Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          Zx0APr1TPamtQfoQejjbJm7IdJaQyzwHbfYaRdJePfA=
Subject key identifier:   F9:2E:69:5D:66:71:2A:C1:B5:CD:20:D2:E7:68:B7:61:92:36:35:1B
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       47AAB260BD00CE44F8AB0A093A663A337146B4C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          99
Signing time:             Sun 19 May 2024 05:41:01 +0000
Manifest this update:     Sun 19 May 2024 05:36:01 +0000
Manifest next update:     Wed 22 May 2024 08:24:01 +0000
Files and hashes:         1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: gsr0WDeuK0bw8etUm8ylFcn5VvrUSnc17Jtf7enN9jY=)
                          2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: F7wg9tVF9+A6ajriSvm9GoJ0iIfddOHeD28sbMYLP4g=)
                          3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: bX64GXmCtfYc9LnVGURWeEZhE1a24uldR96isXIgDiw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:b2:60:bd:00:ce:44:f8:ab:0a:09:3a:66:3a:33:71:46:b4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: May 19 05:36:01 2024 GMT
            Not After : May 22 08:24:01 2024 GMT
        Subject: CN=F92E695D66712AC1B5CD20D2E768B7619236351B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:fb:68:2b:c6:9c:9c:08:91:12:5b:d4:f5:
                    bd:55:fa:44:b0:34:39:b5:bd:78:4b:b9:a4:cb:58:
                    0b:2e:e0:88:64:b0:44:ea:42:de:f0:dc:72:ab:52:
                    b5:a5:5f:b6:d9:70:84:9b:ba:28:b7:02:33:87:4c:
                    aa:8b:b7:5f:aa:2e:bb:b4:49:4b:b9:e2:b1:e7:ae:
                    ba:e3:fe:f3:3d:87:7d:25:f4:c9:96:49:a8:60:3e:
                    37:71:32:d0:49:5d:9a:dc:89:61:a6:98:b0:5d:36:
                    36:c8:1b:6b:65:ec:54:cd:2d:d3:c7:ab:2e:55:4c:
                    b7:52:5d:70:41:82:7b:d3:cb:dd:a4:8a:54:52:df:
                    61:91:10:ab:64:6b:b2:c1:eb:59:e3:e6:19:a8:f6:
                    ac:91:71:66:5f:e6:e7:e7:ce:a6:ee:92:8f:b5:45:
                    79:a7:15:ce:a0:ea:01:f1:81:fa:bb:ce:33:c2:9c:
                    77:04:1a:c0:da:76:d8:a7:d0:34:a9:9c:07:d8:1e:
                    5c:fe:2b:34:1d:9b:ad:cd:06:7f:23:f7:38:6b:fd:
                    52:ac:6e:92:81:8a:ae:49:1a:1d:6c:36:3d:c4:30:
                    b3:63:7c:60:72:d1:3c:e8:4e:8f:ee:c0:85:94:82:
                    88:1c:53:c1:f7:33:c1:cc:db:85:60:1d:14:d3:f2:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2E:69:5D:66:71:2A:C1:B5:CD:20:D2:E7:68:B7:61:92:36:35:1B
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:80:42:73:14:43:0d:64:94:e4:dd:51:20:f0:d3:95:0c:41:
         8f:37:8f:6d:cd:07:c6:e4:83:d5:ae:63:78:41:13:02:2b:f6:
         d3:40:0a:a1:b4:7a:d1:50:7c:69:a9:93:3a:79:33:a3:b2:54:
         c2:82:47:6a:54:e7:7f:8e:83:59:eb:8c:af:d2:6a:f3:ca:05:
         aa:b3:03:4a:5f:dd:29:ff:8e:1d:29:e6:01:8a:5d:7d:72:a1:
         5d:e5:3f:6d:99:fa:03:70:74:1a:e4:0e:36:be:f5:ec:90:f6:
         fe:7b:72:3a:1e:4b:09:6e:e3:8c:8c:8a:3e:33:a3:34:f0:04:
         51:2b:6d:82:86:29:88:0c:07:20:85:b7:4c:0a:d1:0c:db:0c:
         e5:4b:be:80:bf:95:79:a5:19:dd:3e:d7:9b:d7:9a:60:8a:8d:
         db:44:94:55:f7:49:08:d9:27:9d:e5:4c:ee:09:76:7c:11:95:
         2a:e6:de:4b:4e:52:eb:4f:89:d6:8b:4f:6c:e6:cc:1e:c2:db:
         c2:f4:63:4a:4d:78:77:39:81:8a:23:42:b6:65:45:d2:8d:5d:
         db:53:7e:78:95:79:ba:2e:1c:9f:fc:c8:75:b2:97:16:f5:5d:
         81:cb:3b:d8:70:cf:cc:5b:e4:42:5e:23:d2:e2:93:dd:b5:4a:
         d8:42:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:08 2024 by rpki-client on console-ams.rpki-client.org