Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
File:                     8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json)
Hash identifier:          +DObXd1haMHdqJ0ay5o3SgVF3O7BjUukMTYagR/TGxs=
Subject key identifier:   99:D2:B8:51:69:63:80:2E:B9:3E:69:01:2E:C8:65:78:DB:8B:90:2A
Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F
Certificate issuer:       /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
Certificate serial:       2A70E6E7DB2C7B94DF7BFF0E9A4F6FE3B9324CA7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
Manifest number:          0163
Signing time:             Tue 28 May 2024 14:01:37 +0000
Manifest this update:     Tue 28 May 2024 13:56:37 +0000
Manifest next update:     Fri 31 May 2024 21:40:37 +0000
Files and hashes:         1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: zJ826XgBLJsCfKg6akln0bW5oSdqChPSZHLfiSeOJc0=)
                          2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: UwmEesFkAtP3buQSmNUTpKRtC3ZcjA/aCJWtPGHIXGc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl
                          rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 17:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:70:e6:e7:db:2c:7b:94:df:7b:ff:0e:9a:4f:6f:e3:b9:32:4c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
        Validity
            Not Before: May 28 13:56:37 2024 GMT
            Not After : May 31 21:40:37 2024 GMT
        Subject: CN=99D2B8516963802EB93E69012EC86578DB8B902A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:19:20:1f:a8:ed:bd:8d:a6:66:5e:ad:3c:
                    91:dc:eb:34:33:36:fd:b4:47:56:03:61:13:18:e7:
                    7e:3f:df:85:09:a3:a0:de:34:78:07:c8:cb:f5:47:
                    05:1b:2e:a8:b3:c7:0e:a5:d6:c3:1b:32:95:61:f9:
                    a2:b4:a1:f7:e1:4d:0e:5b:de:0a:f5:3b:52:b6:de:
                    d0:1c:79:1d:bd:1d:bb:a2:ec:76:9b:ce:3d:bf:6b:
                    ae:e1:c3:f1:5b:b5:fa:45:26:ee:73:b9:ba:e1:60:
                    49:21:04:ac:fb:f4:4e:3e:57:2a:a2:c1:17:5b:c0:
                    12:3d:40:c0:b2:94:7f:1c:d8:44:ac:9e:ae:50:25:
                    e8:45:be:dc:9b:77:23:79:bb:0a:4a:c7:62:d8:71:
                    06:a3:a8:e1:31:74:c7:37:a2:15:85:74:a3:45:bf:
                    c4:73:68:9e:37:0a:f3:46:bf:46:d3:14:6a:01:f1:
                    0a:f0:e7:d3:6b:55:66:51:1e:d8:81:31:32:25:63:
                    a9:61:6b:1e:b3:6f:ca:49:35:40:02:62:18:68:99:
                    d4:df:58:9a:fb:ff:2a:31:42:bd:3f:d0:b2:d0:ed:
                    72:c4:16:ce:a8:fd:32:88:20:7b:7a:b8:ec:c4:9e:
                    4b:bf:dd:46:aa:86:fd:5a:24:fb:63:c1:ea:12:38:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:B8:51:69:63:80:2E:B9:3E:69:01:2E:C8:65:78:DB:8B:90:2A
            X509v3 Authority Key Identifier:
                keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b9:d3:08:2d:e6:c8:91:8e:1b:d1:a2:95:46:6d:ba:2b:4f:
         39:2e:80:0c:2e:3d:78:23:72:e3:26:d8:c9:1a:2a:47:02:81:
         a0:f7:0f:22:08:cb:46:52:6b:80:7c:f7:76:92:34:41:50:3a:
         f6:a6:75:47:a9:24:b3:87:d9:04:ec:3d:4a:52:dd:08:e5:fc:
         11:c8:19:4b:e6:11:0f:c5:14:30:dc:d3:35:f4:ae:05:70:12:
         77:03:c5:ed:93:06:9c:a3:c1:b2:4d:64:d5:be:08:fe:9d:f9:
         7b:52:2b:e2:50:e6:ff:a4:74:58:1b:4f:a1:6d:a8:c0:e5:df:
         ae:76:0b:d9:ce:f1:e9:b8:18:ec:9e:60:8d:2e:84:b9:55:72:
         e1:38:47:b3:02:dc:bf:d9:a9:83:39:2a:09:4e:b1:04:29:e2:
         cc:19:fc:dd:47:d7:ae:be:0c:9c:f1:78:31:c2:64:2f:40:63:
         d2:56:12:92:38:11:23:d3:25:51:62:31:2c:22:ba:16:c6:c1:
         42:7e:85:3f:44:de:13:82:4f:09:54:db:ed:03:7f:89:1a:90:
         b0:c5:9f:8c:78:04:a0:b9:0d:6e:8d:2a:1c:62:df:69:5a:0a:
         93:7b:a8:05:a3:70:60:17:c1:de:47:d0:0e:99:85:3d:a7:3f:
         11:00:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:24:02 2024 by rpki-client on console-fra.rpki-client.org