Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
File:                     3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json)
Hash identifier:          VEPlxkrpg0Nf2NWH0M1xLve7YrTI3XKQt3R0xcI4UeA=
Subject key identifier:   5A:25:D2:F2:05:84:24:7D:AB:81:F4:A0:A8:0E:1A:DB:D0:CD:AB:3E
Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27
Certificate issuer:       /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
Certificate serial:       06BFFA822D72E885935E3CACC3D579A34C5BE7F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
Manifest number:          0100
Signing time:             Sun 19 May 2024 12:30:03 +0000
Manifest this update:     Sun 19 May 2024 12:25:03 +0000
Manifest next update:     Wed 22 May 2024 20:04:03 +0000
Files and hashes:         1: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: fXFh6H2CcDrl0SfJs+pKuvyroReRqKKX7b5CJT8tqnc=)
                          2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 3dzgEKFisudUodQsi3UyLTZcAAk6dQWYZrejtGpsGIo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl
                          rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bf:fa:82:2d:72:e8:85:93:5e:3c:ac:c3:d5:79:a3:4c:5b:e7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
        Validity
            Not Before: May 19 12:25:03 2024 GMT
            Not After : May 22 20:04:03 2024 GMT
        Subject: CN=5A25D2F20584247DAB81F4A0A80E1ADBD0CDAB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:d7:30:7c:1d:4c:77:44:9d:73:bd:d2:56:
                    ce:28:44:3e:26:49:bd:bb:f5:b5:a2:03:c5:af:f1:
                    a2:02:e5:78:0e:86:63:7f:b4:88:26:72:43:33:c4:
                    3f:60:8d:ba:41:d8:87:4c:7f:7d:c9:d9:b6:64:4c:
                    86:f2:4d:f2:90:24:76:23:8e:16:fc:33:5c:f4:b8:
                    77:32:11:a8:98:85:3a:70:f7:81:71:8c:aa:81:eb:
                    72:b6:42:69:ba:a1:9a:ee:6b:14:a3:29:e1:ed:d6:
                    51:ae:5b:0e:81:28:88:e9:bb:41:26:15:ea:f5:f5:
                    1f:70:4c:ac:75:63:ff:91:94:08:61:ca:7b:23:27:
                    cb:ce:05:59:49:aa:d7:54:22:da:70:d0:c8:a4:5a:
                    4e:1e:f7:dc:f4:75:1e:44:6b:73:7f:c6:50:d2:9e:
                    4a:a3:1f:0c:f7:7f:8a:87:ea:e6:3a:f9:9b:fb:fd:
                    ec:58:38:19:56:b1:84:a2:db:f7:af:d9:d0:aa:e4:
                    2f:2e:51:56:37:66:1e:1a:a1:18:c7:4f:79:41:ef:
                    50:0d:7d:f3:d1:1c:9a:e1:00:d1:39:a3:c1:ba:6f:
                    3a:76:35:d5:46:d5:d7:a5:f2:8e:9c:5d:e6:d3:82:
                    ac:a2:08:23:3c:31:a2:9c:10:6a:c1:f7:d2:5d:ba:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:D2:F2:05:84:24:7D:AB:81:F4:A0:A8:0E:1A:DB:D0:CD:AB:3E
            X509v3 Authority Key Identifier:
                keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:ea:31:e8:59:af:e6:12:89:9f:ba:50:d9:ab:19:bd:1f:
         f7:7c:22:55:6e:d8:18:01:47:ca:a9:ed:e7:f5:4a:9a:90:dd:
         48:e8:2d:7e:f0:d4:cb:e6:16:3a:9d:79:78:0d:5d:91:1f:c7:
         0b:0c:85:86:46:e2:cb:7d:1f:26:d6:23:cd:22:52:e2:be:8b:
         65:00:04:4a:cc:c5:77:b2:ba:7a:df:73:0e:32:44:a4:ee:bc:
         fe:3d:f1:30:b7:bc:e8:4d:87:d8:94:d4:f4:0b:21:e6:f4:c1:
         9a:6d:3b:9c:41:fe:26:40:4c:fb:39:50:b1:9c:be:95:96:6c:
         d4:96:94:de:4d:a1:7b:44:50:fa:5a:44:89:d0:a0:b6:fc:b0:
         20:77:a0:99:7a:3e:d0:0f:91:32:12:be:c4:41:1b:23:de:e9:
         54:ac:d0:42:b7:93:65:28:08:10:e4:a5:c9:3e:68:82:dc:37:
         a2:bf:13:f3:d0:f0:5a:00:30:fc:07:b6:c0:20:b3:5f:44:11:
         ff:03:dd:1c:28:a0:28:9a:7b:e3:da:cf:50:69:f3:7a:1d:fd:
         20:d4:95:f6:1f:1d:63:0a:0c:5d:b8:2e:59:a1:1d:e5:b0:8d:
         9e:44:d5:79:50:b1:46:4e:34:7e:21:17:28:28:fc:f9:35:ac:
         f8:d7:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:18:10 2024 by rpki-client on console-fra.rpki-client.org