Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
File:                     4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json)
Hash identifier:          JxY0kJjXCZ6LP4Myqb8CLyvQEkgv4mIi2eQhMZ18d5Y=
Subject key identifier:   EC:74:14:AF:42:46:40:8D:1C:BE:FF:93:FD:AD:1D:0D:E5:A1:60:7C
Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
Certificate issuer:       /CN=4E4C9A47789406B9086713C5B821524B664E7C90
Certificate serial:       75AF23384DC753DC891368823D5EB37AF3E7D586
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
Manifest number:          57
Signing time:             Fri 17 May 2024 19:01:00 +0000
Manifest this update:     Fri 17 May 2024 18:56:00 +0000
Manifest next update:     Mon 20 May 2024 21:03:00 +0000
Files and hashes:         1: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: gXTQ4iT2+M95jzjV19QqT3H5eF4qOuCe6B3fvF/CJrk=)
                          2: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: cl6morh0VOXEcepOZ67ITRhP9Pzfl7IZE+ByluTGIk8=)
                          3: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: Z6hj0NVqtzwOzsLAk+476cwD8hkgbVFfuN9FI7CAjoQ=)
                          4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: bouZAasMgOPM9QXaYDi4csM+kLJSSiEoYCEC3ZJXQLg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
                          rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 21:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:af:23:38:4d:c7:53:dc:89:13:68:82:3d:5e:b3:7a:f3:e7:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90
        Validity
            Not Before: May 17 18:56:00 2024 GMT
            Not After : May 20 21:03:00 2024 GMT
        Subject: CN=EC7414AF4246408D1CBEFF93FDAD1D0DE5A1607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:db:7f:fb:83:e2:aa:69:3e:24:d1:83:4d:
                    7d:93:49:16:f2:c8:52:84:5e:6b:82:d3:af:49:cd:
                    b6:02:18:41:f6:98:bf:84:b2:9c:b3:92:09:ea:67:
                    c0:cd:d6:b0:75:cd:10:77:8e:19:f7:6c:54:db:25:
                    e5:51:fb:5b:a4:a0:95:a2:04:3a:0d:e9:ce:7a:fa:
                    3e:ab:0f:77:8e:70:75:6c:50:69:8c:34:e9:89:10:
                    e1:38:50:2c:81:32:bb:c7:c1:13:61:d2:f6:f7:f6:
                    6d:41:7e:22:df:9d:be:75:d2:a8:74:18:47:4a:88:
                    32:5b:02:8a:53:0e:3a:dd:80:a9:68:d4:cb:80:c5:
                    e1:8b:7c:66:3c:63:9c:ff:e6:f5:03:68:80:50:39:
                    a5:6b:83:2b:1c:73:15:95:6e:41:dd:9b:a2:20:31:
                    96:18:73:be:85:22:3f:3e:9a:ab:a4:24:9d:fe:3f:
                    ec:3c:20:3d:80:5e:fc:44:54:a0:39:f9:a9:ef:98:
                    88:77:74:84:2d:d3:b3:37:6b:5d:87:6f:c2:7c:38:
                    56:ce:99:e7:74:f0:7e:aa:d5:af:68:9d:45:93:f8:
                    c4:b7:8e:91:f8:90:60:41:46:a1:9f:ba:6a:c1:1e:
                    04:2d:7b:f2:35:2c:47:a8:cb:8e:be:ca:2f:fb:e1:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:74:14:AF:42:46:40:8D:1C:BE:FF:93:FD:AD:1D:0D:E5:A1:60:7C
            X509v3 Authority Key Identifier:
                keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e4:96:0a:75:a8:b4:b2:a1:f1:56:14:3d:10:64:0c:14:ec:
         52:d1:90:58:0f:7a:31:ee:22:a5:42:32:dc:3a:49:8e:b4:91:
         75:a9:17:67:41:6e:2a:1f:11:2f:ed:30:53:35:ca:61:8f:e3:
         4d:32:23:cc:4a:7a:0a:81:e4:58:1f:de:a7:68:4a:2f:92:f8:
         e3:b3:c3:8e:3d:53:8c:65:33:33:13:e5:3f:7b:bb:65:18:f2:
         3d:70:ff:ff:e6:e7:bb:9d:6f:b1:f6:a5:e0:17:8b:f3:0f:43:
         de:c7:3f:ca:85:af:86:9e:8e:b6:f9:4d:15:e9:49:a8:0f:f5:
         d1:25:76:08:b8:21:43:6c:8b:22:ca:d8:68:f1:cc:7b:48:48:
         10:ed:33:c0:63:54:33:ea:cf:90:f0:13:7b:d3:82:6d:51:5d:
         47:21:fc:1f:a3:66:b9:ac:dc:12:83:94:d7:0b:28:c9:67:d5:
         db:d3:29:19:d8:a2:97:9d:f5:2f:ae:ba:17:86:e0:30:2f:ee:
         21:2e:59:fb:b9:d5:1d:96:93:ca:24:24:c1:c1:ce:9e:2d:a0:
         ce:3b:02:9c:90:24:58:66:de:31:99:07:0a:ef:bb:6f:fb:4b:
         79:5e:9e:65:2a:e3:d2:d8:79:64:a6:c0:48:af:e2:94:59:40:
         9e:64:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:44 2024 by rpki-client on console-fra.rpki-client.org