Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File:                     89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier:          NWv1VY0guWc/KF+uuC+ESaQh6tSCc0tlVu8e8W22t+4=
Subject key identifier:   9D:6D:63:1E:6C:DF:33:AC:18:96:DB:AB:F1:E4:F3:E0:56:E5:79:49
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       6C202DC862E1E37BC302E548AB378C24160A3302
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number:          0406
Signing time:             Sun 19 May 2024 04:51:39 +0000
Manifest this update:     Sun 19 May 2024 04:46:39 +0000
Manifest next update:     Wed 22 May 2024 14:16:39 +0000
Files and hashes:         1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: KwEqf+z4CK61WiiU/lUVYXB5nQ5F0Dy9wrpP+J+VJxU=)
                          2: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: Cn1QziE67pMt8b0HUH54kIFtb2lfv1zbC5esKEHqTfo=)
                          3: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: FzC6iy0ZKERkBW2HPLnllvR+cZ6XdZJswEzu55/0vLg=)
                          4: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: XuQGeDeRqoJdzzoUAZWITzT6vJEnrodh3pANTr3EBnY=)
                          5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: vrQUHtmrpEkk/iDmbB+uHEkm7uM2w4TQx9m9dPyp6vU=)
                          6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: 8/0SjjzNEyDp/MoMvXfi1pnsjLhs1tqUD5z9JQqkSr8=)
                          7: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 243JnWGuYAWBe+8aR1Pw/F7EH0e3LkBWBZ9LHYQ36TE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
                          rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:20:2d:c8:62:e1:e3:7b:c3:02:e5:48:ab:37:8c:24:16:0a:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: May 19 04:46:39 2024 GMT
            Not After : May 22 14:16:39 2024 GMT
        Subject: CN=9D6D631E6CDF33AC1896DBABF1E4F3E056E57949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:db:cd:6f:e3:16:fd:b5:c6:76:22:13:c1:
                    29:73:e9:ea:7a:04:3a:f6:fb:1b:83:10:3e:74:22:
                    03:00:19:c3:ec:c9:9f:a9:06:72:02:81:14:39:58:
                    e3:28:c9:a4:b7:12:e4:fe:6c:56:89:12:d3:e4:87:
                    bd:da:bd:39:f3:0e:33:eb:1e:c4:76:ea:f9:5b:fc:
                    cc:83:82:ef:c6:5e:8d:64:5c:2d:96:94:9e:b4:21:
                    00:31:35:b9:b1:33:46:76:43:fc:2f:e7:0a:67:09:
                    7b:69:ec:b1:5c:ac:68:af:ce:6e:19:a8:ec:9b:eb:
                    10:fc:8e:8c:db:7a:d2:09:92:47:48:80:85:c0:71:
                    aa:be:8b:4c:9e:81:a7:b0:be:cb:6f:0f:10:e5:03:
                    48:3d:7e:00:2e:30:79:db:a3:36:bd:d5:44:ff:86:
                    44:7f:ad:8c:28:c5:59:6b:2d:89:0b:4f:0e:28:9c:
                    3b:ad:12:79:b2:81:d6:5c:6e:18:7d:95:ad:31:a2:
                    e2:e4:f1:4a:4f:74:d0:ed:b2:c9:17:2e:aa:8c:72:
                    42:f3:8a:a4:04:7e:8f:a0:54:87:fe:e4:51:f3:23:
                    48:5e:46:97:5f:55:c5:c9:49:6f:7b:d9:3d:b3:a0:
                    39:fc:5a:9c:5b:78:b5:2d:22:0c:48:19:3f:99:32:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:63:1E:6C:DF:33:AC:18:96:DB:AB:F1:E4:F3:E0:56:E5:79:49
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:27:78:33:ad:78:c1:b6:a9:47:88:88:63:5f:8d:d6:9c:
         d0:4b:8a:7a:85:f0:a1:73:27:89:2e:55:23:47:c1:7e:0e:57:
         fa:5a:9d:6b:95:6f:2e:55:fb:28:70:36:f8:1e:1d:a0:38:a7:
         d2:87:b4:d6:48:0a:bf:a7:03:27:da:56:8a:31:2f:38:5b:7d:
         ba:8c:99:94:ad:fc:9f:f4:9c:10:c9:e4:8c:04:fc:14:5c:91:
         8c:da:c6:d9:61:d2:77:02:b8:af:27:00:13:ea:62:d7:91:81:
         c8:1d:90:2e:2e:79:4f:16:91:5c:43:8b:18:37:0a:3f:91:d3:
         c6:71:7d:8e:9e:a1:e5:63:14:31:8d:78:3b:3b:d9:41:3b:cc:
         17:76:7d:82:62:03:f1:10:8d:2f:dc:0b:8a:89:64:18:7c:de:
         a6:83:dd:2c:7b:d4:d9:78:29:06:76:31:8c:63:72:35:4b:22:
         68:a3:19:74:55:95:7e:8e:91:21:71:d2:b6:b0:d3:d2:2f:ca:
         a3:b7:fb:e6:a8:c9:89:4d:c7:ef:b5:3e:da:61:cd:ff:b4:51:
         b9:3c:57:5a:42:00:88:2f:14:78:bd:54:52:6d:c9:67:64:8d:
         e9:fc:a6:95:26:81:ea:5f:97:04:9e:04:46:f6:d0:fd:a4:bc:
         79:36:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:08 2024 by rpki-client on console-ams.rpki-client.org