Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
File:                     BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json)
Hash identifier:          vOJ6bKTsNWOsQiAG48KOjVEAmR1ufM5GN1NtaKtOhtw=
Subject key identifier:   DA:FF:C2:D6:26:58:02:0F:02:E1:60:5D:EB:A1:36:A5:E9:87:FC:33
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Certificate issuer:       /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial:       5D76087CF9AB1EF380973440C287B36959445ABE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
Manifest number:          029E
Signing time:             Sun 19 May 2024 03:10:44 +0000
Manifest this update:     Sun 19 May 2024 03:05:44 +0000
Manifest next update:     Wed 22 May 2024 06:26:44 +0000
Files and hashes:         1: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: PNFhqHOjICkZR9JutKz/EjMuAL5b2RsvSbqI2c9tkGQ=)
                          2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: wD7K3L0wZgkXzx2g24s15kQ0Tlwyq9mWDYoDHZigfT4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
                          rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:76:08:7c:f9:ab:1e:f3:80:97:34:40:c2:87:b3:69:59:44:5a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
        Validity
            Not Before: May 19 03:05:44 2024 GMT
            Not After : May 22 06:26:44 2024 GMT
        Subject: CN=DAFFC2D62658020F02E1605DEBA136A5E987FC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:95:de:15:0c:0d:08:cd:ff:37:71:e8:e1:
                    8c:73:5a:d9:ae:80:c7:41:f8:74:ec:f3:5d:74:be:
                    83:f6:77:32:22:df:15:1d:e0:65:00:bc:e1:f8:ba:
                    57:8f:64:2a:fa:48:6b:af:58:46:d2:23:08:24:9a:
                    82:97:4b:5a:b9:a3:40:cc:db:b4:e8:42:41:24:9a:
                    6c:72:9f:1d:d3:41:09:c7:23:18:ac:c9:e2:50:aa:
                    9f:db:16:ca:ae:ec:9f:ec:8a:68:4d:11:7c:9b:7b:
                    f5:18:f8:e1:6c:0c:cf:e8:5a:2f:83:72:ce:6a:c7:
                    96:77:5b:a7:f9:f7:de:7b:54:3b:48:27:c7:d1:af:
                    5e:53:a9:ca:5f:34:d2:c5:91:90:bd:65:b7:8b:c6:
                    91:d7:8c:53:ef:ff:44:61:2e:8b:83:01:f2:9b:b3:
                    14:49:b6:61:dd:d1:cf:8f:d0:88:dd:9d:ba:ed:44:
                    94:ec:59:f5:58:d7:7a:d1:3e:72:aa:df:0d:a8:f6:
                    9b:73:68:a5:ad:59:a7:af:bb:a7:7b:4e:93:8a:fe:
                    d0:a2:37:24:8c:45:a9:d5:68:9b:34:5d:d7:8a:db:
                    ba:9e:a9:c1:52:1b:12:d0:e9:7a:6b:93:7d:e2:5e:
                    ab:29:02:7b:d2:45:98:64:fa:ac:ce:65:88:6d:2c:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:C2:D6:26:58:02:0F:02:E1:60:5D:EB:A1:36:A5:E9:87:FC:33
            X509v3 Authority Key Identifier:
                keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:94:44:2f:bd:7e:24:1f:f0:4f:41:17:bb:51:8a:54:de:ed:
         ea:e0:51:43:73:b2:ae:e2:a7:01:cc:62:ce:f5:25:51:ee:f1:
         cd:2a:7f:9d:a2:ea:43:f3:5c:aa:59:81:15:bb:e5:fd:d3:dd:
         71:23:e1:77:ca:67:66:1f:7b:9b:19:bb:27:58:5b:e0:99:98:
         f5:e8:04:ff:f7:0a:ef:33:c6:51:4f:ae:ab:de:74:13:45:ef:
         4b:2b:0b:0a:e1:97:60:ea:7c:50:b3:d4:e8:57:85:0d:ec:66:
         f0:21:e2:01:b8:29:e9:2d:b9:13:35:3a:19:fd:d6:76:89:6b:
         24:4e:bd:64:a4:28:fc:5c:c7:de:d8:ca:80:d2:5d:2b:0d:b1:
         da:bd:16:1e:08:11:2a:ee:45:f2:30:6c:3b:11:bc:4a:a7:bb:
         33:58:51:94:96:5b:3f:bd:76:8c:fb:3e:f4:ba:b1:4f:b7:43:
         d3:18:d7:db:85:d3:2d:d0:a9:c1:01:68:55:c7:d9:1b:eb:0a:
         13:a1:de:70:ae:c3:79:28:22:d6:d4:7d:be:e2:c3:9b:a1:1b:
         fe:75:e8:89:98:b6:34:62:11:c4:77:08:fd:f8:eb:ab:41:6f:
         ea:c9:95:27:52:1b:07:e5:ce:ba:6c:5a:56:25:2a:b1:b1:68:
         b0:03:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:18 2024 by rpki-client on console-fra.rpki-client.org