyaaTNCRmU97L0q9iRAICyoIS0qwuYrWC5xmDY390=)
                          2: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: 0IeURkURCpWgS6uNMT/joXSCdMH85OIKxL2ZLMj1Iws=)
                          3: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: 244R+SspUGW5Tv5tmLio99e9yTgoTmK7R8UorqIUM88=)
                          4: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: reN04t0gV2lp+6zZN5d0RWMbvDY2OURdiLu4ml495SA=)
                          5: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: CVdXRKY+HaSnbV209mW/YevCbF0J4nrt8WHxJ6sG1GE=)
                          6: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: 3c5Ja4TgTzrAAShWBJGTlNg+76vMnJ51J59sbambI7E=)
                          7: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: 0vpdE6DHegrqNT+/Qsn3DBQqx5M0mPohxF+mKaNGZ3U=)
                          8: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: Iok7hRcXztwp7EYcC+amZvIxSAW4YSXF50wFcAjVtJU=)
                          9: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: U3o9BQeYChXJ+0vmQJSkGGv7NcvxQseEIi+/CE0Bl/Q=)
                          10: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: yaMOQE+GIE5dBL7kDlXQjcbuyQ2t5GddvDcBn6rZ/h4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 14:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:56:13:7a:9f:c5:a4:9c:f5:d5:61:b7:6d:5c:41:7f:1f:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: May 17 07:55:54 2024 GMT
            Not After : May 20 16:51:54 2024 GMT
        Subject: CN=24912CD6F002BAD82AF8909E05CC9312E0CD80F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:a6:fa:d1:8f:98:a1:95:18:3b:6f:91:11:
                    89:3b:54:60:c1:63:99:b1:93:d1:83:a3:4d:61:ee:
                    bb:29:75:10:03:01:a2:e8:15:cf:3a:d4:d6:d4:8f:
                    e2:dc:a5:1d:00:1e:33:e0:23:62:80:ae:1b:0b:50:
                    fa:f4:ba:93:37:88:a5:d6:a0:57:b8:c4:50:55:cc:
                    fe:ed:ea:1f:18:ae:dd:60:b0:11:bc:0b:5e:c9:d5:
                    54:56:74:f6:ce:d4:7f:c8:6b:17:b1:3a:e7:0a:2b:
                    df:b0:54:00:bd:ab:d2:19:47:57:fb:01:05:ba:14:
                    85:6c:4f:cf:6b:2c:74:5f:45:d4:1d:89:a9:75:49:
                    14:ef:e3:e6:ea:d9:04:32:0d:21:5d:b8:69:8a:e9:
                    e8:f7:c6:54:1b:f9:8e:17:f2:57:76:c8:f0:e1:6f:
                    4a:fc:e2:67:a2:bd:10:ea:f7:a2:1d:2f:b7:71:c9:
                    c9:38:ee:ee:43:4c:4b:d2:13:fa:c8:21:a5:13:93:
                    c7:be:c0:6e:63:38:30:85:db:18:df:9a:01:15:41:
                    81:f8:0e:67:5b:b7:3c:18:96:0b:f5:15:8b:9b:31:
                    ab:49:ac:ba:d0:c9:3c:f1:dd:cf:d4:17:ee:75:33:
                    c5:63:a6:46:c6:2a:da:b1:f8:00:03:15:59:65:c7:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:91:2C:D6:F0:02:BA:D8:2A:F8:90:9E:05:CC:93:12:E0:CD:80:F3
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:43:8e:03:30:fa:23:14:5b:a3:98:c6:87:b3:f4:2c:0f:b7:
         90:c0:93:8b:4c:1a:df:33:0b:58:b3:d6:3a:00:9d:de:eb:00:
         08:25:9c:95:f3:ab:ed:bb:e1:85:c9:be:9a:88:21:04:75:a9:
         43:41:29:f3:7d:e0:c5:ce:99:19:15:6d:f4:5e:3e:17:53:51:
         a7:2f:ac:89:a8:c9:71:4a:3b:21:f1:7f:37:5c:74:c5:a7:f9:
         f8:63:e4:3a:fb:25:ec:8e:12:92:16:57:08:c4:30:0a:14:66:
         8c:fd:c2:a0:ca:98:6e:89:1c:b6:e5:4a:ea:94:82:cc:75:65:
         ec:0c:17:66:87:b8:28:ed:1f:97:d4:c7:9b:ad:59:46:82:ba:
         9a:68:35:0e:a5:f4:6e:36:1c:e5:52:2c:64:34:31:37:ff:ad:
         8c:58:5a:a1:cb:61:6a:cc:d9:21:37:a6:42:64:27:1e:9f:11:
         43:04:a1:96:20:9c:0a:60:e3:06:81:c4:1e:35:19:d2:32:06:
         64:bf:30:65:62:fd:d9:36:e7:98:3a:52:8e:56:fd:64:06:13:
         58:e1:5e:6a:5c:63:d0:e8:1e:a3:bc:88:4b:12:de:93:06:e1:
         96:46:a1:8a:90:74:a4:7c:e5:e8:f3:71:05:61:7b:74:2f:f3:
         af:a0:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:09:21 2024 by rpki-client on console-fra.rpki-client.org