Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
File:                     0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json)
Hash identifier:          IY1naHNVDMsgvbAdnPtl2dp++6I0W26lTCVRVbV1+0U=
Subject key identifier:   7C:F2:36:C5:E4:0D:0D:18:5C:28:A4:F2:94:2C:61:74:18:EE:E0:DC
Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8
Certificate issuer:       /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
Certificate serial:       0B9629B46F73D90E166B718305C8286F56EA3230
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
Manifest number:          0157
Signing time:             Sun 19 May 2024 12:41:08 +0000
Manifest this update:     Sun 19 May 2024 12:36:08 +0000
Manifest next update:     Wed 22 May 2024 16:14:08 +0000
Files and hashes:         1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: vrVBE6r91RnYtDeZVZEplnWcKuGhKUa5LpXiWezOt2c=)
                          2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: gKtReiEl37VBhnvC7E2H0ZWtnIS/HuHIhZpuLdf4MTM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl
                          rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:29:b4:6f:73:d9:0e:16:6b:71:83:05:c8:28:6f:56:ea:32:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
        Validity
            Not Before: May 19 12:36:08 2024 GMT
            Not After : May 22 16:14:08 2024 GMT
        Subject: CN=7CF236C5E40D0D185C28A4F2942C617418EEE0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:b0:ac:33:58:cd:3a:c3:d0:d1:36:c2:81:
                    31:eb:0f:23:46:67:e1:dc:05:b7:72:b2:21:70:70:
                    5a:7c:f9:35:71:43:5d:af:05:63:8d:ab:91:16:e6:
                    a6:b4:20:9b:d0:0e:c7:f2:2d:dc:6d:b2:50:94:3e:
                    10:92:b9:4d:b1:f4:bc:3c:6c:79:72:c8:02:d9:66:
                    7a:86:25:c6:5b:0c:2c:ea:f2:53:77:93:29:42:e4:
                    70:16:3c:16:0f:98:db:f5:12:ee:4e:12:bb:1a:7e:
                    32:5b:62:c5:30:9a:56:c0:2a:6e:ff:13:37:22:23:
                    a7:4e:12:44:16:3d:8c:fc:d2:d5:33:37:1f:d0:6b:
                    6e:ca:29:72:fe:1d:52:5b:fc:dd:b0:34:24:5d:2e:
                    89:57:a9:a3:8d:1d:7f:f2:cb:8e:f5:92:88:b3:e9:
                    04:c4:fa:77:a7:63:99:74:b9:0a:71:f6:24:c1:8d:
                    18:ef:b9:04:55:3c:9b:e5:24:39:ad:62:2f:b3:57:
                    8c:4a:0e:8e:b7:b7:5e:5b:41:9d:69:c5:ba:e3:f8:
                    35:77:c4:e0:fc:4c:a1:38:e7:6e:c2:76:7e:33:70:
                    83:68:d9:02:11:4c:91:45:1e:60:c6:e0:67:6b:99:
                    ee:ca:27:e6:41:f4:15:ec:5b:19:0b:94:00:a0:38:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:36:C5:E4:0D:0D:18:5C:28:A4:F2:94:2C:61:74:18:EE:E0:DC
            X509v3 Authority Key Identifier:
                keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:ba:ec:73:2e:ce:8f:32:43:8b:70:88:7c:84:c7:f5:9c:
         2c:77:e6:0b:9f:18:a2:80:c1:c8:c3:ed:9b:47:53:6f:5b:e9:
         2f:4e:4f:43:cb:0d:2d:45:27:40:1a:60:d9:96:a7:4c:23:f7:
         85:b2:fe:8c:dc:69:c0:44:b9:83:09:8e:7f:db:27:4e:3b:63:
         75:76:c2:1f:a2:9c:c2:e7:0e:3c:9d:1b:3d:e5:19:07:49:90:
         7d:ab:30:76:e3:a3:25:96:7f:6e:9b:2c:73:36:f7:90:c4:b3:
         df:c3:a9:9f:67:d7:ee:f6:7b:d3:16:a1:ce:76:cf:7b:f4:45:
         a1:7c:4d:f7:45:28:41:2b:e9:df:d3:f6:d3:68:3b:e2:60:26:
         27:75:7c:1e:18:cc:6b:65:45:82:85:e7:02:62:b6:3e:44:fc:
         46:38:1b:14:ac:e4:f5:f5:94:e1:d0:8f:03:e5:2d:99:d6:0b:
         04:89:04:09:c3:4c:87:d9:c2:f6:00:34:2a:b0:72:a9:9d:b0:
         d6:c4:ef:4f:ae:9a:ce:b4:ba:a3:28:90:0b:54:6f:f2:95:e7:
         4e:e4:99:92:3b:fe:25:37:44:44:cd:04:bd:13:c0:1d:3c:43:
         de:c1:69:3c:55:cf:24:56:0e:f8:a6:6f:bb:13:8f:af:62:e0:
         a8:e3:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:18:10 2024 by rpki-client on console-fra.rpki-client.org