Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          22ZK4IzQbv3X3mllpS5hWS/+haN9RgcfNQKqwV8qT4M=
Subject key identifier:   96:F9:84:70:E0:5A:74:78:C2:7C:C2:20:A8:1D:26:59:04:8B:16:02
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       4286DBC97D2684FD06FF457C81CD7F28EAA609EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          0164
Signing time:             Sat 18 May 2024 14:21:13 +0000
Manifest this update:     Sat 18 May 2024 14:16:13 +0000
Manifest next update:     Tue 21 May 2024 14:47:13 +0000
Files and hashes:         1: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: N/0CCQrtIs9cyRDUl+96RgRPDuTdz3s/U/LFC7Cnp7A=)
                          2: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: Ce/uF1wslaPU+UkOVjvwRBAhpFRPYxVPspt36/lhzOE=)
                          3: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: uemijTEUzM6v+SLnBz5fQZNNPk+8+Dwu2ZxIazlAu94=)
                          4: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: jek+C8sMQzNOH2Uvvj48S7MAbmvC7ae719XDihYll7I=)
                          5: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: KaUmfYm5X8ONO0v0i6KTdheueL387WKlFu2dxgEp0AA=)
                          6: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: g6JZMbLo8ZzR+Bh08vbfjSMdJKOePfqALUQ7ovcWi1s=)
                          7: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 5eW3t8uUPs+jXnbyEP1zxoSgfSGt1go4lWsX/0vd/Pk=)
                          8: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: +PSqwlUrWijEPlPydqon0AzF9VNNHMihzMvp91u64D8=)
                          9: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: zy9XZRWWi2si3xymVYSghHJjN05D/rW4YaqMjp3cU8E=)
                          10: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: 7Po/DQ1ASl2XL79jwa1VDlaAobyhnzcX3mcJZK3kVug=)
                          11: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: /u1J0jxw0/CBuY30P8rvzQ6/4rkEqB7xBedzBnR2804=)
                          12: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: 5F6CvtinNR1p/itwp3z5OGOaBW/Hhk8aAN8U4BJCi0o=)
                          13: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: tF4gWzTFjz3gQ4A8VqOnZPaz7mLGb5Yk4LVsu0mMs8I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 14:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:db:c9:7d:26:84:fd:06:ff:45:7c:81:cd:7f:28:ea:a6:09:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: May 18 14:16:13 2024 GMT
            Not After : May 21 14:47:13 2024 GMT
        Subject: CN=96F98470E05A7478C27CC220A81D2659048B1602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2d:90:9a:44:67:dd:8a:5f:c6:c6:72:69:99:
                    a4:aa:86:6d:c6:9c:49:d9:ea:39:40:4e:fb:7f:6f:
                    60:5a:3d:8a:2f:09:60:0d:18:85:97:96:a5:14:d4:
                    71:82:36:ff:68:a0:54:51:b8:05:43:0a:2b:0b:18:
                    bc:c5:9e:8f:60:2a:5b:00:17:49:d1:bf:10:57:97:
                    21:71:63:f3:36:d9:86:ea:c2:16:15:e9:b6:09:5d:
                    fc:7e:7f:7c:c9:85:af:f6:19:bb:38:f3:7b:d1:e6:
                    8f:6e:6f:38:31:f1:5e:a0:87:f2:ad:73:48:8a:52:
                    38:98:83:74:53:62:08:c7:07:5a:f4:be:0f:b0:1d:
                    fd:85:b9:35:96:c5:6b:3d:a2:27:86:de:6d:35:8c:
                    41:89:ee:d9:fc:f1:d9:00:de:9b:f0:ba:27:15:b3:
                    db:19:cf:c3:05:98:57:c8:1f:cf:3b:2f:73:cb:b9:
                    d7:c0:6f:60:f5:df:14:d3:65:db:19:43:3a:55:03:
                    2f:f7:d9:56:a7:46:19:ca:33:c8:c2:04:e0:4e:95:
                    13:ae:8a:f8:e9:e9:c6:df:64:2d:d7:6a:cb:9c:21:
                    ba:c5:73:44:aa:28:72:7b:4a:1c:ef:6a:ff:36:bc:
                    cf:a5:3d:3a:c9:d1:64:99:0b:c9:4b:a8:42:04:ad:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:84:70:E0:5A:74:78:C2:7C:C2:20:A8:1D:26:59:04:8B:16:02
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:36:fe:57:c8:1f:bf:b7:68:5a:85:a9:a9:3f:97:57:4d:e4:
         c6:fa:50:b3:69:27:c6:c3:1e:72:13:de:64:11:fa:0d:df:a1:
         5f:d7:bd:e9:4d:37:f5:64:c7:32:af:d4:2e:e9:44:30:f6:cc:
         96:58:61:a9:d1:57:7a:a8:7e:71:1d:80:37:32:1c:49:9d:0d:
         d8:0c:28:2a:1c:2b:1d:82:08:ba:4b:1e:0d:f8:fc:b9:ac:e2:
         4e:08:e1:fb:2b:cc:be:23:26:5a:4e:24:6c:49:ba:cb:1a:cd:
         4f:9e:ea:27:fa:a4:47:a7:79:45:ff:df:45:51:b1:e6:d7:cb:
         81:55:8e:84:17:db:49:69:09:9b:72:6e:b5:f1:45:0b:eb:2a:
         90:b5:ba:62:72:09:f6:94:ee:2e:bd:fe:a8:82:5b:2f:72:53:
         2d:db:20:c6:8d:c0:dc:f8:48:2c:e3:09:72:f9:c9:bf:05:80:
         5b:0c:7c:47:3a:dc:ae:8c:f0:7b:c2:b3:81:a7:d4:1b:01:09:
         2f:76:74:58:bd:ec:27:48:e3:38:a8:89:15:22:a4:0f:80:17:
         77:2d:b6:99:e0:5e:98:3d:fd:ab:68:0d:9b:bd:47:59:0d:68:
         6c:f0:59:e9:a4:83:fe:30:ac:58:a2:ae:51:92:72:30:c8:10:
         92:5f:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:57:28 2024 by rpki-client on console-ams.rpki-client.org